$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: TBqfXHFk23gaAMR1qxBAStAB5GdgkBWXoSxE/h3+6b4= Subject key identifier: 47:C4:2F:FD:29:1F:2D:75:A8:F0:62:AA:EE:17:D8:A2:B8:18:0E:92 Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: EB Signing time: Mon 21 Jul 2025 05:32:35 +0000 Manifest this update: Mon 21 Jul 2025 05:32:34 +0000 Manifest next update: Mon 28 Jul 2025 05:32:34 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: HmEh5GQzmYQ5VBWrcHSOIv3IEsDbngUBwbVVn8aHcVE=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Jul 21 05:32:34 2025 GMT Not After : Jul 28 05:32:34 2025 GMT Subject: CN=687dd0f2-bb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:59:6a:c2:ab:e2:32:82:b1:0b:b3:db:3a: e7:ee:81:80:a4:44:51:32:e3:28:21:23:b7:93:29: 9a:08:0a:c6:8d:4f:4d:85:01:50:81:46:e4:7d:c1: bf:a9:19:0a:cf:8c:0b:e4:b1:ca:a9:d5:a2:82:0b: 0e:42:33:71:ca:a5:cf:28:85:61:7c:cd:02:a3:fa: cb:b0:c5:8b:de:0c:93:e9:a3:76:7d:15:60:f6:d9: 09:39:a2:eb:f9:d3:c2:07:b2:23:11:dc:43:3d:61: cc:73:1a:e3:78:08:50:d4:4d:1e:05:a6:fa:61:cf: c3:fa:05:fa:d5:24:d7:50:31:d3:c1:4c:45:bd:53: 1b:f4:0e:34:48:b1:57:48:60:c5:ea:83:ab:8c:79: 2c:f3:d9:ac:bb:39:b3:44:9b:4d:b2:6a:aa:7c:1f: 46:3b:8e:6c:ad:80:a6:c1:8f:49:0d:b9:a5:05:c1: 60:55:b4:8e:06:16:f5:a9:86:e8:56:3e:ac:96:61: bd:f1:9b:bf:c2:0d:26:e7:eb:af:17:cc:41:86:6b: 8b:8e:da:96:87:e9:b7:b6:18:3d:83:6b:39:03:d7: 18:d1:6b:54:76:bd:e9:38:a2:27:d0:a8:0c:00:52: 58:2a:35:77:39:2f:86:0d:27:7b:97:c9:a0:e7:72: 85:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C4:2F:FD:29:1F:2D:75:A8:F0:62:AA:EE:17:D8:A2:B8:18:0E:92 X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:10:5d:c4:4d:04:b6:bc:17:81:0f:f0:5d:76:f9:17:9d:8c: c7:ac:94:74:d4:a0:a9:3f:f8:27:a9:ac:da:6e:c0:b7:26:ed: 0f:4f:04:12:16:6e:a0:f5:08:51:ed:a2:d6:d8:31:76:8a:ed: 0f:0f:b5:6e:36:1c:7b:50:11:7d:9b:ab:db:fd:2f:c6:f8:09: 41:9a:e1:67:0b:59:3f:f7:4b:cb:2f:20:3d:eb:f3:57:ca:8f: d9:af:58:96:70:c0:d4:8d:7e:68:44:a8:4d:84:db:af:5c:42: f6:3b:2d:4e:8a:46:82:e7:36:0b:fd:6b:1f:3a:4b:e3:6b:06: 82:84:61:3b:c6:1c:e1:2d:c8:7f:0d:a8:a2:b8:40:eb:fd:05: da:a2:c1:12:e1:3d:b7:c8:94:4c:20:95:61:f4:30:99:ca:95: 40:01:a0:72:5f:e2:38:f4:f8:b3:2a:2a:25:39:24:58:8e:cd: db:f3:01:aa:0d:e8:34:ee:d0:5d:ff:c4:5b:80:c6:c1:78:f3: 09:e4:74:69:16:05:82:7a:38:44:aa:cc:22:3f:54:ae:7a:02: da:14:f9:6c:41:07:9c:03:69:66:90:8f:39:cf:8d:4d:3a:f0: 76:be:29:f1:a2:a8:39:d8:8a:48:51:ef:a5:63:1b:c2:3b:ae: 8f:41:4c:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUwNzIxMDUzMjM0WhcNMjUwNzI4MDUzMjM0WjAYMRYwFAYD VQQDEw02ODdkZDBmMi1iYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1NZasKr4jKCsQuz2zrn7oGApERRMuMoISO3kymaCArGjU9NhQFQgUbkfcG/ qRkKz4wL5LHKqdWiggsOQjNxyqXPKIVhfM0Co/rLsMWL3gyT6aN2fRVg9tkJOaLr +dPCB7IjEdxDPWHMcxrjeAhQ1E0eBab6Yc/D+gX61STXUDHTwUxFvVMb9A40SLFX SGDF6oOrjHks89msuzmzRJtNsmqqfB9GO45srYCmwY9JDbmlBcFgVbSOBhb1qYbo Vj6slmG98Zu/wg0m5+uvF8xBhmuLjtqWh+m3thg9g2s5A9cY0WtUdr3pOKIn0KgM AFJYKjV3OS+GDSd7l8mg53KF1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfEL/0p Hy11qPBiqu4X2KK4GA6SMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMEF3ETQS2vBeBD/BddvkXnYzHrJR01KCpP/gnqazabsC3Ju0PTwQS Fm6g9QhR7aLW2DF2iu0PD7VuNhx7UBF9m6vb/S/G+AlBmuFnC1k/90vLLyA96/NX yo/Zr1iWcMDUjX5oRKhNhNuvXEL2Oy1OikaC5zYL/WsfOkvjawaChGE7xhzhLch/ DaiiuEDr/QXaosES4T23yJRMIJVh9DCZypVAAaByX+I49PizKiolOSRYjs3b8wGq Deg07tBd/8RbgMbBePMJ5HRpFgWCejhEqswiP1SuegLaFPlsQQecA2lmkI85z41N OvB2vinxoqg52IpIUe+lYxvCO66PQUxI -----END CERTIFICATE-----Generated at Wed Jul 23 02:06:01 2025 by rpki-client