$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: gz+FPnkPo3WOCTt5Pf06MTSwAkCpF6Pv27DXHyQSxsw= Subject key identifier: 92:7B:CF:6B:4B:25:6A:A5:2C:90:68:27:A1:72:6F:BD:8A:E5:DC:A6 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0913 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 090B Signing time: Mon 08 Sep 2025 20:20:25 +0000 Manifest this update: Mon 08 Sep 2025 20:20:24 +0000 Manifest next update: Mon 15 Sep 2025 20:20:24 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: 6jtwP/s7mRnKY1Ka3F57sCsfUN0AREHCvA6SaX+bDJs=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: CznDNzibfuN72mTm1dEEU/9+8bTnV0dxmZQmYKqdCoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2323 (0x913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Sep 8 20:20:24 2025 GMT Not After : Sep 15 20:20:24 2025 GMT Subject: CN=68bf3a88-c007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dc:c8:47:19:75:77:f7:d8:fa:2f:5d:0b:da: 5c:4a:0a:f6:aa:3b:dd:21:4b:bf:a6:64:66:de:cf: d4:0b:4f:e1:f9:58:73:c7:8d:35:87:eb:41:e8:a0: d0:d1:24:90:a9:08:76:84:18:ca:91:1f:9c:92:6c: 0a:86:bd:e6:bd:ac:1f:8c:28:48:41:73:26:20:3f: b3:6d:be:c9:ea:cf:55:f3:e6:c2:3f:0d:ac:11:fb: 93:84:b5:39:37:5b:26:ed:96:a8:b6:00:6d:e2:0c: 03:79:47:82:ae:d8:d2:9d:64:57:b5:4a:c1:49:b6: 75:c7:47:27:aa:98:78:20:8d:17:34:05:3f:3a:e2: 02:9a:bb:75:f6:09:27:c8:26:28:0b:8b:e0:64:48: c1:38:54:7c:9a:6f:43:db:64:8e:fa:bc:0e:68:ca: b2:9c:26:d2:81:4d:50:6d:99:37:2d:c2:1b:e3:94: e5:fa:d8:91:98:4a:df:f1:4b:a5:d1:39:d9:30:d9: 1e:fb:bf:d1:75:a6:71:55:c6:e9:da:6d:b8:26:c9: c8:71:b1:b3:d9:02:be:93:90:d5:92:24:a3:ed:e4: 03:ed:93:ef:b4:5f:c0:d7:5f:01:ed:5a:18:dd:34: 91:c1:89:f5:98:a5:3f:af:59:c9:ba:05:3a:ee:ef: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7B:CF:6B:4B:25:6A:A5:2C:90:68:27:A1:72:6F:BD:8A:E5:DC:A6 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:03:cf:61:79:27:4b:f1:70:63:72:f6:54:15:3e:f4:13:a4: 8f:e6:5b:9f:81:ee:e7:a7:ca:2e:39:1d:58:38:eb:a4:e2:cc: 97:75:39:94:93:6b:73:88:d5:80:9c:de:e5:34:e3:a7:55:1b: 00:0a:96:9a:66:ee:64:27:54:f2:cb:9d:79:64:e9:a2:f8:82: 14:24:12:e5:29:5c:0b:94:b5:a0:13:08:c2:0e:ce:c5:d9:d1: cd:22:75:f2:36:da:72:6a:26:29:96:56:fd:52:29:22:24:20: b1:83:e5:e7:4e:ae:59:d2:66:37:07:e8:25:6e:8c:c3:a8:47: b3:fb:57:83:fb:7a:cc:e5:15:e7:34:67:e4:c6:b1:cd:9f:3e: ab:54:6a:64:6e:b1:5d:63:be:fa:21:0d:a5:78:a7:aa:e2:dc: 60:7c:01:8b:fa:90:d2:8b:67:ce:a1:35:fc:50:29:dc:16:e5: 6d:b4:ed:e0:7e:82:2d:61:23:e7:29:31:59:5c:a2:a2:37:48: d1:4c:d4:dd:8f:9a:47:b0:ae:8e:64:82:c8:4d:e4:5b:6c:38: de:40:08:bb:4d:75:fa:6c:bd:67:fa:14:85:c5:7d:34:16:10: 4e:ce:fa:e3:05:42:8f:4c:e1:3a:0a:09:e7:ad:87:51:61:f4: a6:ff:f0:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwOTA4MjAyMDI0WhcNMjUwOTE1MjAyMDI0WjAYMRYwFAYD VQQDEw02OGJmM2E4OC1jMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dzIRxl1d/fY+i9dC9pcSgr2qjvdIUu/pmRm3s/UC0/h+Vhzx401h+tB6KDQ 0SSQqQh2hBjKkR+ckmwKhr3mvawfjChIQXMmID+zbb7J6s9V8+bCPw2sEfuThLU5 N1sm7ZaotgBt4gwDeUeCrtjSnWRXtUrBSbZ1x0cnqph4II0XNAU/OuICmrt19gkn yCYoC4vgZEjBOFR8mm9D22SO+rwOaMqynCbSgU1QbZk3LcIb45Tl+tiRmErf8Uul 0TnZMNke+7/RdaZxVcbp2m24JsnIcbGz2QK+k5DVkiSj7eQD7ZPvtF/A118B7VoY 3TSRwYn1mKU/r1nJugU67u9R9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ7z2tL JWqlLJBoJ6Fyb72K5dymMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8A89heSdL8XBjcvZUFT70E6SP5lufge7np8ouOR1YOOuk4syXdTmU k2tziNWAnN7lNOOnVRsACpaaZu5kJ1Tyy515ZOmi+IIUJBLlKVwLlLWgEwjCDs7F 2dHNInXyNtpyaiYpllb9UikiJCCxg+XnTq5Z0mY3B+glbozDqEez+1eD+3rM5RXn NGfkxrHNnz6rVGpkbrFdY776IQ2leKeq4txgfAGL+pDSi2fOoTX8UCncFuVttO3g foItYSPnKTFZXKKiN0jRTNTdj5pHsK6OZILITeRbbDjeQAi7TXX6bL1n+hSFxX00 FhBOzvrjBUKPTOE6CgnnrYdRYfSm//A+ -----END CERTIFICATE-----Generated at Tue Sep 9 02:41:58 2025 by rpki-client