$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: GGadX2dBdUF8//uPcoaoYDrjxMzxLaDk89/o4wc3hyo= Subject key identifier: 07:A3:2C:A8:B9:DC:38:C9:21:5B:3E:A5:92:69:86:E9:D4:83:76:23 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: F4 Signing time: Sat 23 Aug 2025 05:25:29 +0000 Manifest this update: Sat 23 Aug 2025 05:25:28 +0000 Manifest next update: Sat 30 Aug 2025 05:25:28 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: qjNVdJF1cGbiMIaLXX4Mov9DkV8O9vx0izttr+F7m4w=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Aug 23 05:25:28 2025 GMT Not After : Aug 30 05:25:28 2025 GMT Subject: CN=68a950c9-827c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:46:d1:b9:c4:e6:28:f4:1e:24:99:f8:83: a9:81:3c:6b:aa:f6:87:0f:61:97:66:d3:1d:29:a7: 0d:3b:df:41:84:a8:40:45:71:7e:f5:a4:34:c8:f2: 68:1b:ca:33:bd:6b:af:7c:c3:de:86:b2:4f:68:60: 92:69:cb:06:62:66:73:c6:bd:7a:b8:70:cb:e9:08: 57:8a:da:65:5a:57:94:d3:83:f2:59:71:e7:93:38: d2:c1:f9:5a:e7:30:99:d7:30:e4:0b:12:c8:57:ec: fb:5d:e6:0b:c7:01:6c:0a:78:74:4b:28:6a:05:5a: 63:83:e6:3b:68:c2:26:68:54:d4:c8:a9:95:94:df: 98:4f:70:96:b8:5d:d2:31:c4:c6:1a:30:a0:f0:58: 00:2b:7b:ad:21:14:e5:ae:c8:3a:fa:6d:53:50:5d: 85:cd:3a:bd:db:64:6f:18:17:9c:59:8e:37:31:ba: 7c:dd:8a:8e:ab:72:16:1c:c0:5d:25:58:4c:5a:52: c6:6f:18:f2:d1:3c:ad:39:b4:a8:67:82:50:b6:ca: ea:eb:62:52:f0:cf:47:49:14:b7:02:e9:91:cd:b0: 0d:2b:9a:cf:e2:79:81:38:f1:89:81:c3:9a:4e:87: d6:3d:39:88:b1:5e:91:68:cb:5d:eb:10:85:38:77: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:2C:A8:B9:DC:38:C9:21:5B:3E:A5:92:69:86:E9:D4:83:76:23 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c9:51:29:de:24:df:d5:f2:61:e2:db:15:9b:de:55:dc:8f: a4:18:55:42:f0:ec:1a:6d:fe:23:f3:b5:a3:83:c3:60:4a:80: fc:91:8e:35:82:c8:32:be:f5:00:78:bb:10:02:80:22:73:cf: e2:3d:8d:c8:e0:6f:68:8b:d1:d6:a7:39:28:49:d6:b4:4e:1a: 20:2e:ac:2d:53:9e:76:f5:d3:54:6d:c2:1e:6c:44:68:ad:4f: 66:4f:10:32:d2:ef:e1:97:59:2e:ea:92:23:41:1b:18:70:12: 52:96:47:f9:82:8b:8a:f6:f1:a0:de:8c:70:de:bf:74:68:13: 18:19:d3:19:b1:cf:5e:23:9e:d4:ea:5b:25:b2:46:56:83:20: 51:9d:de:91:8d:f2:39:cf:80:77:f4:bc:da:e2:fa:f2:a8:2d: 73:62:d4:71:99:e7:a0:9c:e0:9e:a0:6d:7c:71:38:69:e9:9a: d2:a7:d6:d8:0e:f3:1a:90:73:84:b1:94:3d:66:aa:5e:99:13: 5e:fd:61:f1:4c:29:f5:0c:06:39:90:2d:c0:5a:9f:ae:d6:f4: 08:29:58:7c:e6:5a:b7:08:41:be:8c:4d:aa:47:94:f9:68:17: 9c:1a:19:05:db:26:fa:71:35:24:50:55:a6:26:29:6c:02:74: 1c:fb:07:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUwODIzMDUyNTI4WhcNMjUwODMwMDUyNTI4WjAYMRYwFAYD VQQDEw02OGE5NTBjOS04MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyRG0bnE5ij0HiSZ+IOpgTxrqvaHD2GXZtMdKacNO99BhKhARXF+9aQ0yPJo G8ozvWuvfMPehrJPaGCSacsGYmZzxr16uHDL6QhXitplWleU04PyWXHnkzjSwfla 5zCZ1zDkCxLIV+z7XeYLxwFsCnh0SyhqBVpjg+Y7aMImaFTUyKmVlN+YT3CWuF3S McTGGjCg8FgAK3utIRTlrsg6+m1TUF2FzTq922RvGBecWY43Mbp83YqOq3IWHMBd JVhMWlLGbxjy0TytObSoZ4JQtsrq62JS8M9HSRS3AumRzbANK5rP4nmBOPGJgcOa TofWPTmIsV6RaMtd6xCFOHeB3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAejLKi5 3DjJIVs+pZJphunUg3YjMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWyVEp3iTf1fJh4tsVm95V3I+kGFVC8Owabf4j87Wjg8NgSoD8kY41 gsgyvvUAeLsQAoAic8/iPY3I4G9oi9HWpzkoSda0ThogLqwtU5529dNUbcIebERo rU9mTxAy0u/hl1ku6pIjQRsYcBJSlkf5gouK9vGg3oxw3r90aBMYGdMZsc9eI57U 6lslskZWgyBRnd6RjfI5z4B39Lza4vryqC1zYtRxmeegnOCeoG18cThp6ZrSp9bY DvMakHOEsZQ9ZqpemRNe/WHxTCn1DAY5kC3AWp+u1vQIKVh85lq3CEG+jE2qR5T5 aBecGhkF2yb6cTUkUFWmJilsAnQc+weC -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:35 2025 by rpki-client