$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: bw38BBQ2OONpnJhNp6gDyuCDxQafqG6KTqgQXAeIFm4= Subject key identifier: D0:41:6B:28:AB:4F:32:F7:CB:25:23:A7:46:66:DC:17:3C:36:56:A2 Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 3537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 34FC Signing time: Thu 04 Sep 2025 14:15:37 +0000 Manifest this update: Thu 04 Sep 2025 14:15:37 +0000 Manifest next update: Thu 11 Sep 2025 14:15:37 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: JmhWCyKNSlJOpB4R2YdyAAVYBEDQst91xsUrbHhsCpk=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13623 (0x3537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Sep 4 14:15:37 2025 GMT Not After : Sep 11 14:15:37 2025 GMT Subject: CN=68b99f09-dcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:3b:1e:94:dd:cd:57:0c:8e:75:26:30:45: b5:a9:2c:f4:9a:46:74:ba:38:0a:89:a1:41:d4:c1: 94:d3:4d:f0:38:7e:07:56:8a:5e:4e:a1:4a:70:38: 29:21:5c:17:5c:82:3c:4e:93:95:f5:63:3a:2c:4d: 07:e2:00:55:6b:b6:39:16:6c:60:9c:e0:91:09:8b: 6a:eb:6f:22:07:50:d7:b6:c0:55:cc:28:6b:9a:09: 4b:c1:32:df:f6:79:aa:c8:82:3c:9b:96:c8:d1:2e: c5:b6:79:c7:74:88:bc:2c:62:7e:22:0d:54:54:9b: 90:26:22:b1:35:58:bb:27:ef:3b:f0:ad:88:07:21: 38:dd:a9:96:5c:7e:6c:c1:b3:e1:f9:d2:64:ff:4b: 18:46:ff:04:e6:10:7c:35:8b:c3:d6:d9:97:95:2b: 70:28:c1:7f:7e:9e:b3:ad:b1:c3:e7:a5:c4:91:47: 21:00:6f:3e:12:52:d0:41:f7:b6:40:2e:9a:cb:8c: 85:73:1b:c9:47:b3:8a:f1:26:0e:e1:67:3d:c9:b6: 9d:2b:24:51:4c:21:c8:68:d3:8f:51:ba:2f:d6:a6: 6c:33:5b:de:23:a5:9d:04:b4:4e:4b:4e:71:da:e2: b1:2a:eb:9e:fc:b6:25:e2:6b:76:5e:7e:0f:e1:50: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:41:6B:28:AB:4F:32:F7:CB:25:23:A7:46:66:DC:17:3C:36:56:A2 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:17:47:60:9d:78:5c:e8:7b:20:04:24:1f:8c:59:2e:96:92: ec:cf:51:1b:94:b3:ad:60:d4:7a:ee:5a:c3:a0:1c:54:63:7d: 80:35:0d:8f:57:d3:f9:8a:99:ae:7c:76:d3:f0:36:f3:17:a7: 21:6f:d4:91:b2:17:46:84:00:bf:fd:b0:41:fd:bc:e3:94:33: ff:9f:39:40:82:67:88:75:b5:f4:d7:3a:90:45:28:bc:cd:ba: ba:92:51:95:77:e8:12:5f:a2:b7:c9:6a:d8:41:03:93:94:c0: cf:65:26:77:72:49:04:61:5d:da:71:b7:82:86:bc:80:73:79: 9b:2e:38:13:22:8c:bb:3c:82:a4:82:5a:69:13:f3:e9:b1:96: f7:55:04:bb:6b:ee:f5:d8:5d:12:ee:a8:ae:21:1a:07:75:fc: 93:c4:f4:2a:ba:91:0f:bb:2b:e7:d0:d2:f8:db:1e:3c:74:0f: 9a:d6:52:dc:76:db:bd:3e:3b:ac:ff:6d:2b:97:28:03:94:c5: 8f:5a:9e:75:ce:46:8c:36:c9:5c:32:33:ea:3a:f4:1d:a6:99: 68:8e:bc:7f:99:0a:c7:b3:2b:b2:ec:91:91:a8:f8:79:ac:2d: 5f:f3:e0:99:03:6e:5a:b5:4f:8b:b0:47:6a:14:94:b7:28:27: 48:83:f1:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUwOTA0MTQxNTM3WhcNMjUwOTExMTQxNTM3WjAYMRYwFAYD VQQDEw02OGI5OWYwOS1kY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fI7HpTdzVcMjnUmMEW1qSz0mkZ0ujgKiaFB1MGU003wOH4HVopeTqFKcDgp IVwXXII8TpOV9WM6LE0H4gBVa7Y5FmxgnOCRCYtq628iB1DXtsBVzChrmglLwTLf 9nmqyII8m5bI0S7FtnnHdIi8LGJ+Ig1UVJuQJiKxNVi7J+878K2IByE43amWXH5s wbPh+dJk/0sYRv8E5hB8NYvD1tmXlStwKMF/fp6zrbHD56XEkUchAG8+ElLQQfe2 QC6ay4yFcxvJR7OK8SYO4Wc9ybadKyRRTCHIaNOPUbov1qZsM1veI6WdBLROS05x 2uKxKuue/LYl4mt2Xn4P4VC0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBBayir TzL3yyUjp0Zm3Bc8NlaiMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXF0dgnXhc6HsgBCQfjFkulpLsz1EblLOtYNR67lrDoBxUY32ANQ2P V9P5ipmufHbT8DbzF6chb9SRshdGhAC//bBB/bzjlDP/nzlAgmeIdbX01zqQRSi8 zbq6klGVd+gSX6K3yWrYQQOTlMDPZSZ3ckkEYV3acbeChryAc3mbLjgTIoy7PIKk glppE/PpsZb3VQS7a+712F0S7qiuIRoHdfyTxPQqupEPuyvn0NL42x48dA+a1lLc dtu9Pjus/20rlygDlMWPWp51zkaMNslcMjPqOvQdpplojrx/mQrHsyuy7JGRqPh5 rC1f8+CZA25atU+LsEdqFJS3KCdIg/Fa -----END CERTIFICATE-----Generated at Sat Sep 6 08:27:12 2025 by rpki-client