$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: //KdtVlNNw5qTbThBByUoDRUZOep8+ibcEiBG/1cRhY= Subject key identifier: 3A:EF:61:4C:CB:28:E9:FB:46:C7:B6:EB:C8:E7:5D:A2:C7:05:B1:F0 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 01AA Signing time: Fri 19 Sep 2025 03:39:07 +0000 Manifest this update: Fri 19 Sep 2025 03:39:06 +0000 Manifest next update: Fri 26 Sep 2025 03:39:06 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: 9yMQ4/24/9QuSwRTknBDRSKaEb5l39nAXC6ajKWDNAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Sep 19 03:39:06 2025 GMT Not After : Sep 26 03:39:06 2025 GMT Subject: CN=68ccd05a-58f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:a3:50:ee:01:ba:ce:6f:10:0a:4c:37:4a: 69:72:db:26:e8:7a:78:17:0a:3b:0b:11:07:2d:b3: 1e:e2:1e:18:43:c6:38:03:2c:d5:ec:d5:7b:22:42: 80:d0:2a:2a:ee:fb:59:39:cf:b0:4f:ef:48:13:8c: fd:50:c0:6c:b5:94:7e:82:e9:4a:6a:c1:eb:3c:ae: 8a:d1:5e:b7:0a:1a:5e:0f:0a:de:b0:1e:5c:b2:28: cb:be:a7:f4:70:9f:a3:46:d0:22:17:37:4f:c9:3e: 19:d2:d1:57:3a:8a:4d:f2:44:34:90:98:54:18:7c: 1a:1e:fb:d6:01:cf:00:68:cb:ae:b2:00:29:92:61: bc:97:a5:6b:fa:d4:12:b8:2c:43:4b:26:cd:3f:dc: 8b:fd:fa:80:95:91:88:6e:ea:7f:3e:9c:65:32:75: 09:b5:b3:2d:1f:7e:18:f2:91:c2:7f:90:05:8a:c1: c9:7c:50:da:ae:c1:31:32:aa:2f:a9:5f:61:66:35: 41:be:96:74:03:c9:30:83:24:6d:61:bb:c3:f3:a6: 76:28:6a:87:c4:90:76:6d:52:41:ef:ea:45:c0:ab: 5d:ce:03:aa:10:d2:56:2c:b5:1f:9a:b9:ba:42:bc: 18:65:39:d0:5e:73:d7:20:b1:27:54:1a:71:f2:24: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:61:4C:CB:28:E9:FB:46:C7:B6:EB:C8:E7:5D:A2:C7:05:B1:F0 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:10:99:58:15:b4:1b:d3:d8:79:5e:59:e3:ab:51:5c:b3:d8: b3:e9:4f:ff:9b:aa:50:cf:24:0c:61:e4:be:41:c9:1c:58:21: a8:40:69:9c:ec:0f:2b:73:8e:d5:3c:ea:d0:45:8d:65:98:a6: 91:dc:60:45:50:b7:db:48:be:49:41:61:0b:25:cd:64:e5:01: 18:93:02:5d:52:4b:b5:7f:3c:f1:58:59:a6:13:63:7d:cb:f7: 4e:00:06:be:4f:dd:bc:f5:7f:1b:bb:18:65:a6:a5:4e:41:20: 20:66:d7:7a:5a:91:33:3b:8a:90:55:c7:3f:e7:9e:ae:12:b5: 38:c5:21:15:8e:5f:d7:cb:2b:03:6a:98:17:2b:d3:5a:cf:bd: 9a:01:e5:bd:2e:0f:73:d0:c3:d2:e5:ec:24:08:1a:9b:c1:5e: da:52:03:84:ff:7f:b9:dc:e3:5a:b8:cf:8b:a2:c9:d1:28:e1: 8c:23:9f:d4:9a:8b:2e:db:0b:2b:90:ca:8b:1c:5c:55:48:9f: ef:5d:aa:a1:42:d9:6c:be:ea:a2:91:fa:58:b9:2d:85:a5:21: 89:05:df:0f:3b:14:25:ba:9c:17:a5:5b:74:aa:ed:c9:21:c0: 15:ee:d4:c7:a5:13:94:e7:3b:e8:6a:7f:df:79:90:ad:59:55: ef:ac:7f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwOTE5MDMzOTA2WhcNMjUwOTI2MDMzOTA2WjAYMRYwFAYD VQQDEw02OGNjZDA1YS01OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uujUO4Bus5vEApMN0ppctsm6Hp4Fwo7CxEHLbMe4h4YQ8Y4AyzV7NV7IkKA 0Coq7vtZOc+wT+9IE4z9UMBstZR+gulKasHrPK6K0V63ChpeDwresB5csijLvqf0 cJ+jRtAiFzdPyT4Z0tFXOopN8kQ0kJhUGHwaHvvWAc8AaMuusgApkmG8l6Vr+tQS uCxDSybNP9yL/fqAlZGIbup/PpxlMnUJtbMtH34Y8pHCf5AFisHJfFDarsExMqov qV9hZjVBvpZ0A8kwgyRtYbvD86Z2KGqHxJB2bVJB7+pFwKtdzgOqENJWLLUfmrm6 QrwYZTnQXnPXILEnVBpx8iQmJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrvYUzL KOn7Rse268jnXaLHBbHwMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPEJlYFbQb09h5Xlnjq1Fcs9iz6U//m6pQzyQMYeS+QckcWCGoQGmc 7A8rc47VPOrQRY1lmKaR3GBFULfbSL5JQWELJc1k5QEYkwJdUku1fzzxWFmmE2N9 y/dOAAa+T9289X8buxhlpqVOQSAgZtd6WpEzO4qQVcc/556uErU4xSEVjl/XyysD apgXK9Naz72aAeW9Lg9z0MPS5ewkCBqbwV7aUgOE/3+53ONauM+LosnRKOGMI5/U mosu2wsrkMqLHFxVSJ/vXaqhQtlsvuqikfpYuS2FpSGJBd8POxQlupwXpVt0qu3J IcAV7tTHpROU5zvoan/feZCtWVXvrH88 -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:11 2025 by rpki-client