$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: Z5UP63+vdrY9Hl44OMa0Cz2n1CUK0b/EupRFvrKVMOA= Subject key identifier: AD:9C:29:CD:B5:7C:24:18:74:8E:AB:4F:01:57:F0:80:27:B2:26:4F Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 96 Signing time: Wed 03 Sep 2025 07:07:18 +0000 Manifest this update: Wed 03 Sep 2025 07:07:18 +0000 Manifest next update: Wed 10 Sep 2025 07:07:18 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: xT1tRGv70Acntp7jFMb3Y7q7G97ZKAGR+FFa0QioPac=) 2: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: 3kK2PgqZkvV+Tke5YJ6lRXtuJEdURQG3ApvWLdCTm0Q=) 3: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: Ti8eJO2oAD+cInPnRMrFT32zgx0G9iPebdag3c53iUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Sep 3 07:07:18 2025 GMT Not After : Sep 10 07:07:18 2025 GMT Subject: CN=68b7e926-e29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:ef:83:5a:1d:1d:10:d9:49:15:1e:82:1a: d3:61:d1:4b:f9:ce:1a:7c:ca:0a:76:8c:b7:ca:35: e0:b3:ea:36:ef:7e:c2:91:ac:a9:70:63:42:ac:55: bc:cf:34:c0:3b:ef:ef:9f:68:65:c4:d8:f6:a2:f0: 82:13:a6:51:58:fa:c0:65:b4:44:73:35:fa:f3:1d: 47:16:07:ee:74:32:19:a4:ce:2d:b7:6a:4f:84:cf: e0:39:ac:34:25:db:63:ea:1d:d9:2d:3a:a9:a4:75: 01:44:3b:db:f0:aa:cc:60:a7:46:84:30:95:6a:5d: 80:0d:00:d6:d8:cc:74:a0:1c:00:2f:f0:2d:18:5d: a6:f1:73:8c:96:88:98:48:5b:cd:c0:bd:fc:2d:ba: ea:17:63:f3:c5:ca:27:d2:cd:89:9e:d7:4f:c9:54: 3e:43:78:27:a1:45:a1:37:76:0d:a0:d2:55:60:42: c7:58:2a:bc:e8:22:13:58:6d:cc:55:72:30:87:d2: 59:d2:a3:6b:a5:5b:09:b9:58:21:2e:87:54:48:19: 58:31:9c:b1:be:4a:d2:49:7d:b9:2d:d1:80:27:b7: 06:62:69:d5:e7:49:f4:53:a0:97:3a:06:65:f3:cb: 8a:49:d7:8f:21:e1:83:d8:55:17:df:c4:27:0f:0c: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:29:CD:B5:7C:24:18:74:8E:AB:4F:01:57:F0:80:27:B2:26:4F X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7e:96:75:b1:f6:10:e8:2b:23:6a:e8:f4:4a:1b:f3:e6:89: 57:ad:49:af:16:68:2b:3e:c3:62:00:88:ae:de:05:47:26:37: 43:a1:3e:92:29:48:26:f7:69:48:2c:29:0d:c5:03:25:af:f3: 13:40:07:37:ac:84:5f:e2:78:44:5f:40:0b:4f:13:48:4c:32: a4:74:c1:2e:d9:ad:b6:45:f4:9e:95:26:5c:73:5b:8f:c0:06: fb:18:4c:ee:bd:16:44:7b:b7:53:fd:ae:c2:2d:c5:1d:02:ac: 4b:69:55:69:6e:51:ab:be:1c:3e:9b:70:b0:f9:2a:71:21:1f: ca:47:d3:56:95:70:06:39:8f:a1:73:18:b7:55:c5:45:49:70: 32:24:22:f2:ab:63:bb:1f:88:ec:80:53:79:88:83:69:6c:3b: 75:26:2e:dd:95:ba:da:02:58:4c:97:f7:f8:65:0c:c7:70:47: 88:9b:ae:a8:55:30:a0:1d:92:e4:dd:0b:d4:14:d0:57:7a:f1: 88:9b:6f:3b:74:14:ff:f4:c3:f6:41:98:ef:b7:1c:d6:75:95: 05:b0:c3:7f:94:24:50:93:1a:b4:4a:60:ab:26:1b:3b:3a:d7: cd:a1:ea:27:40:eb:ae:f3:89:cf:8a:91:be:bc:99:90:a1:10: 0d:a5:f9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjUwOTAzMDcwNzE4WhcNMjUwOTEwMDcwNzE4WjAYMRYwFAYD VQQDEw02OGI3ZTkyNi1lMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppLvg1odHRDZSRUeghrTYdFL+c4afMoKdoy3yjXgs+o2737CkaypcGNCrFW8 zzTAO+/vn2hlxNj2ovCCE6ZRWPrAZbREczX68x1HFgfudDIZpM4tt2pPhM/gOaw0 Jdtj6h3ZLTqppHUBRDvb8KrMYKdGhDCVal2ADQDW2Mx0oBwAL/AtGF2m8XOMloiY SFvNwL38LbrqF2Pzxcon0s2JntdPyVQ+Q3gnoUWhN3YNoNJVYELHWCq86CITWG3M VXIwh9JZ0qNrpVsJuVghLodUSBlYMZyxvkrSSX25LdGAJ7cGYmnV50n0U6CXOgZl 88uKSdePIeGD2FUX38QnDwy2nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2cKc21 fCQYdI6rTwFX8IAnsiZPMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfpZ1sfYQ6Csjauj0Shvz5olXrUmvFmgrPsNiAIiu3gVHJjdDoT6S KUgm92lILCkNxQMlr/MTQAc3rIRf4nhEX0ALTxNITDKkdMEu2a22RfSelSZcc1uP wAb7GEzuvRZEe7dT/a7CLcUdAqxLaVVpblGrvhw+m3Cw+SpxIR/KR9NWlXAGOY+h cxi3VcVFSXAyJCLyq2O7H4jsgFN5iINpbDt1Ji7dlbraAlhMl/f4ZQzHcEeIm66o VTCgHZLk3QvUFNBXevGIm287dBT/9MP2QZjvtxzWdZUFsMN/lCRQkxq0SmCrJhs7 OtfNoeonQOuu84nPipG+vJmQoRANpfnP -----END CERTIFICATE-----Generated at Thu Sep 4 14:01:10 2025 by rpki-client