$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: fiqtWBY+73mmSbur6Eq051Z13HtA+OljjZaQ/Q4vKUE= Subject key identifier: BA:D5:75:5D:6F:F0:30:6E:DD:AE:A2:0D:FA:8C:29:18:2C:B7:DD:9E Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 99 Signing time: Fri 05 Sep 2025 07:17:36 +0000 Manifest this update: Fri 05 Sep 2025 07:17:36 +0000 Manifest next update: Fri 12 Sep 2025 07:17:35 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: fyfKDGyY5QJ3fYqJNYJIfntdW7ow2pfuCJMnU9j4s+s=) 2: D5C48F3A87C711F0BC29E84FC4F9AE02.roa (hash: bdaLJLKxC3XF+4w/6l+lT4/RvdyraLqiIX8kq6B1wqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Sep 5 07:17:36 2025 GMT Not After : Sep 12 07:17:35 2025 GMT Subject: CN=68ba8e90-517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:51:59:f3:7e:8a:f2:6b:b0:6b:69:e7:ec: f7:e9:24:de:2f:fd:92:fd:65:fe:e6:32:84:08:db: 6a:2a:02:62:7f:3a:92:73:79:1e:3b:c7:d3:dc:1c: 9f:6e:03:3c:65:86:38:b3:b0:66:75:4b:56:fe:29: 5c:1b:d6:e3:c6:42:33:b3:e4:df:d0:2a:ed:50:e6: 0d:54:b6:26:ee:b4:7a:b9:b1:fa:12:13:48:76:22: a6:2b:25:97:e0:2d:c2:1e:eb:6f:55:73:d6:22:c5: 07:f6:64:7e:0c:7f:b0:c8:15:c4:82:89:e4:b0:c7: d8:39:05:2b:fb:bb:7b:0d:bc:54:0d:aa:95:fd:a8: 63:69:ec:e1:ab:46:86:a8:32:6e:53:13:d5:64:c7: 8f:76:cb:3c:37:da:ca:00:d2:97:74:eb:df:7d:c6: 56:eb:94:e2:d1:15:71:da:b7:64:e0:50:6d:4d:2d: d0:a4:a6:90:29:11:ba:11:81:8e:95:23:1b:d1:4b: db:f4:ee:b2:51:26:25:27:4b:9e:14:1c:ae:82:f7: fe:a3:b8:6b:13:54:43:ca:72:61:7d:ab:17:1b:cc: e8:df:3b:45:37:d0:09:8d:7a:24:8c:e9:e9:b7:6c: 5f:45:80:ef:b2:4e:14:6c:a5:66:c4:1f:f7:91:0a: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:75:5D:6F:F0:30:6E:DD:AE:A2:0D:FA:8C:29:18:2C:B7:DD:9E X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:20:14:92:99:bb:6a:4f:3a:41:c1:1c:c6:2e:a2:8f:28:06: 11:72:e8:cc:42:9b:da:0a:89:db:84:eb:75:df:18:28:f4:83: 70:f4:e9:a1:74:31:4b:6b:b5:32:32:46:dd:86:67:ec:b5:7a: 12:61:94:52:0d:51:98:2c:e9:01:e7:4d:1a:1b:b8:23:83:e2: ca:fa:e4:4a:c7:88:2f:4e:dc:23:70:4f:77:c3:19:56:3a:92: 68:d3:24:21:53:1b:28:0a:8c:cf:bc:b0:34:2a:9f:e2:34:ed: 05:bf:89:d0:37:90:19:40:5c:77:ec:70:02:e0:ae:68:2c:10: 2a:4f:57:55:a8:87:90:71:6d:18:26:60:7c:73:52:ec:54:94: 36:7a:b1:23:57:42:43:96:8e:f3:9f:f8:6d:73:5b:67:52:8a: a7:ad:5c:25:b2:68:0e:59:a9:65:c5:dc:43:9e:60:b8:6c:6e: a6:49:29:07:a6:7a:5f:1e:21:3b:07:c5:34:db:8e:5e:0e:f5: 6c:8e:62:f0:b1:50:66:9c:07:4f:44:e5:f1:dd:c7:92:37:91: 2a:09:61:98:49:68:2a:31:60:49:64:62:9d:22:7d:fa:2e:5f: da:01:12:7e:9a:d9:88:d2:c9:3d:2d:1c:c7:8c:cc:72:38:59: fa:98:7c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUwOTA1MDcxNzM2WhcNMjUwOTEyMDcxNzM1WjAYMRYwFAYD VQQDEw02OGJhOGU5MC01MTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxchRWfN+ivJrsGtp5+z36STeL/2S/WX+5jKECNtqKgJifzqSc3keO8fT3Byf bgM8ZYY4s7BmdUtW/ilcG9bjxkIzs+Tf0CrtUOYNVLYm7rR6ubH6EhNIdiKmKyWX 4C3CHutvVXPWIsUH9mR+DH+wyBXEgonksMfYOQUr+7t7DbxUDaqV/ahjaezhq0aG qDJuUxPVZMePdss8N9rKANKXdOvffcZW65Ti0RVx2rdk4FBtTS3QpKaQKRG6EYGO lSMb0Uvb9O6yUSYlJ0ueFByugvf+o7hrE1RDynJhfasXG8zo3ztFN9AJjXokjOnp t2xfRYDvsk4UbKVmxB/3kQpE5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrVdV1v 8DBu3a6iDfqMKRgst92eMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2IBSSmbtqTzpBwRzGLqKPKAYRcujMQpvaConbhOt13xgo9INw9Omh dDFLa7UyMkbdhmfstXoSYZRSDVGYLOkB500aG7gjg+LK+uRKx4gvTtwjcE93wxlW OpJo0yQhUxsoCozPvLA0Kp/iNO0Fv4nQN5AZQFx37HAC4K5oLBAqT1dVqIeQcW0Y JmB8c1LsVJQ2erEjV0JDlo7zn/htc1tnUoqnrVwlsmgOWallxdxDnmC4bG6mSSkH pnpfHiE7B8U0245eDvVsjmLwsVBmnAdPROXx3ceSN5EqCWGYSWgqMWBJZGKdIn36 Ll/aARJ+mtmI0sk9LRzHjMxyOFn6mHzy -----END CERTIFICATE-----Generated at Sat Sep 6 20:52:00 2025 by rpki-client