$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: oUxJUzsR2O36nikgnvBmOYDZg6p72tVboQRCY9Tws0E= Subject key identifier: 63:A0:9D:82:A2:CA:5D:89:B2:D2:62:B9:AF:B8:88:D1:79:6A:7F:8B Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0268 Signing time: Thu 11 Sep 2025 02:07:37 +0000 Manifest this update: Thu 11 Sep 2025 02:07:37 +0000 Manifest next update: Thu 18 Sep 2025 02:07:37 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: tdGBk//iCMtPsg1ngvlgDxeyGPVNP20bnucoUEeIc5U=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 02:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Sep 11 02:07:37 2025 GMT Not After : Sep 18 02:07:37 2025 GMT Subject: CN=68c22ee9-b22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:f3:88:03:45:a4:8d:b5:49:4c:7e:9d:fc: 25:31:bd:3e:c2:de:ad:7c:42:83:c4:e5:8d:41:06: 3f:b4:fa:8f:da:40:b9:4e:81:94:00:62:e8:91:00: c0:17:c7:d3:88:24:fc:2c:aa:d9:dc:e6:7b:e7:45: 5c:dd:db:b0:78:01:5d:66:91:5c:4d:a6:5f:c3:50: c5:c7:a0:2e:ae:bf:04:29:2c:d9:fe:02:fd:f6:1f: a2:7c:c5:4d:e9:31:e9:4d:e1:f4:a2:b6:e4:4d:6c: 44:f3:7b:54:3d:8b:c3:70:7a:a9:62:b4:1c:cb:a6: 54:82:4e:93:29:28:11:2c:8b:eb:8b:42:94:30:52: e0:13:37:22:26:ea:92:a8:c0:68:2b:cf:49:eb:dd: a5:f6:06:20:dc:be:e5:fa:a0:40:9b:0e:92:7d:4f: c9:cf:a7:f0:7d:74:80:55:3c:f9:95:f2:0e:39:76: 46:5a:d1:42:8c:b5:13:b5:48:08:df:2b:26:77:b6: 19:2e:0f:dd:2c:a7:cf:73:5c:6d:51:fd:99:a6:96: 91:a0:1a:3c:56:60:3f:c3:5e:32:2b:f6:9b:74:6f: d8:40:38:61:6b:fe:2f:13:d9:58:a6:b5:b0:75:54: 70:0e:6f:6c:2f:7e:f7:af:7f:63:84:8c:5e:98:f1: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:9D:82:A2:CA:5D:89:B2:D2:62:B9:AF:B8:88:D1:79:6A:7F:8B X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7f:c0:1b:79:9e:76:82:9c:3b:1d:94:c3:10:25:b5:46:5d: 34:08:0a:1f:be:c7:9d:08:52:0b:30:c0:1a:c2:a5:99:c2:1a: 29:5d:28:bf:56:88:e4:76:cf:5b:79:e3:df:8c:d1:51:13:7e: 69:4e:35:83:17:2a:8a:7a:e2:c8:6c:86:60:d1:02:a4:24:4e: ff:3a:19:8e:3c:b8:61:73:21:21:22:b0:cf:92:84:2c:82:08: f8:2d:d3:28:a1:46:68:47:fb:69:1e:0b:66:82:95:74:05:dd: 3c:8e:d1:80:62:3e:3b:03:58:d0:3b:01:86:a7:75:45:d9:cb: a4:21:8c:e2:ba:29:d1:1b:d3:3f:b0:0d:5a:7c:1f:36:07:89: 10:61:f3:a6:d3:61:3e:ee:3a:54:3f:5e:b3:2f:8d:a9:4d:86: 41:f2:06:94:db:10:a6:3b:c0:8f:bf:78:77:ae:3e:7b:fd:11: 06:8d:dc:cb:13:ba:3a:33:8f:10:da:87:4b:77:6d:64:57:2b: e0:cd:61:7c:7c:18:53:3d:2c:76:ad:3d:27:e9:86:82:84:3b: ff:21:ab:db:c5:02:88:53:12:a5:2d:0e:ab:cd:0c:de:37:5b: a0:d7:bc:27:12:e9:34:32:87:34:16:af:4c:0a:72:04:1a:d4: 1a:0c:c1:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwOTExMDIwNzM3WhcNMjUwOTE4MDIwNzM3WjAYMRYwFAYD VQQDEw02OGMyMmVlOS1iMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv07ziANFpI21SUx+nfwlMb0+wt6tfEKDxOWNQQY/tPqP2kC5ToGUAGLokQDA F8fTiCT8LKrZ3OZ750Vc3duweAFdZpFcTaZfw1DFx6Aurr8EKSzZ/gL99h+ifMVN 6THpTeH0orbkTWxE83tUPYvDcHqpYrQcy6ZUgk6TKSgRLIvri0KUMFLgEzciJuqS qMBoK89J692l9gYg3L7l+qBAmw6SfU/Jz6fwfXSAVTz5lfIOOXZGWtFCjLUTtUgI 3ysmd7YZLg/dLKfPc1xtUf2ZppaRoBo8VmA/w14yK/abdG/YQDhha/4vE9lYprWw dVRwDm9sL373r39jhIxemPG+7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOgnYKi yl2JstJiua+4iNF5an+LMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPf8AbeZ52gpw7HZTDECW1Rl00CAofvsedCFILMMAawqWZwhopXSi/ Vojkds9beePfjNFRE35pTjWDFyqKeuLIbIZg0QKkJE7/OhmOPLhhcyEhIrDPkoQs ggj4LdMooUZoR/tpHgtmgpV0Bd08jtGAYj47A1jQOwGGp3VF2cukIYziuinRG9M/ sA1afB82B4kQYfOm02E+7jpUP16zL42pTYZB8gaU2xCmO8CPv3h3rj57/REGjdzL E7o6M48Q2odLd21kVyvgzWF8fBhTPSx2rT0n6YaChDv/IavbxQKIUxKlLQ6rzQze N1ug17wnEuk0Moc0Fq9MCnIEGtQaDMHV -----END CERTIFICATE-----Generated at Thu Sep 11 10:55:47 2025 by rpki-client