$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: PeQHQkFJuLv8pVHEB3KS69gl/LfmlVUNXU8kjTZyzL8= Subject key identifier: 97:67:63:D3:65:E7:F7:7A:5C:F3:F8:D5:C4:03:9A:3F:CD:27:CE:0D Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 34B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 34B0 Signing time: Wed 20 Aug 2025 15:18:08 +0000 Manifest this update: Wed 20 Aug 2025 15:18:08 +0000 Manifest next update: Wed 27 Aug 2025 15:18:07 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: LfsWzjiLXpnaJY33pQ7dCWlaDe2KIiFBmrgnHd+YENg=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Aug 20 15:18:08 2025 GMT Not After : Aug 27 15:18:07 2025 GMT Subject: CN=68a5e730-adf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:24:ce:e9:c6:b9:2f:e5:c2:ba:dc:ad:b0: 45:cd:b5:37:c6:c9:68:d8:9f:31:4c:1a:cc:f1:79: 9f:e9:9b:c4:d3:7d:e2:02:39:15:a8:9f:a1:45:ec: 23:30:67:dc:20:78:f5:28:94:ba:04:79:4b:e4:50: 7d:88:4f:78:38:1e:48:59:eb:08:09:52:ae:43:f3: 98:60:cf:5b:fb:8d:7a:b2:05:af:96:c6:5f:77:4b: 4f:84:ac:b5:5a:84:05:c4:f2:fb:85:82:25:bc:87: ca:13:f4:96:9e:ed:71:50:d8:85:12:a0:74:fa:0b: ce:90:28:46:db:c4:0c:cd:7c:c0:61:72:99:fb:32: 0b:a3:eb:6f:bb:e5:7b:8c:ad:8a:0b:35:c7:53:1c: 32:87:91:70:d4:c0:92:55:bf:f5:e4:be:d6:0a:6d: e5:ef:57:44:7d:46:08:16:f4:a0:dd:5e:48:6b:81: 2f:a9:d3:a3:18:e6:b7:5b:a8:bb:77:5d:68:8c:17: f0:0b:c1:be:e0:df:6c:15:fd:ba:1b:22:00:8e:26: bd:2f:65:c7:ad:1e:d4:66:b2:dd:55:4d:b5:b2:89: a8:4b:28:18:2b:b7:d0:52:88:6c:0b:42:25:1a:0b: 1a:ee:6c:58:a9:5c:5f:93:df:8a:ac:ff:be:ee:26: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:63:D3:65:E7:F7:7A:5C:F3:F8:D5:C4:03:9A:3F:CD:27:CE:0D X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ec:59:bd:ba:1c:fe:4d:7a:70:c3:ea:fc:b1:21:00:54:74: d3:95:39:cb:ff:c4:4b:16:45:38:b8:77:46:54:00:31:54:aa: 57:59:d3:b5:5e:c1:d9:cf:5e:c5:19:ec:ee:32:d0:93:81:7a: 75:3e:d1:ff:aa:8b:af:2f:4a:2e:ea:09:14:28:0a:5d:26:5c: 12:8f:7a:1b:1c:3f:88:55:77:64:c5:ae:c4:2c:2d:40:7e:ad: 85:f3:7a:e9:53:60:13:e3:8d:a1:ee:e7:50:2e:98:3c:c1:0b: 0e:e1:5a:29:b4:54:dc:15:81:a5:a7:a9:5a:7b:fd:4d:90:10: 97:02:4d:e2:0c:e2:3c:17:fc:4a:91:c4:00:7a:95:53:55:79: 5b:81:71:41:5e:fd:98:cb:35:4e:41:e9:2a:9e:9d:a8:58:a2: 1d:87:b0:cd:f5:2c:e1:b9:f6:ef:15:b9:a8:62:7b:53:ce:a5: d0:b1:b7:65:d8:51:c7:a2:75:5d:41:7b:bc:ff:c9:6f:bb:f5: 1a:a1:58:03:5c:a3:b6:db:72:42:d0:c7:36:15:90:37:7e:31: 34:05:b8:97:f8:e6:af:c3:83:8b:d2:f1:f1:3f:23:19:c1:3d: f0:21:4e:ff:1e:bb:fd:8e:f8:6f:7e:c3:2c:4d:50:6a:c9:e8: c7:91:9b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUwODIwMTUxODA4WhcNMjUwODI3MTUxODA3WjAYMRYwFAYD VQQDEw02OGE1ZTczMC1hZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD8kzunGuS/lwrrcrbBFzbU3xslo2J8xTBrM8Xmf6ZvE033iAjkVqJ+hRewj MGfcIHj1KJS6BHlL5FB9iE94OB5IWesICVKuQ/OYYM9b+416sgWvlsZfd0tPhKy1 WoQFxPL7hYIlvIfKE/SWnu1xUNiFEqB0+gvOkChG28QMzXzAYXKZ+zILo+tvu+V7 jK2KCzXHUxwyh5Fw1MCSVb/15L7WCm3l71dEfUYIFvSg3V5Ia4EvqdOjGOa3W6i7 d11ojBfwC8G+4N9sFf26GyIAjia9L2XHrR7UZrLdVU21somoSygYK7fQUohsC0Il Ggsa7mxYqVxfk9+KrP++7iZoGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdnY9Nl 5/d6XPP41cQDmj/NJ84NMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL7Fm9uhz+TXpww+r8sSEAVHTTlTnL/8RLFkU4uHdGVAAxVKpXWdO1 XsHZz17FGezuMtCTgXp1PtH/qouvL0ou6gkUKApdJlwSj3obHD+IVXdkxa7ELC1A fq2F83rpU2AT442h7udQLpg8wQsO4VoptFTcFYGlp6lae/1NkBCXAk3iDOI8F/xK kcQAepVTVXlbgXFBXv2YyzVOQekqnp2oWKIdh7DN9SzhufbvFbmoYntTzqXQsbdl 2FHHonVdQXu8/8lvu/UaoVgDXKO223JC0Mc2FZA3fjE0BbiX+Oavw4OL0vHxPyMZ wT3wIU7/Hrv9jvhvfsMsTVBqyejHkZsr -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client