$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: lhbP3Axd6cQUkGX6RUiZXruh+bfjCFLu0+RfZ26bw/o= Subject key identifier: 23:A9:BA:0C:96:C2:41:9C:7F:32:F4:44:68:14:11:21:2F:EF:1E:94 Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 141D Signing time: Sun 24 Aug 2025 18:36:31 +0000 Manifest this update: Sun 24 Aug 2025 18:36:31 +0000 Manifest next update: Sun 31 Aug 2025 18:36:31 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: cVOgyj4smVcyiWWXsnixu5GtKiDZTf/16T2dIwr2MLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Aug 24 18:36:31 2025 GMT Not After : Aug 31 18:36:31 2025 GMT Subject: CN=68ab5baf-8c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:c0:42:9d:1d:ed:c2:c3:32:42:d3:d4:13: 1f:0a:d2:9c:1a:ad:8c:a0:6b:78:d4:9a:ba:93:39: 15:8d:b6:25:87:69:3a:46:77:72:84:99:81:83:d9: 99:42:cf:17:4b:bc:79:28:5a:b8:35:00:be:ad:91: 28:92:99:72:df:83:e2:9a:81:a9:ba:31:b9:f8:12: 75:1a:d4:7f:f6:d8:c2:7b:07:a7:34:6f:35:69:ec: 27:24:5f:2b:3d:19:0c:d5:bd:5d:6f:3e:02:cf:7d: 48:ed:d0:2d:50:65:ca:43:5b:4e:60:6d:0c:61:33: 00:74:c6:50:a8:ea:78:0a:ab:14:d7:81:4f:8b:02: e9:e1:33:c5:df:d5:c7:e5:d7:97:f9:cb:6f:0a:9a: bb:f3:14:ef:87:76:a4:fc:5c:57:0b:4a:f7:84:81: 8b:ed:98:b4:52:65:6c:e6:14:a4:01:51:93:0a:e4: a8:91:2b:93:a6:1f:89:39:27:cd:3a:0b:1c:35:ad: 81:26:ba:58:1b:11:39:e6:53:8f:66:2f:d2:71:a7: c7:a3:4c:0a:9e:d5:ac:03:b4:b8:97:59:b3:11:17: ce:8f:94:85:e2:7e:b4:ec:84:56:c4:e7:cc:ac:e4: 2b:ed:6c:69:1e:3a:5b:aa:c8:90:e4:ff:71:29:ff: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A9:BA:0C:96:C2:41:9C:7F:32:F4:44:68:14:11:21:2F:EF:1E:94 X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:38:90:54:91:fa:ca:00:2c:cb:83:17:b2:11:6a:a3:04:ea: 76:98:c9:43:11:88:f8:78:56:3c:16:ad:8f:06:e9:ea:6c:2a: b5:52:30:9c:8e:e4:83:3f:72:f6:07:9a:82:e1:bd:97:4e:5a: 00:c9:39:75:5c:fc:ef:d6:22:36:b2:55:ad:c8:37:c4:e2:ea: f8:ee:63:71:f4:71:a7:b2:2d:84:68:86:a9:15:d2:85:b3:8a: 82:bc:02:04:38:58:30:1b:76:7f:e9:f2:33:0e:88:7c:9c:97: 20:5f:f5:d6:72:06:95:88:db:ed:d3:d9:39:fc:d8:6b:11:47: 2f:dd:03:57:54:9b:b5:42:ed:ad:1a:2e:33:25:48:c6:65:5c: 09:55:d5:0b:bc:0c:ad:9f:52:cc:c5:05:d4:a9:f9:28:f8:49: 7c:a5:ea:51:dd:f7:f8:e8:39:8d:a7:00:35:61:24:9c:b1:d6: 20:3b:43:69:c4:ea:f9:5f:01:89:6f:1d:e4:ba:b9:14:de:96: 03:7d:f7:bf:c8:19:3a:f7:57:9e:a0:9c:15:86:66:cd:cf:4e: e4:26:a8:99:ec:7f:e9:99:99:bf:76:54:13:98:73:26:5c:fd: 71:51:27:d2:8a:d8:26:f5:09:12:48:8e:9a:fa:19:8c:73:46: 00:3a:9e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUwODI0MTgzNjMxWhcNMjUwODMxMTgzNjMxWjAYMRYwFAYD VQQDEw02OGFiNWJhZi04Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yzAQp0d7cLDMkLT1BMfCtKcGq2MoGt41Jq6kzkVjbYlh2k6RndyhJmBg9mZ Qs8XS7x5KFq4NQC+rZEokply34PimoGpujG5+BJ1GtR/9tjCewenNG81aewnJF8r PRkM1b1dbz4Cz31I7dAtUGXKQ1tOYG0MYTMAdMZQqOp4CqsU14FPiwLp4TPF39XH 5deX+ctvCpq78xTvh3ak/FxXC0r3hIGL7Zi0UmVs5hSkAVGTCuSokSuTph+JOSfN OgscNa2BJrpYGxE55lOPZi/ScafHo0wKntWsA7S4l1mzERfOj5SF4n607IRWxOfM rOQr7WxpHjpbqsiQ5P9xKf+qJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOpugyW wkGcfzL0RGgUESEv7x6UMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFOJBUkfrKACzLgxeyEWqjBOp2mMlDEYj4eFY8Fq2PBunqbCq1UjCc juSDP3L2B5qC4b2XTloAyTl1XPzv1iI2slWtyDfE4ur47mNx9HGnsi2EaIapFdKF s4qCvAIEOFgwG3Z/6fIzDoh8nJcgX/XWcgaViNvt09k5/NhrEUcv3QNXVJu1Qu2t Gi4zJUjGZVwJVdULvAytn1LMxQXUqfko+El8pepR3ff46DmNpwA1YSScsdYgO0Np xOr5XwGJbx3kurkU3pYDffe/yBk691eeoJwVhmbNz07kJqiZ7H/pmZm/dlQTmHMm XP1xUSfSitgm9QkSSI6a+hmMc0YAOp5e -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:52 2025 by rpki-client