$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: 6xwZzrTUm3zM60oRKJv3TI3tPTZVnHIeEJt5tgohLu8= Subject key identifier: 89:C8:B1:A2:CF:C4:8B:64:D8:75:79:B6:02:7F:F6:4E:BD:F6:09:3D Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: D4 Signing time: Fri 01 Aug 2025 07:02:26 +0000 Manifest this update: Fri 01 Aug 2025 07:02:25 +0000 Manifest next update: Fri 08 Aug 2025 07:02:25 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: kFrk6reSAhcoadEk7JF9ZgXCJ10qYtYiqYO7/FK9WRA=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Aug 1 07:02:25 2025 GMT Not After : Aug 8 07:02:25 2025 GMT Subject: CN=688c6681-03e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:76:50:79:14:40:70:0d:bb:a9:54:e5:e2: 44:b1:42:e8:33:56:6a:eb:f7:b3:80:2e:b5:b4:60: ee:64:65:a9:92:d7:54:c4:3f:d1:05:e6:c4:c6:15: 89:f2:df:37:48:54:e0:d3:7c:74:ab:f7:27:c6:12: 57:ea:71:18:d1:71:79:cb:c2:48:b6:79:6c:78:f2: 22:df:b9:b9:88:e1:d4:62:81:a1:99:84:81:02:d0: de:91:b1:ab:01:79:18:a3:fa:78:38:b1:b1:cd:af: 04:06:9f:3f:6d:9c:c4:53:57:6a:94:c3:d0:84:05: 0f:f0:f2:0a:c0:6c:ca:3a:87:b8:87:1f:01:71:d9: 24:ab:c8:a1:47:a0:2f:2f:99:13:97:12:7b:a0:10: c2:8c:d5:84:c3:f4:c1:d6:04:30:b0:9f:c2:ba:d5: 97:06:b4:89:68:32:60:4e:29:19:ac:6e:89:af:9b: cf:a6:1d:a5:bf:57:2c:47:8c:ba:a6:f7:fc:a3:6a: f9:a9:0f:4c:28:55:f5:7c:86:40:7c:7f:29:ce:88: 7c:d5:c3:db:19:94:70:a3:35:05:af:e5:9b:d7:6d: 81:e6:79:83:3f:db:f4:f5:b0:47:47:e5:08:82:c5: d7:10:d3:c4:f8:94:aa:e0:c2:1f:74:1a:94:01:72: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C8:B1:A2:CF:C4:8B:64:D8:75:79:B6:02:7F:F6:4E:BD:F6:09:3D X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a7:4e:5e:47:ab:0f:82:98:fc:e4:17:c1:09:75:f3:18:82: 4e:72:d8:14:15:f3:53:f2:d7:4f:c3:1e:2d:fa:5e:cb:df:05: db:94:b7:7c:b4:12:14:ef:f1:25:42:5e:15:8d:71:c2:64:0d: 51:34:14:f0:97:17:55:cd:2a:4b:79:fc:33:79:3c:48:f8:2f: d1:93:0e:17:5b:d2:7d:ee:b3:6f:64:c5:a6:5f:b0:47:9d:45: 53:5e:31:c4:9b:eb:a7:c1:21:e1:15:c2:d5:87:41:40:79:b0: a6:8d:e9:8f:0f:48:b9:be:2f:33:71:ca:bd:d7:62:30:61:5a: e2:b7:76:e8:77:f2:28:b3:72:f2:50:4e:50:df:ce:de:71:d2: 54:18:a9:b3:c8:25:96:e8:2d:8e:91:eb:bc:93:f2:5b:f5:fb: 5d:6e:bb:72:a3:7e:a0:9c:63:d1:97:aa:73:be:b7:41:10:b3: c2:65:58:81:7b:a8:31:5d:bd:d5:65:84:5d:ca:0e:5b:c9:4f: d8:47:4b:d7:b5:cf:73:3a:9d:d7:b6:32:63:51:2a:5b:f4:8f: 3b:3c:f2:33:10:d6:e0:7e:5d:89:73:de:d1:ad:03:90:6c:cc: d0:e8:cc:73:0c:28:08:c8:77:c9:68:c8:42:d2:a2:27:9a:b8: f0:cc:9a:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwODAxMDcwMjI1WhcNMjUwODA4MDcwMjI1WjAYMRYwFAYD VQQDEw02ODhjNjY4MS0wM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH12UHkUQHANu6lU5eJEsULoM1Zq6/ezgC61tGDuZGWpktdUxD/RBebExhWJ 8t83SFTg03x0q/cnxhJX6nEY0XF5y8JItnlsePIi37m5iOHUYoGhmYSBAtDekbGr AXkYo/p4OLGxza8EBp8/bZzEU1dqlMPQhAUP8PIKwGzKOoe4hx8Bcdkkq8ihR6Av L5kTlxJ7oBDCjNWEw/TB1gQwsJ/CutWXBrSJaDJgTikZrG6Jr5vPph2lv1csR4y6 pvf8o2r5qQ9MKFX1fIZAfH8pzoh81cPbGZRwozUFr+Wb122B5nmDP9v09bBHR+UI gsXXENPE+JSq4MIfdBqUAXK2HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInIsaLP xItk2HV5tgJ/9k699gk9MB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWp05eR6sPgpj85BfBCXXzGIJOctgUFfNT8tdPwx4t+l7L3wXblLd8 tBIU7/ElQl4VjXHCZA1RNBTwlxdVzSpLefwzeTxI+C/Rkw4XW9J97rNvZMWmX7BH nUVTXjHEm+unwSHhFcLVh0FAebCmjemPD0i5vi8zccq912IwYVrit3bod/Ios3Ly UE5Q387ecdJUGKmzyCWW6C2Okeu8k/Jb9ftdbrtyo36gnGPRl6pzvrdBELPCZViB e6gxXb3VZYRdyg5byU/YR0vXtc9zOp3XtjJjUSpb9I87PPIzENbgfl2Jc97RrQOQ bMzQ6MxzDCgIyHfJaMhC0qInmrjwzJq+ -----END CERTIFICATE-----Generated at Sat Aug 2 06:55:55 2025 by rpki-client