$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft File: LT4_u8fCsSzVNMi57TeG-2qlVQY.mft (raw, json) Hash identifier: etShK+JJ6QKuRzLBGOzuZG4VakxZb/mArnMoF5Vq00E= Subject key identifier: 0E:B3:A4:04:0F:53:98:C4:E6:A4:82:F7:43:C5:D8:F2:84:A5:08:14 Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft Manifest number: 2F Signing time: Mon 25 Aug 2025 08:17:00 +0000 Manifest this update: Mon 25 Aug 2025 08:16:59 +0000 Manifest next update: Mon 01 Sep 2025 08:16:59 +0000 Files and hashes: 1: LT4_u8fCsSzVNMi57TeG-2qlVQY.crl (hash: W0OwurOqWv4wVn3iYiNGczj/Qzrl5w25A8R6I6vuAVo=) 2: D055AA08480111F098A44B5CC4F9AE02.roa (hash: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Validity Not Before: Aug 25 08:16:59 2025 GMT Not After : Sep 1 08:16:59 2025 GMT Subject: CN=68ac1bfc-9e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:ca:2d:4f:7e:c9:9c:c1:3b:76:7b:d7:83: 28:14:0b:7d:b7:9e:ac:4c:b0:56:8f:f9:a3:4e:de: f9:d2:f0:89:55:39:01:bf:cf:06:c4:ec:15:ce:d9: 05:6d:ec:01:6c:9e:9a:48:ac:bb:b1:56:42:92:47: 52:3d:23:fe:1c:80:24:f3:a8:3d:05:71:ae:a9:ce: a0:dc:a3:8a:a6:60:57:42:53:67:aa:a9:c5:f5:b6: 7b:3a:c1:b0:70:f2:33:ca:49:46:80:1e:35:10:65: d0:f8:95:b2:83:c4:33:ec:67:18:e4:89:7e:3c:b7: b8:02:15:31:03:9a:de:07:ea:ab:9a:a9:20:4b:ee: 43:5f:9f:a5:fc:84:e9:53:bb:c1:7c:cc:b2:b8:b5: b1:e1:26:6b:16:dc:01:8f:0e:58:39:92:9d:56:b5: b3:4c:34:cd:f8:02:c5:24:2c:34:69:76:9d:cc:93: 05:b5:40:83:c6:6e:be:14:a8:23:fe:c1:18:cd:6d: 2d:97:fa:22:26:63:e5:75:09:59:39:3e:61:f1:3a: 91:04:cc:7a:3d:44:ed:19:21:ef:ec:f0:ad:09:9a: ba:47:48:dc:91:4c:50:13:61:7e:7a:ae:fd:b5:a5: 24:ab:11:9e:e2:24:5e:b6:a4:63:b7:97:c3:61:92: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:A4:04:0F:53:98:C4:E6:A4:82:F7:43:C5:D8:F2:84:A5:08:14 X509v3 Authority Key Identifier: keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a0:8c:d2:e1:ac:28:21:a9:86:38:78:25:e6:16:43:12:54: 26:e0:f7:1c:7e:c2:f2:06:3f:8c:5d:53:6a:c2:f6:97:29:2a: 12:39:1e:38:d0:56:91:90:43:93:4a:ea:41:7e:89:5b:57:65: e7:b3:ce:50:1a:8a:8a:86:a8:7a:9a:64:a0:a2:dc:c7:e2:49: f6:18:49:ce:2e:25:07:04:9d:1e:69:1a:4e:da:64:6a:15:09: de:18:94:a4:c7:57:98:fe:ea:2c:93:81:73:ba:16:b4:fe:25: a9:e7:d3:70:73:37:21:46:72:fb:ff:6a:3a:ed:1d:97:a2:aa: c1:43:b5:be:16:a6:64:22:7e:c2:02:85:82:10:11:8e:81:de: b1:19:13:d5:fc:cb:7a:13:3a:77:a5:24:08:f1:ae:9f:76:0b: 36:bc:73:db:79:e8:0e:90:6e:75:eb:73:45:da:bd:f2:23:29: 85:db:a4:d5:46:af:62:a3:ee:ee:0c:8c:f4:3c:3f:04:3e:93: 9d:11:65:2a:67:7d:ba:b0:1e:af:b3:45:d6:a7:67:96:18:a0: b9:ca:ac:a7:fa:f3:42:ee:da:d3:e3:d5:88:18:ef:90:4e:be: ef:71:4d:b0:10:43:90:b4:d9:27:f9:1f:d7:eb:44:b3:b5:09: 4c:7a:4b:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMkQzRTNGQkJDN0MyQjEyQ0Q1MzRDOEI5RUQzNzg2RkI2 QUE1NTUwNjAeFw0yNTA4MjUwODE2NTlaFw0yNTA5MDEwODE2NTlaMBgxFjAUBgNV BAMTDTY4YWMxYmZjLTllMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+oMotT37JnME7dnvXgygUC323nqxMsFaP+aNO3vnS8IlVOQG/zwbE7BXO2QVt 7AFsnppIrLuxVkKSR1I9I/4cgCTzqD0Fca6pzqDco4qmYFdCU2eqqcX1tns6wbBw 8jPKSUaAHjUQZdD4lbKDxDPsZxjkiX48t7gCFTEDmt4H6quaqSBL7kNfn6X8hOlT u8F8zLK4tbHhJmsW3AGPDlg5kp1WtbNMNM34AsUkLDRpdp3MkwW1QIPGbr4UqCP+ wRjNbS2X+iImY+V1CVk5PmHxOpEEzHo9RO0ZIe/s8K0JmrpHSNyRTFATYX56rv21 pSSrEZ7iJF62pGO3l8NhkqLXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDrOkBA9T mMTmpIL3Q8XY8oSlCBQwHwYDVR0jBBgwFoAULT4/u8fCsSzVNMi57TeG+2qlVQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzZBMkNFODgyNDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFQ0X3U4ZkNzU3pWTk1pNTdUZUctMnFsVlFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 QjM2LzZBMkNFODgyNDA4RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6 Vk5NaTU3VGVHLTJxbFZRWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6gjNLhrCghqYY4eCXmFkMSVCbg9xx+wvIGP4xdU2rC9pcpKhI5HjjQ VpGQQ5NK6kF+iVtXZeezzlAaioqGqHqaZKCi3MfiSfYYSc4uJQcEnR5pGk7aZGoV Cd4YlKTHV5j+6iyTgXO6FrT+Jann03BzNyFGcvv/ajrtHZeiqsFDtb4WpmQifsIC hYIQEY6B3rEZE9X8y3oTOnelJAjxrp92Cza8c9t56A6QbnXrc0XavfIjKYXbpNVG r2Kj7u4MjPQ8PwQ+k50RZSpnfbqwHq+zRdanZ5YYoLnKrKf680Lu2tPj1YgY75BO vu9xTbAQQ5C02Sf5H9frRLO1CUx6Sx8= -----END CERTIFICATE-----Generated at Mon Aug 25 23:17:05 2025 by rpki-client