$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: Amultrr1LXlSLy+CLLSyIsOmbqzgEk60jVzGGfkEtTE= Subject key identifier: A3:14:47:E2:B4:9D:9A:9C:F0:7F:C3:95:61:5A:87:D7:4B:B8:D0:4F Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0BA1 Signing time: Wed 10 Sep 2025 19:10:23 +0000 Manifest this update: Wed 10 Sep 2025 19:10:23 +0000 Manifest next update: Wed 17 Sep 2025 19:10:23 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: Ahg21QinJG3k97Lvl+j7sRsElmd3+PUyuxmrPajqAx4=) 2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=) 3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=) 4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=) 5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 19:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Sep 10 19:10:23 2025 GMT Not After : Sep 17 19:10:23 2025 GMT Subject: CN=68c1cd1f-f0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:8e:27:bb:5d:bb:9b:4b:57:26:c9:68:e3: 2d:75:4c:9c:50:56:af:86:91:59:47:72:2d:9b:b7: 14:b1:d5:ff:10:54:d4:d7:de:55:ba:a0:11:a6:fb: 89:8a:e4:57:b8:ca:7e:8f:43:fe:23:60:4d:a7:1a: a0:cf:4b:06:30:bb:fd:fd:66:87:26:cd:2c:cd:9c: 8d:1a:c9:96:b1:f1:da:d9:2f:5d:ed:71:6a:ff:47: 6d:37:65:21:e9:b8:3c:9b:f6:eb:40:7a:2a:cf:27: 9f:86:08:5d:e5:0f:b6:b1:bd:dc:78:97:0c:59:90: 23:f0:14:85:a2:fe:19:b9:9f:db:49:b9:52:fb:7c: 39:9b:f2:5a:38:aa:16:70:a0:2c:06:dd:a1:c6:94: bc:5b:86:b5:0d:ea:1c:a3:28:9e:5c:16:56:37:e3: 8c:3b:59:a8:6b:6b:94:82:cd:a3:03:bb:de:12:1b: ad:d3:36:e6:96:f7:b7:59:30:02:ad:6c:72:ef:c8: f4:49:0b:11:46:e4:e7:3d:14:19:9b:a3:c4:e5:0c: 26:13:10:bc:58:c3:aa:68:43:4d:af:d9:c7:9a:af: 45:c5:bf:a6:96:dd:28:cc:c5:58:7b:30:a8:a4:1c: 6f:2d:71:2a:3f:ca:4b:42:a6:2d:82:01:05:0d:1c: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:14:47:E2:B4:9D:9A:9C:F0:7F:C3:95:61:5A:87:D7:4B:B8:D0:4F X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:91:9a:5b:40:b7:e9:d8:80:34:d8:9e:5f:96:8d:7e:8d: a4:44:d4:aa:b4:8f:70:e2:02:40:db:47:d4:cb:39:b4:b7:84: 01:d0:95:45:29:20:c8:d6:63:b0:1a:61:3d:99:0b:87:c3:82: d9:f6:81:61:38:94:b8:80:1f:c8:bd:41:4a:50:c3:4f:5a:2b: 6b:1f:4f:12:c2:c4:16:3d:fa:df:02:6f:23:8d:3c:8f:85:85: 95:15:36:c2:22:f4:cd:61:9d:41:eb:1a:e1:2a:0b:a4:b1:fc: b0:48:07:da:fa:ec:a6:d2:a1:ff:87:27:ba:8e:2f:79:c1:17: c1:4c:7b:35:0a:19:77:1a:e1:6a:ec:06:6c:2f:61:99:1d:36: 2c:85:f9:89:01:dc:6c:30:23:7b:41:e8:00:61:1c:7f:af:f7: 48:a7:9a:c5:31:1d:59:a4:ee:78:48:8b:e2:2a:d8:63:a7:f4: a5:67:d5:d6:59:d6:b4:da:00:08:76:7c:b7:c3:69:c7:2b:05: 8f:56:52:bd:e6:16:90:ad:8b:c4:7c:e7:68:cf:8c:3e:24:7b: 65:1d:22:3c:ad:4e:ef:06:55:ee:14:15:48:06:e0:f4:ac:ca: 45:70:63:2b:41:80:70:fa:e9:82:ca:4f:ce:1f:87:7a:66:bc: 5d:c1:c3:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUwOTEwMTkxMDIzWhcNMjUwOTE3MTkxMDIzWjAYMRYwFAYD VQQDEw02OGMxY2QxZi1mMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2iOJ7tdu5tLVybJaOMtdUycUFavhpFZR3Itm7cUsdX/EFTU195VuqARpvuJ iuRXuMp+j0P+I2BNpxqgz0sGMLv9/WaHJs0szZyNGsmWsfHa2S9d7XFq/0dtN2Uh 6bg8m/brQHoqzyefhghd5Q+2sb3ceJcMWZAj8BSFov4ZuZ/bSblS+3w5m/JaOKoW cKAsBt2hxpS8W4a1DeocoyieXBZWN+OMO1moa2uUgs2jA7veEhut0zbmlve3WTAC rWxy78j0SQsRRuTnPRQZm6PE5QwmExC8WMOqaENNr9nHmq9Fxb+mlt0ozMVYezCo pBxvLXEqP8pLQqYtggEFDRy0rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMUR+K0 nZqc8H/DlWFah9dLuNBPMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCISZGaW0C36diANNieX5aNfo2kRNSqtI9w4gJA20fUyzm0t4QB0JVF KSDI1mOwGmE9mQuHw4LZ9oFhOJS4gB/IvUFKUMNPWitrH08SwsQWPfrfAm8jjTyP hYWVFTbCIvTNYZ1B6xrhKguksfywSAfa+uym0qH/hye6ji95wRfBTHs1Chl3GuFq 7AZsL2GZHTYshfmJAdxsMCN7QegAYRx/r/dIp5rFMR1ZpO54SIviKthjp/SlZ9XW Wda02gAIdny3w2nHKwWPVlK95haQrYvEfOdoz4w+JHtlHSI8rU7vBlXuFBVIBuD0 rMpFcGMrQYBw+umCyk/OH4d6ZrxdwcMr -----END CERTIFICATE-----Generated at Thu Sep 11 12:17:24 2025 by rpki-client