$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: dhYB/siyFXZS3oK3WM9FCveuzRLpBfX+molzRTnpe5I= Subject key identifier: A4:85:46:E7:D3:D5:65:41:CE:FA:0E:A0:C6:69:C3:F3:2A:E5:06:55 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 052B Signing time: Thu 04 Sep 2025 23:57:27 +0000 Manifest this update: Thu 04 Sep 2025 23:57:26 +0000 Manifest next update: Thu 11 Sep 2025 23:57:26 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: 3IZmges1bWWv3a5iFDiu3yIRmB/iE4rIFq0g23J4aLs=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: c5X0bRS1v3BmM8+viPXYxx/gJz2nVR8k5o+BxqMhvNI=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Sep 4 23:57:26 2025 GMT Not After : Sep 11 23:57:26 2025 GMT Subject: CN=68ba2766-2e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:de:72:02:d4:27:7e:e9:c5:15:08:8a:c6: 65:4c:bf:ec:23:33:96:a4:6d:ab:aa:4b:ed:ec:44: 8f:8f:a1:f3:fd:64:3c:37:63:b2:86:c7:93:04:67: 30:a6:fe:3d:3f:4c:3b:ea:0c:c9:96:fe:e6:fe:be: 9f:1a:7a:64:a7:c1:a8:f1:84:d2:d9:c3:75:3a:9c: 89:71:c9:ee:79:db:a3:c3:34:55:d1:67:0e:70:c2: 35:fe:12:59:1e:d5:76:e5:ed:66:5a:3c:ba:ff:e8: 3c:d5:ce:98:d6:1f:d6:03:8d:f3:3d:b3:f1:99:68: 2c:91:30:01:dc:49:ea:05:c1:ae:7a:d2:7c:4b:ec: 70:aa:59:7d:ab:cd:e7:b7:b4:20:08:4d:cd:c0:99: bc:e2:12:d2:36:89:98:d3:1e:f7:cc:fc:72:b3:95: c9:b8:e2:db:8d:e6:9a:38:2e:e6:38:14:46:30:43: 2c:e8:42:89:76:66:39:db:50:d5:f5:97:e4:fb:97: 49:73:2c:3e:9f:4a:3e:40:de:b9:d0:a9:43:c0:64: 47:b9:5d:ea:98:3b:08:05:65:c6:f3:f4:01:f4:c6: 24:10:ff:87:07:63:27:14:b5:30:0e:28:09:47:15: 4d:fe:c3:1f:ca:26:07:a2:14:b5:4b:55:54:a6:76: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:85:46:E7:D3:D5:65:41:CE:FA:0E:A0:C6:69:C3:F3:2A:E5:06:55 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:40:49:80:71:9e:6f:6d:e6:58:62:01:59:05:6c:e8:83:da: 40:a6:d8:73:16:da:ce:12:8d:c6:4e:12:f4:32:f5:85:0e:7f: 79:c7:4d:82:46:fa:f9:80:41:d7:09:f9:d8:06:7f:ba:27:5f: 61:d2:3b:29:2a:a1:7d:5c:99:a0:12:6d:ce:d6:8f:1d:77:34: a5:65:ef:4c:cc:c7:d6:e3:22:ef:73:44:f8:5a:a8:ca:80:79: 9c:49:75:19:2f:f0:5c:4c:f2:a2:9f:7d:ef:b9:95:dc:b0:aa: cd:0c:9b:e0:c5:c0:d8:79:83:07:ca:85:b2:9f:2c:f5:37:dc: bd:74:e5:72:07:86:67:fa:47:e5:1f:c3:31:e5:e9:9a:66:c7: 72:91:fe:b3:4e:d1:fb:9a:d5:69:ef:39:6f:79:23:b3:ca:9e: 8b:86:f8:c0:95:36:3f:4f:45:fd:5f:9f:6c:f1:fa:8a:dd:87: b9:27:5f:12:dc:50:0a:1f:8c:af:15:68:9b:81:2d:6d:da:4f: 78:64:48:11:46:93:b0:a5:e5:d2:0f:74:a8:27:e2:41:9a:16: 24:ad:25:90:71:df:dd:c8:16:ea:d1:06:10:75:47:2a:4f:71: ab:d4:d6:99:99:fa:a3:fe:0d:a2:e9:fc:f2:3c:f4:c1:cd:ed: 11:0e:3b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUwOTA0MjM1NzI2WhcNMjUwOTExMjM1NzI2WjAYMRYwFAYD VQQDEw02OGJhMjc2Ni0yZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnrecgLUJ37pxRUIisZlTL/sIzOWpG2rqkvt7ESPj6Hz/WQ8N2OyhseTBGcw pv49P0w76gzJlv7m/r6fGnpkp8Go8YTS2cN1OpyJccnuedujwzRV0WcOcMI1/hJZ HtV25e1mWjy6/+g81c6Y1h/WA43zPbPxmWgskTAB3EnqBcGuetJ8S+xwqll9q83n t7QgCE3NwJm84hLSNomY0x73zPxys5XJuOLbjeaaOC7mOBRGMEMs6EKJdmY521DV 9Zfk+5dJcyw+n0o+QN650KlDwGRHuV3qmDsIBWXG8/QB9MYkEP+HB2MnFLUwDigJ RxVN/sMfyiYHohS1S1VUpnblGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSFRufT 1WVBzvoOoMZpw/Mq5QZVMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3QEmAcZ5vbeZYYgFZBWzog9pApthzFtrOEo3GThL0MvWFDn95x02C Rvr5gEHXCfnYBn+6J19h0jspKqF9XJmgEm3O1o8ddzSlZe9MzMfW4yLvc0T4WqjK gHmcSXUZL/BcTPKin33vuZXcsKrNDJvgxcDYeYMHyoWynyz1N9y9dOVyB4Zn+kfl H8Mx5emaZsdykf6zTtH7mtVp7zlveSOzyp6LhvjAlTY/T0X9X59s8fqK3Ye5J18S 3FAKH4yvFWibgS1t2k94ZEgRRpOwpeXSD3SoJ+JBmhYkrSWQcd/dyBbq0QYQdUcq T3Gr1NaZmfqj/g2i6fzyPPTBze0RDjvk -----END CERTIFICATE-----Generated at Sat Sep 6 14:15:45 2025 by rpki-client