$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: 9s8DW93CCSXvVRtjwUPpH2MexTYUD0pWloyVgfB9xyI= Subject key identifier: 50:DF:7B:A9:2E:CE:16:5C:F6:98:61:D3:F1:D5:2D:27:AA:D6:9F:A5 Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 121C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 1218 Signing time: Sun 24 Aug 2025 17:06:35 +0000 Manifest this update: Sun 24 Aug 2025 17:06:35 +0000 Manifest next update: Sun 31 Aug 2025 17:06:35 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: Kozyi1gJ1soJbnW6yf3u4RxrHx8wm0hyCwIDd9V74kA=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: K7HgxObw49ZENnGpFVCXkeOTW3f6OFaznJ55myfPQSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Aug 24 17:06:35 2025 GMT Not After : Aug 31 17:06:35 2025 GMT Subject: CN=68ab469b-7c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:31:94:15:aa:81:fe:f3:0f:ee:a6:d9:c0: d2:d0:08:de:77:7d:b8:67:8c:21:53:65:53:7e:6e: 3e:27:fc:93:e6:e0:3c:29:95:01:16:1f:d3:67:73: 2c:d1:b2:73:6a:db:d6:9f:03:60:76:54:a4:80:0f: 89:6e:df:7f:ef:eb:41:5f:29:b2:eb:30:fa:0e:1b: a3:7d:4d:94:93:fd:17:ca:a9:d9:f5:dc:ac:92:98: 6d:f4:df:c1:ff:a7:7b:00:01:b5:49:2e:a7:f7:a4: cb:2f:18:5b:89:b7:6a:31:43:a6:2e:1c:5f:93:76: b1:20:2b:6c:00:93:7b:50:8b:7f:da:79:37:fc:c4: 65:6a:2a:78:1e:dd:dc:da:10:a3:3f:7d:2b:83:a1: c8:28:67:c2:88:c1:c9:9f:6f:36:ef:fa:7e:f6:98: 6e:79:e9:b4:27:e6:39:75:d6:c2:1f:c8:ec:1a:dd: bc:1a:e5:d2:4f:97:fa:83:d6:a9:ea:07:8c:ea:45: ad:5b:a1:64:9c:de:53:a4:b5:58:d2:7f:e5:a7:11: 0c:62:c9:b4:95:07:4d:93:4c:fa:d5:61:30:4a:21: f4:cb:5f:99:55:d0:0c:df:2a:b7:19:e1:61:d7:13: 27:ea:17:c8:44:3d:57:4d:15:40:c9:a4:fe:0f:00: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DF:7B:A9:2E:CE:16:5C:F6:98:61:D3:F1:D5:2D:27:AA:D6:9F:A5 X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:09:39:df:a8:25:8b:14:c7:5a:95:c2:b1:69:6f:ab:1b: b6:ab:8d:d5:3a:96:21:65:dd:49:bd:57:47:78:10:9a:e5:a4: 2b:0d:4f:18:67:34:e6:ed:db:e7:b9:39:47:e6:c9:6a:cb:22: 66:dd:43:07:cc:81:f3:6d:15:be:f9:d5:67:68:b6:e5:06:bc: 62:91:cc:fd:3a:0c:d2:ee:12:c5:c5:83:7c:5f:51:cd:0b:c7: 4d:91:64:48:ee:ec:24:b0:93:dc:ae:6b:72:6e:f0:16:bf:07: 2a:11:7c:7f:4e:2d:1c:e0:c6:bb:93:4a:e4:3f:c4:07:db:c7: a6:4d:12:4a:b5:18:19:78:6a:ab:1d:53:26:06:7e:c8:43:64: 4c:eb:48:bd:90:a2:94:cf:1b:ec:08:46:9e:47:cd:f6:1e:51: 33:48:07:0b:89:2b:b8:87:49:38:45:2d:70:a6:65:b8:67:56: 93:a6:a5:2f:b2:0c:4e:78:24:75:ec:d5:fd:45:df:99:b4:0b: 46:85:96:eb:a3:03:eb:43:b6:b1:4b:0c:d7:40:6f:55:0c:55: 5e:ed:5d:f2:41:66:4d:0a:b5:e9:cd:19:f3:4d:92:2a:44:59: f0:8f:59:4c:2d:69:92:2d:9d:6f:7f:60:b4:1f:eb:0c:97:cb: 72:ee:22:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUwODI0MTcwNjM1WhcNMjUwODMxMTcwNjM1WjAYMRYwFAYD VQQDEw02OGFiNDY5Yi03Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLMxlBWqgf7zD+6m2cDS0Ajed324Z4whU2VTfm4+J/yT5uA8KZUBFh/TZ3Ms 0bJzatvWnwNgdlSkgA+Jbt9/7+tBXymy6zD6DhujfU2Uk/0XyqnZ9dyskpht9N/B /6d7AAG1SS6n96TLLxhbibdqMUOmLhxfk3axICtsAJN7UIt/2nk3/MRlaip4Ht3c 2hCjP30rg6HIKGfCiMHJn2827/p+9phueem0J+Y5ddbCH8jsGt28GuXST5f6g9ap 6geM6kWtW6FknN5TpLVY0n/lpxEMYsm0lQdNk0z61WEwSiH0y1+ZVdAM3yq3GeFh 1xMn6hfIRD1XTRVAyaT+DwC0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDfe6ku zhZc9phh0/HVLSeq1p+lMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHuQk536glixTHWpXCsWlvqxu2q43VOpYhZd1JvVdHeBCa5aQrDU8Y ZzTm7dvnuTlH5slqyyJm3UMHzIHzbRW++dVnaLblBrxikcz9OgzS7hLFxYN8X1HN C8dNkWRI7uwksJPcrmtybvAWvwcqEXx/Ti0c4Ma7k0rkP8QH28emTRJKtRgZeGqr HVMmBn7IQ2RM60i9kKKUzxvsCEaeR832HlEzSAcLiSu4h0k4RS1wpmW4Z1aTpqUv sgxOeCR17NX9Rd+ZtAtGhZbrowPrQ7axSwzXQG9VDFVe7V3yQWZNCrXpzRnzTZIq RFnwj1lMLWmSLZ1vf2C0H+sMl8ty7iKn -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:10 2025 by rpki-client