$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: bpSHBblrumi78zSAYDgrxGN+lSGEWY/CuVusbb8BMXE= Subject key identifier: DF:C1:DC:50:E6:8B:9C:65:54:98:CA:89:17:15:D1:D9:6F:67:E1:69 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 095B Signing time: Sun 24 Aug 2025 20:16:16 +0000 Manifest this update: Sun 24 Aug 2025 20:16:16 +0000 Manifest next update: Sun 31 Aug 2025 20:16:16 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: ZfggZtUlvE03kGEZA6Qctvjq31el/Xdu0cKZzIIpyoY=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Aug 24 20:16:16 2025 GMT Not After : Aug 31 20:16:16 2025 GMT Subject: CN=68ab7310-3384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:77:e5:5a:1f:27:e7:c5:a7:01:8b:b1:85: 10:c3:d3:43:1a:0b:cf:7c:63:7a:f1:29:41:bc:bd: 65:fb:c9:04:c4:c6:a7:07:8b:07:cd:0b:5a:34:8c: a9:19:78:80:fd:c5:0c:2d:28:4d:93:d2:43:9a:77: 28:49:89:8c:fd:b9:ba:72:c8:8b:2c:0c:15:ab:b6: d1:d5:ea:81:b2:54:0e:55:ab:14:ed:01:e2:dc:d4: a3:e4:3a:ff:9e:3e:43:c1:81:67:a8:d6:af:a6:69: c5:a1:5d:33:ac:00:29:34:f8:63:23:e6:1a:fb:3e: 17:2f:d1:2d:cd:94:f9:65:e2:44:ff:0d:ae:91:11: 9b:e5:10:32:4f:5f:d4:79:bb:12:6c:36:32:40:0b: a6:58:7c:6b:28:ad:fc:7d:7e:d9:7f:d6:9e:b2:6a: 6a:8c:8e:50:98:06:35:3b:5a:e2:93:9f:f9:65:35: 17:0f:12:3c:c5:5c:36:38:e8:00:59:a1:f5:0b:69: c6:b3:89:6c:ab:37:18:91:b3:4d:3e:63:e8:ac:49: 86:c2:11:8e:47:9a:13:7f:65:ef:f2:16:90:c2:ef: ac:0e:1c:29:71:71:e7:43:7d:59:c0:6d:c0:5f:31: 96:1d:26:34:7b:23:64:bf:de:3c:df:8a:96:f4:f6: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:DC:50:E6:8B:9C:65:54:98:CA:89:17:15:D1:D9:6F:67:E1:69 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:99:14:52:6d:24:2e:7f:0c:fe:95:b5:0f:f2:de:07:1b:57: 24:20:e4:8d:f2:06:57:19:ac:2e:96:a6:b6:bb:37:92:ba:01: 34:59:80:34:0f:dd:41:fb:c9:38:72:41:bb:48:91:87:58:16: ef:63:48:c4:8d:fd:1d:5d:60:4b:64:b1:64:27:7a:3f:2a:7e: 4f:5f:b4:86:88:c9:ae:42:02:a8:67:73:41:14:7a:95:5e:21: 81:ac:56:9a:b0:28:57:83:b4:43:0f:e2:8e:90:82:26:1b:2a: 8b:02:60:f2:1a:1a:aa:f0:6e:d7:17:c0:2a:f5:9a:0e:5c:96: 96:18:7d:f1:84:04:44:1e:dc:4c:d6:fe:81:17:05:be:f4:33: 4a:15:7b:f3:ce:0d:ea:81:8e:e8:0e:cd:40:f8:8f:0b:1f:03: 73:ec:d7:a3:8e:a5:42:3f:30:c8:62:b0:1f:04:07:dc:86:a0: 21:e3:a8:9f:f0:6e:60:e8:39:55:22:0b:89:34:25:d2:e3:ca: c1:ac:cc:56:5a:3c:97:5c:72:4d:34:29:3d:7f:d7:9e:17:ff: 6f:80:98:42:ed:08:05:88:a5:46:e5:dc:f6:79:bf:30:3b:fd: 72:62:4f:26:c2:64:5b:d7:be:42:cb:d7:c1:a7:4d:2f:9e:4c: d7:46:72:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUwODI0MjAxNjE2WhcNMjUwODMxMjAxNjE2WjAYMRYwFAYD VQQDEw02OGFiNzMxMC0zMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CV35VofJ+fFpwGLsYUQw9NDGgvPfGN68SlBvL1l+8kExManB4sHzQtaNIyp GXiA/cUMLShNk9JDmncoSYmM/bm6csiLLAwVq7bR1eqBslQOVasU7QHi3NSj5Dr/ nj5DwYFnqNavpmnFoV0zrAApNPhjI+Ya+z4XL9EtzZT5ZeJE/w2ukRGb5RAyT1/U ebsSbDYyQAumWHxrKK38fX7Zf9aesmpqjI5QmAY1O1rik5/5ZTUXDxI8xVw2OOgA WaH1C2nGs4lsqzcYkbNNPmPorEmGwhGOR5oTf2Xv8haQwu+sDhwpcXHnQ31ZwG3A XzGWHSY0eyNkv94834qW9Pb4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/B3FDm i5xlVJjKiRcV0dlvZ+FpMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUmRRSbSQufwz+lbUP8t4HG1ckIOSN8gZXGawulqa2uzeSugE0WYA0 D91B+8k4ckG7SJGHWBbvY0jEjf0dXWBLZLFkJ3o/Kn5PX7SGiMmuQgKoZ3NBFHqV XiGBrFaasChXg7RDD+KOkIImGyqLAmDyGhqq8G7XF8Aq9ZoOXJaWGH3xhAREHtxM 1v6BFwW+9DNKFXvzzg3qgY7oDs1A+I8LHwNz7NejjqVCPzDIYrAfBAfchqAh46if 8G5g6DlVIguJNCXS48rBrMxWWjyXXHJNNCk9f9eeF/9vgJhC7QgFiKVG5dz2eb8w O/1yYk8mwmRb175Cy9fBp00vnkzXRnKW -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:16 2025 by rpki-client