$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: Z0X540nea7u7oS7w09q1jyGbDYMPCqfKUu5jt6uipIc= Subject key identifier: C2:C1:07:F4:CC:93:D6:C9:6B:A1:17:3C:9F:68:DB:26:D4:43:83:FB Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0B76 Signing time: Mon 08 Sep 2025 19:05:24 +0000 Manifest this update: Mon 08 Sep 2025 19:05:24 +0000 Manifest next update: Mon 15 Sep 2025 19:05:24 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: 595nmWQlKRRjbV3dBMm4gU+0FQ5Y9L8NaRFV4Nb4bT8=) 2: 83407C26744C11F0B13EF277C4F9AE02.roa (hash: sBHRf7Y2YfQS2HZYHc29+HH/hIPL3+9cJ6TB9Y9RHC0=) 3: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: oocbcY3iFDyepn5SUv3wuDXzWJtrjmxt4UkH5Dd68Ak=) 4: 843804BE744C11F0B13EF277C4F9AE02.roa (hash: WVu1M2pfONTzjQ7tQiNival/OyDU+Y+z27/PrWnqEKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2956 (0xb8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 8 19:05:24 2025 GMT Not After : Sep 15 19:05:24 2025 GMT Subject: CN=68bf28f4-852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:81:f0:18:de:4b:2f:07:34:81:ed:0f:90: 86:9d:5a:1d:8b:50:ce:69:5e:46:21:10:c0:ef:b4: 8e:31:ff:a1:5e:cb:48:3a:a7:1b:19:f6:fc:27:b9: 28:97:f1:74:b7:7c:54:f7:ca:2f:3c:41:65:79:cb: 34:ac:20:55:93:d5:57:33:3b:84:e8:ca:f4:8a:d7: 1c:e5:b5:76:07:5c:b3:fd:bc:ea:77:82:a4:8f:d6: 06:ee:b1:18:99:88:0d:41:8a:28:ec:d4:2c:ce:e7: 7a:ed:1c:f7:84:eb:ec:2c:05:e0:fc:85:46:ef:5c: 4a:19:93:82:05:91:05:e2:42:01:d1:1c:69:f8:a2: ca:fd:23:c2:b6:27:6b:bd:b2:95:11:88:74:78:71: a1:4c:5e:d2:cf:99:27:b6:69:1e:49:94:36:bc:a2: 7e:53:10:48:44:1d:75:91:16:fd:ad:b3:0a:1d:d0: ee:bb:36:32:18:32:f8:5c:91:f6:ea:01:f3:83:d2: af:91:df:2d:9b:f5:6d:70:61:a0:31:63:07:1d:50: 24:93:e4:7a:60:f0:6f:c2:3a:ac:2e:23:28:ee:03: da:cd:d0:4e:be:99:11:fa:8a:18:e2:4a:c0:5b:7e: 92:b7:bc:d6:14:94:f0:c4:53:4a:6c:9e:52:4a:09: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:07:F4:CC:93:D6:C9:6B:A1:17:3C:9F:68:DB:26:D4:43:83:FB X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ac:bc:c5:c5:8d:a7:fc:60:21:98:42:3d:2e:8b:be:60:3b: 93:d3:6d:df:ea:64:90:bc:fe:d4:46:f8:45:5d:0f:7c:a2:e6: 05:a4:c9:31:11:17:50:ed:f1:67:19:36:c8:11:19:2f:08:cc: d5:dc:2c:79:20:54:d7:b9:3c:34:4d:0d:58:a2:2a:0d:8f:cf: d3:6d:89:fa:3b:a3:53:0a:21:07:25:30:5a:de:e8:a4:ad:d0: 72:37:4f:c5:be:7b:bd:0c:b0:61:35:e5:d3:11:8c:5a:dd:87: 5e:64:33:a2:60:c5:42:1f:97:f0:fa:0b:39:34:07:7e:cf:e8: d8:82:76:3f:11:56:42:0d:c4:42:41:02:ed:61:2e:f7:25:af: 97:51:f1:32:50:9a:11:56:27:66:cc:ca:30:35:73:d7:0e:9f: 6b:6a:20:b8:c9:48:d0:1a:c8:71:1f:4e:ba:e4:ed:13:dd:f2: 65:54:95:88:a2:f3:d1:58:6f:50:7c:4e:c9:be:0c:81:b4:c9: 1e:4a:c2:50:74:88:19:cf:56:64:26:d7:97:d7:fb:c0:44:ac: 07:02:bc:da:9b:1b:70:7f:7c:c0:91:87:a7:ef:8b:07:80:7a: 4f:8e:a9:b9:95:cd:66:b6:82:2c:e9:b3:28:d0:74:60:7c:2c: 18:5b:7a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwOTA4MTkwNTI0WhcNMjUwOTE1MTkwNTI0WjAYMRYwFAYD VQQDEw02OGJmMjhmNC04NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOSB8BjeSy8HNIHtD5CGnVodi1DOaV5GIRDA77SOMf+hXstIOqcbGfb8J7ko l/F0t3xU98ovPEFlecs0rCBVk9VXMzuE6Mr0itcc5bV2B1yz/bzqd4Kkj9YG7rEY mYgNQYoo7NQszud67Rz3hOvsLAXg/IVG71xKGZOCBZEF4kIB0Rxp+KLK/SPCtidr vbKVEYh0eHGhTF7Sz5kntmkeSZQ2vKJ+UxBIRB11kRb9rbMKHdDuuzYyGDL4XJH2 6gHzg9Kvkd8tm/VtcGGgMWMHHVAkk+R6YPBvwjqsLiMo7gPazdBOvpkR+ooY4krA W36St7zWFJTwxFNKbJ5SSgmBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLBB/TM k9bJa6EXPJ9o2ybUQ4P7MB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7rLzFxY2n/GAhmEI9Lou+YDuT023f6mSQvP7URvhFXQ98ouYFpMkx ERdQ7fFnGTbIERkvCMzV3Cx5IFTXuTw0TQ1YoioNj8/TbYn6O6NTCiEHJTBa3uik rdByN0/Fvnu9DLBhNeXTEYxa3YdeZDOiYMVCH5fw+gs5NAd+z+jYgnY/EVZCDcRC QQLtYS73Ja+XUfEyUJoRVidmzMowNXPXDp9raiC4yUjQGshxH0665O0T3fJlVJWI ovPRWG9QfE7JvgyBtMkeSsJQdIgZz1ZkJteX1/vARKwHArzamxtwf3zAkYen74sH gHpPjqm5lc1mtoIs6bMo0HRgfCwYW3oE -----END CERTIFICATE-----Generated at Wed Sep 10 19:41:16 2025 by rpki-client