$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: sW4ELk9+RTHJgkrRabMJsIbQD1wuJqmHMPpAXVJrneg= Subject key identifier: E9:A1:80:DB:18:C7:2D:E3:BC:23:88:6A:47:23:F8:93:DE:88:FD:65 Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0BB2 Signing time: Fri 22 Aug 2025 19:06:06 +0000 Manifest this update: Fri 22 Aug 2025 19:06:05 +0000 Manifest next update: Fri 29 Aug 2025 19:06:05 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: KCBTzy+TRlAkrySdSpypBqIr5vhOssfwpwWZdBU1IJo=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Aug 22 19:06:05 2025 GMT Not After : Aug 29 19:06:05 2025 GMT Subject: CN=68a8bf9e-909c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:fc:6f:c3:93:63:ab:ad:12:b6:9e:ca:66: 40:1c:41:15:1d:ae:f8:d7:96:87:f2:54:0b:05:b1: 8c:3f:9b:62:9d:e7:d3:a6:a6:8d:3a:f1:80:af:e5: 28:35:0c:68:79:e3:74:cf:a6:f9:e3:9c:d8:a4:36: 7f:6c:e1:00:f5:39:b3:e8:7f:32:af:ba:b7:85:b8: f9:32:a6:49:78:7c:3a:e8:b8:c9:e7:64:72:95:9f: ad:e0:73:3b:ba:34:f0:a5:ca:3e:b2:49:7a:e5:ae: a8:4f:69:e3:37:1f:85:c8:1d:ce:cf:c2:86:67:cc: 47:62:7f:ef:42:6b:bd:f1:8a:bf:e5:2f:a2:63:6f: 0a:45:ce:5f:e4:7b:06:c2:d1:7f:f2:3f:25:8b:42: b8:51:46:71:96:72:6d:f1:3f:d0:85:05:20:7f:50: 46:9b:a5:d5:68:78:c5:8c:90:7f:54:37:2e:a2:ed: 9a:c4:8a:0c:68:b1:47:b3:ac:4f:80:f1:87:de:a8: 55:cc:44:6e:57:9a:65:7b:80:67:cf:8c:91:9d:ef: fc:e5:fa:2c:bf:30:1f:3a:37:b8:b5:33:67:d5:39: 61:c5:f1:42:a9:88:77:17:0f:da:6d:ba:18:de:fa: 95:e9:4e:ae:ad:76:ca:78:4e:47:e5:9e:45:6b:6e: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:80:DB:18:C7:2D:E3:BC:23:88:6A:47:23:F8:93:DE:88:FD:65 X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7d:b9:8b:b5:ee:c5:86:9d:fc:54:df:81:b2:83:1f:da:df: 72:4f:8f:6d:64:7c:45:ea:13:da:0c:3c:ba:ea:2e:40:5e:8c: e9:33:09:f6:92:a8:3b:5a:55:7e:d4:db:7d:44:18:48:38:be: 47:4e:46:01:e8:96:50:aa:ed:0a:ba:ca:5b:28:20:79:72:23: 66:ba:48:0c:8f:69:82:e1:4e:7d:36:37:1c:46:30:42:8a:9e: ca:d3:71:9c:a7:61:63:ad:01:7e:56:c6:e0:ef:44:0d:ce:86: 5b:a7:70:e2:63:c1:19:8b:4a:21:cc:87:c7:fe:4b:4d:71:c0: 1e:80:96:b3:85:ab:03:09:e9:8e:a8:d4:8e:09:ce:5f:0f:b9: a7:ad:4a:a5:bf:fb:95:cd:28:07:22:99:55:35:06:cf:89:60: 09:34:a6:10:39:fb:5b:92:1c:ea:8d:ce:44:cf:7a:13:66:1d: f5:2b:b0:9a:a6:9f:b2:6e:4f:10:57:56:dc:8a:df:c4:4e:09: b8:7c:ed:97:34:e6:54:54:9f:12:63:78:69:8f:cd:cc:f4:67: 06:eb:c6:8b:5c:46:08:fe:62:9a:5c:c5:12:78:6c:96:b6:f4: b4:71:9e:50:03:a1:25:75:1d:c8:2f:86:33:0f:61:82:07:93: 56:8e:d5:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwODIyMTkwNjA1WhcNMjUwODI5MTkwNjA1WjAYMRYwFAYD VQQDEw02OGE4YmY5ZS05MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbr8b8OTY6utEraeymZAHEEVHa7415aH8lQLBbGMP5tinefTpqaNOvGAr+Uo NQxoeeN0z6b545zYpDZ/bOEA9Tmz6H8yr7q3hbj5MqZJeHw66LjJ52RylZ+t4HM7 ujTwpco+skl65a6oT2njNx+FyB3Oz8KGZ8xHYn/vQmu98Yq/5S+iY28KRc5f5HsG wtF/8j8li0K4UUZxlnJt8T/QhQUgf1BGm6XVaHjFjJB/VDcuou2axIoMaLFHs6xP gPGH3qhVzERuV5ple4Bnz4yRne/85fosvzAfOje4tTNn1TlhxfFCqYh3Fw/abboY 3vqV6U6urXbKeE5H5Z5Fa26bcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmhgNsY xy3jvCOIakcj+JPeiP1lMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAufbmLte7Fhp38VN+BsoMf2t9yT49tZHxF6hPaDDy66i5AXozpMwn2 kqg7WlV+1Nt9RBhIOL5HTkYB6JZQqu0KuspbKCB5ciNmukgMj2mC4U59NjccRjBC ip7K03Gcp2FjrQF+Vsbg70QNzoZbp3DiY8EZi0ohzIfH/ktNccAegJazhasDCemO qNSOCc5fD7mnrUqlv/uVzSgHIplVNQbPiWAJNKYQOftbkhzqjc5Ez3oTZh31K7Ca pp+ybk8QV1bcit/ETgm4fO2XNOZUVJ8SY3hpj83M9GcG68aLXEYI/mKaXMUSeGyW tvS0cZ5QA6EldR3IL4YzD2GCB5NWjtXW -----END CERTIFICATE-----Generated at Sat Aug 23 03:26:14 2025 by rpki-client