$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: KUBFmN6wrM+S3VwTKosirOoe16VGnvRT+MRy1MG/IwM= Subject key identifier: 12:5B:81:44:53:4F:90:3F:E0:91:6F:4E:EC:A7:F2:F5:B5:3B:F7:25 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 1227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 1206 Signing time: Mon 08 Sep 2025 17:11:31 +0000 Manifest this update: Mon 08 Sep 2025 17:11:31 +0000 Manifest next update: Mon 15 Sep 2025 17:11:31 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: Wjho2artY4Pt0/9jX5rYLhZBVdIYEF0DruVQ1iaYUx8=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: nRERsNzlprKA9xVdUB5MTKCV5NYn4X6gB4JWqfSoRiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4647 (0x1227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Sep 8 17:11:31 2025 GMT Not After : Sep 15 17:11:31 2025 GMT Subject: CN=68bf0e43-fb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:0e:3c:75:ae:f5:f1:48:1b:a9:29:d3:90: 55:51:b7:22:c4:c2:35:8d:67:8c:22:d2:a0:1c:44: 2f:62:36:2f:70:5e:56:aa:f2:a2:f6:1d:43:dd:c8: 8a:2c:a1:94:f1:bc:0f:ae:8b:90:4d:52:d9:15:82: fa:52:64:5e:17:23:6e:22:da:0c:a1:5d:73:bb:a6: 2b:77:af:c4:17:aa:36:29:b4:5c:16:32:44:cd:1c: d5:e2:7e:29:fc:81:00:a6:ee:8f:2f:d7:ff:55:f3: e9:16:d3:c5:8d:10:be:6a:b9:1e:82:90:10:6b:61: 49:fe:4f:dc:57:4f:c3:48:f3:5c:24:a4:a3:2c:40: 03:08:17:04:89:3a:fa:25:45:24:fa:dc:f4:db:09: 0a:32:6a:59:b0:8d:ff:eb:33:b8:b5:ee:b1:49:3d: 67:f5:86:bc:4f:a7:3f:f5:32:30:11:9a:fc:b1:f7: 2a:9e:45:c1:c3:10:42:24:f7:9d:94:ab:66:4a:8f: 19:a9:9e:c9:ee:d0:33:29:b6:d4:86:ad:6d:87:be: f6:0d:7c:4e:5f:c7:3b:59:87:63:1f:b2:ad:bc:88: de:c1:2c:0a:23:c6:73:85:67:14:d7:d3:42:89:ef: bf:d2:b6:b7:32:41:01:c0:e5:6f:c8:eb:76:44:8a: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5B:81:44:53:4F:90:3F:E0:91:6F:4E:EC:A7:F2:F5:B5:3B:F7:25 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d6:44:41:45:fc:ab:f2:1a:b9:32:ce:d0:58:2e:1d:fe:c5: 1b:81:ed:ac:19:b8:fc:7d:aa:5a:ae:20:3f:aa:c7:a6:ea:87: 93:7b:e3:d7:10:3c:c1:be:d5:99:24:80:f4:24:cf:34:36:e8: a6:c2:7e:30:fc:e9:96:9a:53:5b:3d:71:10:76:55:d5:24:ee: ac:5c:77:44:c4:c9:7d:49:b1:b0:d2:5a:95:9f:a1:1f:a0:59: 39:7c:bc:76:7a:ee:82:80:a1:3b:ff:fe:bb:52:f4:bf:7d:79: 11:ab:cd:da:1e:18:39:21:8a:bd:3b:b4:d7:4a:af:12:ff:24: 3a:6b:d3:9a:2b:8f:ef:f6:4b:c9:90:66:56:78:00:dc:75:9b: 8a:d6:f1:70:00:83:7b:45:0d:be:3d:03:40:bf:7b:29:cf:73: e4:7c:ce:d8:95:c7:a3:49:d8:8b:42:ec:33:6a:f9:f7:56:35: 27:7d:69:e8:11:fa:d9:9b:de:0f:c6:66:a4:ab:43:22:96:55: 5f:05:53:91:cb:16:7c:e7:56:bd:16:a8:32:88:f0:e5:32:83: a3:56:1e:e0:ad:2f:dc:b6:c2:75:c3:db:e1:91:f8:45:76:5d: 73:cc:45:e7:4e:65:ba:18:56:df:99:59:d2:1c:e9:71:5a:5e: f3:ae:d8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUwOTA4MTcxMTMxWhcNMjUwOTE1MTcxMTMxWjAYMRYwFAYD VQQDEw02OGJmMGU0My1mYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9IOPHWu9fFIG6kp05BVUbcixMI1jWeMItKgHEQvYjYvcF5WqvKi9h1D3ciK LKGU8bwProuQTVLZFYL6UmReFyNuItoMoV1zu6Yrd6/EF6o2KbRcFjJEzRzV4n4p /IEApu6PL9f/VfPpFtPFjRC+arkegpAQa2FJ/k/cV0/DSPNcJKSjLEADCBcEiTr6 JUUk+tz02wkKMmpZsI3/6zO4te6xST1n9Ya8T6c/9TIwEZr8sfcqnkXBwxBCJPed lKtmSo8ZqZ7J7tAzKbbUhq1th772DXxOX8c7WYdjH7KtvIjewSwKI8ZzhWcU19NC ie+/0ra3MkEBwOVvyOt2RIpeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJbgURT T5A/4JFvTuyn8vW1O/clMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP1kRBRfyr8hq5Ms7QWC4d/sUbge2sGbj8fapariA/qsem6oeTe+PX EDzBvtWZJID0JM80Nuimwn4w/OmWmlNbPXEQdlXVJO6sXHdExMl9SbGw0lqVn6Ef oFk5fLx2eu6CgKE7//67UvS/fXkRq83aHhg5IYq9O7TXSq8S/yQ6a9OaK4/v9kvJ kGZWeADcdZuK1vFwAIN7RQ2+PQNAv3spz3PkfM7YlcejSdiLQuwzavn3VjUnfWno EfrZm94Pxmakq0MillVfBVORyxZ851a9FqgyiPDlMoOjVh7grS/ctsJ1w9vhkfhF dl1zzEXnTmW6GFbfmVnSHOlxWl7zrtip -----END CERTIFICATE-----Generated at Tue Sep 9 20:14:21 2025 by rpki-client