$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: GJbHiltAdsXr87i4LmCWMXE+NoKJmf3QvJjMj84okd0= Subject key identifier: BD:FE:3E:C3:2A:5E:1A:09:12:4B:5B:D0:68:9D:35:FF:D6:0D:DA:78 Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 0836 Signing time: Wed 20 Aug 2025 20:48:48 +0000 Manifest this update: Wed 20 Aug 2025 20:48:47 +0000 Manifest next update: Wed 27 Aug 2025 20:48:47 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: 9dtIMyIsfw6Dau7xRIVWkqNjirKR5TR33HuN+pfj5AI=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: Aug 20 20:48:47 2025 GMT Not After : Aug 27 20:48:47 2025 GMT Subject: CN=68a634b0-9654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:51:fc:09:e8:36:79:92:b9:01:eb:0c:cc: ab:4e:ea:11:d6:c1:3a:64:7a:ed:24:0b:3d:bf:12: 04:0e:36:94:dc:bf:7d:59:7a:f8:1c:6e:a2:89:08: 84:16:b6:93:8b:ee:ff:38:cf:af:fe:ba:9a:e2:64: ec:bd:3a:d2:6d:50:5d:cc:00:1a:65:18:60:6e:a3: c0:16:30:02:8f:c7:f8:85:45:ac:71:59:53:12:cc: 18:6b:a3:73:67:a3:65:d5:db:69:86:b6:95:2e:6b: d0:53:af:ea:d0:74:3c:d6:c7:3e:36:8e:29:bf:55: a8:e6:ab:c9:0b:d6:f6:9d:b3:7d:e7:a1:ef:3d:3c: 2b:94:d8:5f:ca:67:d5:7f:91:b4:07:74:9d:b5:27: 24:7e:6c:c3:1d:cf:18:22:6b:92:7b:d8:13:92:e2: b7:7e:73:31:54:cb:b0:16:f6:26:15:8a:7b:95:7d: b7:30:85:1a:66:6c:69:4b:0b:49:36:11:20:13:f4: ec:ca:3b:43:83:14:87:34:01:a3:65:cf:de:49:77: 0c:99:96:dd:73:b8:c2:af:f6:97:7a:36:35:8b:0a: d9:7e:24:26:fd:15:16:94:04:24:bc:4b:83:3b:aa: 8b:5f:0c:64:25:a5:2b:f7:50:c0:da:cd:ed:2a:46: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FE:3E:C3:2A:5E:1A:09:12:4B:5B:D0:68:9D:35:FF:D6:0D:DA:78 X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c0:7c:8b:75:c2:3d:65:47:7f:28:79:50:b7:61:d5:9b:64: 38:fb:90:bb:a8:d1:ae:d0:a0:67:43:23:53:9c:1f:89:28:a4: e7:35:6b:7d:f5:5b:62:53:4d:de:b9:60:b0:9b:3c:a5:cd:e8: c5:0c:2e:51:f6:f1:55:3a:23:59:10:53:ca:8c:d5:66:55:fd: 3e:31:2e:46:b0:34:5d:b9:fb:98:00:49:10:9f:33:95:3c:86: 51:98:23:38:d5:12:d3:49:a8:13:9a:2f:39:98:a1:89:34:b8: 0d:62:ca:38:e2:05:f6:b7:3a:e6:c3:4b:1c:b2:f6:0d:1b:7b: e8:17:f9:0a:7c:ee:1a:9e:23:5a:fa:49:28:cb:16:7e:59:5a: d4:50:3c:3a:96:53:30:e9:0b:00:4c:02:10:4d:4c:70:1d:60: 3b:de:1e:56:31:e3:2d:93:3b:fa:59:98:f6:0a:dc:ba:2a:cc: f0:85:98:e2:b2:b1:73:c5:5c:e4:c7:00:05:f6:1d:7f:8e:13: 01:b7:3c:64:00:5f:6c:d1:01:70:3a:3a:9e:1a:f7:9d:f1:c4: 9f:2f:0e:b0:c3:4e:3c:05:1d:80:b3:ec:f4:61:86:d6:9b:80: 03:26:75:8c:57:2c:7a:48:ea:bc:57:7f:c6:1f:9c:48:38:7a: d4:b7:f4:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUwODIwMjA0ODQ3WhcNMjUwODI3MjA0ODQ3WjAYMRYwFAYD VQQDEw02OGE2MzRiMC05NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn1R/AnoNnmSuQHrDMyrTuoR1sE6ZHrtJAs9vxIEDjaU3L99WXr4HG6iiQiE FraTi+7/OM+v/rqa4mTsvTrSbVBdzAAaZRhgbqPAFjACj8f4hUWscVlTEswYa6Nz Z6Nl1dtphraVLmvQU6/q0HQ81sc+No4pv1Wo5qvJC9b2nbN956HvPTwrlNhfymfV f5G0B3SdtSckfmzDHc8YImuSe9gTkuK3fnMxVMuwFvYmFYp7lX23MIUaZmxpSwtJ NhEgE/TsyjtDgxSHNAGjZc/eSXcMmZbdc7jCr/aXejY1iwrZfiQm/RUWlAQkvEuD O6qLXwxkJaUr91DA2s3tKkZihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3+PsMq XhoJEktb0GidNf/WDdp4MB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMwHyLdcI9ZUd/KHlQt2HVm2Q4+5C7qNGu0KBnQyNTnB+JKKTnNWt9 9VtiU03euWCwmzylzejFDC5R9vFVOiNZEFPKjNVmVf0+MS5GsDRdufuYAEkQnzOV PIZRmCM41RLTSagTmi85mKGJNLgNYso44gX2tzrmw0scsvYNG3voF/kKfO4aniNa +kkoyxZ+WVrUUDw6llMw6QsATAIQTUxwHWA73h5WMeMtkzv6WZj2Cty6KszwhZji srFzxVzkxwAF9h1/jhMBtzxkAF9s0QFwOjqeGved8cSfLw6ww048BR2As+z0YYbW m4ADJnWMVyx6SOq8V3/GH5xIOHrUt/Tr -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:08 2025 by rpki-client