$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: Kka7hs3XtNXU3lNRZooDVsh/Khb8WgNMQhhBzplSfiA= Subject key identifier: 90:45:3F:8B:7E:F1:F7:A0:F3:D1:FF:49:0E:BB:DA:EC:B1:B6:1B:B5 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0448 Signing time: Tue 09 Sep 2025 00:21:44 +0000 Manifest this update: Tue 09 Sep 2025 00:21:44 +0000 Manifest next update: Tue 16 Sep 2025 00:21:44 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: QBhXvwonDnySoIXN4xBu8cerPfE5lN/LkRc02PWmCic=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Sep 9 00:21:44 2025 GMT Not After : Sep 16 00:21:44 2025 GMT Subject: CN=68bf7318-25c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:ed:8e:33:4f:47:97:95:7f:86:84:9b:1d: 54:bb:63:b3:ee:63:61:81:05:47:47:ac:88:56:48: b4:d4:62:2a:5e:ee:eb:0a:96:ac:d6:81:df:ad:27: 7e:eb:ff:ae:e1:1f:31:61:09:00:93:09:cd:1b:6f: 27:90:7d:e9:0a:76:5c:6d:02:b0:61:c1:7e:c2:ec: 24:24:fa:0e:1e:c3:d0:5b:6e:d9:d3:5f:8d:19:51: 04:1d:6a:22:bc:99:d4:05:df:ad:e7:e2:4b:3a:b5: b9:8e:db:31:be:43:51:f3:f8:83:18:4a:e7:26:b7: 50:86:ea:d9:f7:b8:cb:46:44:39:62:88:46:f6:6a: 23:a6:f7:ed:71:56:2a:45:cb:d8:f7:89:ba:79:7f: 04:5a:11:0e:e1:25:92:a5:64:c2:0e:77:13:c4:3b: bf:fd:1c:5b:74:51:9b:d2:9e:9d:69:7b:4e:8e:97: 33:f1:bb:7c:ec:7d:4b:ef:3b:29:fb:d0:16:32:c8: 6c:b3:81:b9:c1:d6:dd:22:71:cb:0f:c1:9d:11:0c: d6:11:f6:9a:4d:9b:dc:00:0f:66:20:a7:38:5d:9b: c2:32:2f:08:82:9e:cf:07:bc:a1:d7:70:cf:07:81: d3:df:7e:1a:f0:fc:c9:a5:f5:64:87:16:67:3f:a1: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:3F:8B:7E:F1:F7:A0:F3:D1:FF:49:0E:BB:DA:EC:B1:B6:1B:B5 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b3:af:b7:15:fc:7c:cb:9c:6f:48:66:11:6f:e9:a5:04:c8: f9:31:b2:b3:f8:1a:f3:ce:0a:5f:68:53:f1:f1:56:32:4f:2e: ce:59:ac:f2:4d:33:e7:90:f4:d8:e9:99:74:0a:98:c0:4b:c2: 22:a8:71:aa:a7:f1:f3:92:2e:89:98:81:67:4c:21:af:a1:e7: 55:af:91:26:db:60:ea:5a:ff:2f:a4:42:b0:26:ff:4e:66:ec: 6b:a9:c6:6b:08:dd:dd:35:68:7b:d0:8a:77:2c:f0:5b:b1:ee: 84:f2:84:20:9c:1d:4f:e9:4f:eb:3b:66:de:73:98:d7:af:94: df:28:2f:6b:17:e8:17:cf:c7:10:9b:34:23:6f:48:dc:5f:22: cc:2a:07:05:08:d1:90:01:c1:4e:4a:b2:68:4d:63:fa:02:b4: cb:89:22:66:d3:23:e9:22:6d:48:52:fc:4b:e1:5c:7d:fa:89: 2a:52:a7:31:fd:56:c0:d1:13:63:a5:37:01:b6:13:87:41:65: e4:1f:01:45:f5:7a:b7:d3:ef:d0:e0:2d:3e:6b:22:87:13:55: 8b:0b:e9:ec:26:51:8b:52:22:40:89:fd:a6:ba:3a:71:3d:d1: 6d:15:f0:87:8e:a6:8c:ff:7c:4c:3f:32:ca:0c:a2:ce:a2:ca: ee:b2:dc:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwOTA5MDAyMTQ0WhcNMjUwOTE2MDAyMTQ0WjAYMRYwFAYD VQQDEw02OGJmNzMxOC0yNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdntjjNPR5eVf4aEmx1Uu2Oz7mNhgQVHR6yIVki01GIqXu7rCpas1oHfrSd+ 6/+u4R8xYQkAkwnNG28nkH3pCnZcbQKwYcF+wuwkJPoOHsPQW27Z01+NGVEEHWoi vJnUBd+t5+JLOrW5jtsxvkNR8/iDGErnJrdQhurZ97jLRkQ5YohG9mojpvftcVYq RcvY94m6eX8EWhEO4SWSpWTCDncTxDu//RxbdFGb0p6daXtOjpcz8bt87H1L7zsp +9AWMshss4G5wdbdInHLD8GdEQzWEfaaTZvcAA9mIKc4XZvCMi8Igp7PB7yh13DP B4HT334a8PzJpfVkhxZnP6GbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBFP4t+ 8feg89H/SQ672uyxthu1MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAys6+3Ffx8y5xvSGYRb+mlBMj5MbKz+BrzzgpfaFPx8VYyTy7OWazy TTPnkPTY6Zl0CpjAS8IiqHGqp/Hzki6JmIFnTCGvoedVr5Em22DqWv8vpEKwJv9O ZuxrqcZrCN3dNWh70Ip3LPBbse6E8oQgnB1P6U/rO2bec5jXr5TfKC9rF+gXz8cQ mzQjb0jcXyLMKgcFCNGQAcFOSrJoTWP6ArTLiSJm0yPpIm1IUvxL4Vx9+okqUqcx /VbA0RNjpTcBthOHQWXkHwFF9Xq30+/Q4C0+ayKHE1WLC+nsJlGLUiJAif2mujpx PdFtFfCHjqaM/3xMPzLKDKLOosrustxU -----END CERTIFICATE-----Generated at Tue Sep 9 09:20:24 2025 by rpki-client