$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: 65dayuwMe82cey/4G6tTkNFtE6Ab0awMljZYdUSjTmo= Subject key identifier: 62:7D:61:20:6C:06:05:CD:B1:F2:1E:04:8F:E6:0A:33:75:A4:0C:E7 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 01AC Signing time: Thu 21 Aug 2025 03:17:40 +0000 Manifest this update: Thu 21 Aug 2025 03:17:40 +0000 Manifest next update: Thu 28 Aug 2025 03:17:40 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: KdUQ3zbCuhQYXWWlSZcXvj+xDX+oLQ/pea3KWvWNYwU=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Aug 21 03:17:40 2025 GMT Not After : Aug 28 03:17:40 2025 GMT Subject: CN=68a68fd4-54cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d9:33:ce:1a:c1:16:82:67:2c:56:f7:fd:02: 08:85:b4:b9:a6:69:7c:8c:1f:c6:16:84:e2:ed:3a: 77:f9:b1:a7:56:aa:20:32:cb:3b:66:ad:30:7b:47: fd:ae:d9:81:f1:75:5e:6a:f0:8e:43:23:47:16:fe: 86:ff:2d:17:11:73:02:96:64:e5:20:15:ab:4a:9c: 75:f0:78:95:67:95:d7:47:3c:8f:1d:1a:92:24:55: c9:af:c1:8f:30:ff:49:d2:6a:c7:7d:7f:1f:77:9c: 66:0e:e5:e7:15:f3:7b:30:6d:1e:4a:83:c7:09:c5: ac:5a:3b:7d:79:98:e7:8d:75:d3:ed:fd:34:dc:85: bd:a3:c7:66:05:34:40:ce:8f:da:a9:09:81:49:19: 36:3d:fa:55:c5:c0:71:47:31:23:fe:9c:81:0e:57: fc:56:03:1a:d4:de:2d:f7:cb:40:ce:04:45:96:a2: 54:bf:49:4b:48:45:65:e1:c9:74:c2:54:9a:71:30: 41:8a:24:3f:05:6b:c8:ba:b8:d0:56:16:9e:de:62: b5:1c:1e:d6:56:06:10:bd:c8:47:b7:77:2c:f4:af: a7:da:bf:42:ee:24:98:f8:58:3f:10:9f:77:63:98: ba:e1:45:df:bd:e5:3b:fc:f9:4e:45:19:a5:70:35: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7D:61:20:6C:06:05:CD:B1:F2:1E:04:8F:E6:0A:33:75:A4:0C:E7 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c4:bd:84:aa:9a:81:0c:4b:86:da:4b:37:a5:14:98:3c:e2: b1:60:53:b4:f9:da:20:fb:10:9b:4c:7c:62:88:e0:d7:63:ce: d4:b1:94:ae:11:5a:d9:45:b4:3f:61:50:3f:01:49:2a:89:32: ff:a2:d6:c1:1f:02:fa:7d:21:38:bd:d9:4e:23:b2:14:4a:81: 7f:72:69:5d:18:95:21:bc:b6:dd:e0:89:18:5a:41:8c:4b:58: 68:0c:da:5f:c6:42:73:91:6c:60:43:b0:cb:11:ca:8d:80:1e: 3c:c2:50:3a:5e:98:ac:8c:8c:87:84:fc:0d:a4:59:b5:6d:a9: 0a:07:87:0c:c3:e0:3c:ee:9b:db:8f:26:b8:e8:64:c7:40:1d: 0a:8a:47:cc:91:45:07:9d:3f:b1:0f:1a:d4:67:70:df:16:0d: 95:20:df:e6:7d:27:21:1f:43:be:f5:4d:e3:fe:7d:0f:0d:9b: b1:76:27:d6:b7:79:cf:35:59:01:d0:68:b1:70:09:98:a6:0e: 7c:b5:05:cf:ab:17:15:fa:73:2a:ac:cb:fb:b2:63:eb:45:63: 60:c9:ba:9d:0b:ec:95:9c:08:08:28:76:f0:99:55:57:24:29: 73:1b:c3:14:d9:b0:19:a0:25:b3:46:e8:6a:79:1d:a7:7c:9f: 7b:95:85:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUwODIxMDMxNzQwWhcNMjUwODI4MDMxNzQwWjAYMRYwFAYD VQQDEw02OGE2OGZkNC01NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tkzzhrBFoJnLFb3/QIIhbS5pml8jB/GFoTi7Tp3+bGnVqogMss7Zq0we0f9 rtmB8XVeavCOQyNHFv6G/y0XEXMClmTlIBWrSpx18HiVZ5XXRzyPHRqSJFXJr8GP MP9J0mrHfX8fd5xmDuXnFfN7MG0eSoPHCcWsWjt9eZjnjXXT7f003IW9o8dmBTRA zo/aqQmBSRk2PfpVxcBxRzEj/pyBDlf8VgMa1N4t98tAzgRFlqJUv0lLSEVl4cl0 wlSacTBBiiQ/BWvIurjQVhae3mK1HB7WVgYQvchHt3cs9K+n2r9C7iSY+Fg/EJ93 Y5i64UXfveU7/PlORRmlcDUKNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ9YSBs BgXNsfIeBI/mCjN1pAznMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNxL2EqpqBDEuG2ks3pRSYPOKxYFO0+dog+xCbTHxiiODXY87UsZSu EVrZRbQ/YVA/AUkqiTL/otbBHwL6fSE4vdlOI7IUSoF/cmldGJUhvLbd4IkYWkGM S1hoDNpfxkJzkWxgQ7DLEcqNgB48wlA6XpisjIyHhPwNpFm1bakKB4cMw+A87pvb jya46GTHQB0KikfMkUUHnT+xDxrUZ3DfFg2VIN/mfSchH0O+9U3j/n0PDZuxdifW t3nPNVkB0GixcAmYpg58tQXPqxcV+nMqrMv7smPrRWNgybqdC+yVnAgIKHbwmVVX JClzG8MU2bAZoCWzRuhqeR2nfJ97lYVD -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:41 2025 by rpki-client