$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: xo36FlMMoSXtGjI7ckwbgCNG8nvPLjHDAZQMh5y9Bzc= Subject key identifier: 55:E5:DF:84:30:A5:0B:5F:F4:84:EA:71:9B:27:A1:97:C8:FF:67:63 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 151B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 1512 Signing time: Mon 08 Sep 2025 16:49:55 +0000 Manifest this update: Mon 08 Sep 2025 16:49:54 +0000 Manifest next update: Mon 15 Sep 2025 16:49:54 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: h6ILCtYh5WXgtUtbgXm1dpdGFaY76Bm8vHf1y0D4L7I=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: ZrttKe2gUPdi3/NYLhVsPF2RlqfjZO1IxCJ4ZBHDkLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5403 (0x151b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Sep 8 16:49:54 2025 GMT Not After : Sep 15 16:49:54 2025 GMT Subject: CN=68bf0932-2f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:55:0a:93:45:76:dc:f5:11:6d:65:a6:6f: a5:63:6a:c9:cb:58:ec:0b:e0:00:fc:fb:d3:98:13: 85:7d:2a:5b:6b:61:d8:57:c7:d2:12:ad:7f:58:26: 32:da:79:10:35:9e:a2:70:01:c1:a5:f3:38:c2:6c: 47:dc:94:e1:7d:4a:c6:12:83:6c:36:2d:7c:68:74: 83:46:46:bf:d9:21:5a:2f:22:e2:4b:28:97:2e:6d: 0e:13:35:19:be:e8:74:8d:85:d7:0d:3b:4f:b3:a0: 46:7e:2d:50:4b:80:5d:c2:a3:df:49:d0:2f:c4:7d: 3b:1d:64:f9:8e:03:14:af:ad:5e:d7:ce:b1:fb:9d: 63:89:da:da:6a:fc:de:69:d7:af:e4:f3:6b:97:29: 99:c6:eb:39:b0:53:af:a9:dd:6b:ca:d1:7d:82:6e: 10:b9:81:a4:9c:ca:e8:7b:a5:b3:ec:e7:0f:91:ca: 5c:03:d8:58:e4:ab:bc:62:99:1d:3e:50:23:0d:1a: bd:de:4f:90:ab:0e:0f:89:24:51:40:22:ab:fa:76: 25:b3:0a:6a:b4:8f:cd:8a:3b:9c:08:11:a4:5f:d1: b6:77:c2:0d:95:34:20:88:ec:2a:70:eb:3e:0c:d8: 29:f1:4f:5e:93:62:97:28:d7:fa:ca:56:a3:b0:db: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:DF:84:30:A5:0B:5F:F4:84:EA:71:9B:27:A1:97:C8:FF:67:63 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ac:4d:0d:22:cf:89:97:ac:c8:d1:d8:bb:20:8c:c9:99:ed: 8a:89:11:b7:f1:1c:a4:2d:f2:39:89:23:8f:97:e8:3f:85:29: 45:33:ae:ad:d1:a7:1c:d2:d4:a7:96:7f:2b:52:11:05:98:05: 9d:b3:36:61:87:a2:d2:ca:f4:f0:0f:0e:c7:83:fb:1a:71:cf: e3:73:a9:f9:54:30:47:a1:ef:73:ec:ad:74:3f:2e:48:e4:9d: 6c:5a:13:b3:59:61:4d:0d:e3:1d:f0:ba:ae:0e:17:f6:7c:c8: fc:90:29:d9:6a:50:a1:e6:9a:47:0f:af:4b:d7:9b:89:44:dc: 46:18:fc:f8:38:1b:12:fc:91:99:8b:d3:3a:f0:a4:57:f6:e4: df:e5:09:60:86:9b:a0:7e:cc:d3:b9:29:a4:e6:0e:b5:d2:8c: d5:fb:68:f0:fc:fc:92:49:da:c8:9c:a9:2c:fa:59:03:30:7f: 08:ca:93:0e:a3:53:04:e7:d2:a1:9f:48:26:f9:dd:ae:af:3e: 18:c0:2c:71:67:d5:48:87:c1:9d:ea:ec:df:35:78:b2:df:38: df:89:bf:a6:db:ff:e4:7e:e0:bb:34:80:cd:09:0a:10:8b:e3: 65:79:bf:d8:87:02:cd:b3:3c:04:a9:ba:2d:75:41:4b:80:a9: 32:5b:8e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUwOTA4MTY0OTU0WhcNMjUwOTE1MTY0OTU0WjAYMRYwFAYD VQQDEw02OGJmMDkzMi0yZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1RVCpNFdtz1EW1lpm+lY2rJy1jsC+AA/PvTmBOFfSpba2HYV8fSEq1/WCYy 2nkQNZ6icAHBpfM4wmxH3JThfUrGEoNsNi18aHSDRka/2SFaLyLiSyiXLm0OEzUZ vuh0jYXXDTtPs6BGfi1QS4BdwqPfSdAvxH07HWT5jgMUr61e186x+51jidraavze adev5PNrlymZxus5sFOvqd1rytF9gm4QuYGknMroe6Wz7OcPkcpcA9hY5Ku8Ypkd PlAjDRq93k+Qqw4PiSRRQCKr+nYlswpqtI/NijucCBGkX9G2d8INlTQgiOwqcOs+ DNgp8U9ek2KXKNf6ylajsNuk5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXl34Qw pQtf9ITqcZsnoZfI/2djMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYrE0NIs+Jl6zI0di7IIzJme2KiRG38RykLfI5iSOPl+g/hSlFM66t 0acc0tSnln8rUhEFmAWdszZhh6LSyvTwDw7Hg/sacc/jc6n5VDBHoe9z7K10Py5I 5J1sWhOzWWFNDeMd8LquDhf2fMj8kCnZalCh5ppHD69L15uJRNxGGPz4OBsS/JGZ i9M68KRX9uTf5QlghpugfszTuSmk5g610ozV+2jw/PySSdrInKks+lkDMH8IypMO o1ME59Khn0gm+d2urz4YwCxxZ9VIh8Gd6uzfNXiy3zjfib+m2//kfuC7NIDNCQoQ i+Nleb/YhwLNszwEqbotdUFLgKkyW45a -----END CERTIFICATE-----Generated at Tue Sep 9 07:52:24 2025 by rpki-client