$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: J8EbxA2jGmGsOw8qZ5MQnrnb9ocWEGvfpHuQUwSX2LA= Subject key identifier: 8B:6A:49:65:3E:9A:BF:95:97:E0:E8:4F:51:4B:F7:16:21:C0:34:B5 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: 8F Signing time: Fri 19 Sep 2025 07:13:46 +0000 Manifest this update: Fri 19 Sep 2025 07:13:46 +0000 Manifest next update: Fri 26 Sep 2025 07:13:46 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: Cfz2hrUXZPXG550Z9tRC+FSKaPsXlq6xDi2GBYAE6GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Sep 19 07:13:46 2025 GMT Not After : Sep 26 07:13:46 2025 GMT Subject: CN=68cd02aa-b256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:b1:55:2c:3e:f3:18:7d:82:2c:8a:ff:e1: d3:bb:21:58:d7:a0:2e:b0:34:34:17:e5:0f:15:79: 0a:f6:2a:45:7b:c1:21:d1:05:87:62:71:f4:7f:2a: 42:11:14:ae:65:b0:f3:7c:83:43:32:04:00:af:c6: e0:85:8b:20:37:99:66:2e:d6:2d:23:a3:ac:7d:70: 72:17:14:bf:df:29:33:71:07:9c:b1:ff:5e:8d:b2: cf:d5:91:8f:4a:39:be:63:9e:ea:a8:65:b4:6c:cd: d7:db:3e:03:32:f1:0a:fc:8a:21:d0:3a:df:7e:d6: a8:83:f7:74:2f:b9:1e:f4:af:0f:8e:08:5d:cc:8d: 65:1c:0e:7c:fc:31:95:70:27:d7:c1:f8:4d:86:fd: 86:ea:8d:32:1a:69:dc:7c:6a:6c:c9:e2:8f:69:f6: d1:b7:26:c8:1a:61:61:c9:db:66:10:2e:ab:28:5c: f3:58:d9:1b:3b:4e:8f:ac:92:b0:8a:a5:4f:23:ca: 51:4f:53:f6:7e:76:5e:d9:e7:74:29:4e:4e:dd:73: d4:2f:1f:ce:29:6c:0a:fd:7d:8e:12:64:c4:42:c5: f9:ee:ed:81:8e:2c:85:fb:9f:09:24:8a:c0:af:a3: 69:89:ee:7f:89:23:dc:62:13:9b:75:a0:bf:f7:c1: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6A:49:65:3E:9A:BF:95:97:E0:E8:4F:51:4B:F7:16:21:C0:34:B5 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ae:0f:58:7d:e3:b7:4b:5f:4e:02:78:0f:f8:49:cd:c0:b1: b0:06:76:25:50:6b:17:68:05:5b:4e:11:40:7b:2b:8c:be:aa: 30:91:af:43:89:c7:2f:19:f6:c1:95:2d:29:82:6b:ef:f0:87: 04:ff:66:87:a3:a5:26:aa:9a:3e:73:9d:99:d8:fa:e0:08:4f: 4b:73:9b:f3:5f:3e:23:dc:53:b5:1f:47:f4:77:62:5c:7f:00: 11:70:42:6e:72:6b:01:f2:0b:b0:bb:87:af:65:3f:16:a5:a8: 90:e3:a2:4f:57:7c:66:22:b9:99:71:c1:c8:88:f4:d0:69:09: 4d:f9:b8:02:36:f2:9c:fd:e7:50:1c:98:bf:0b:9b:23:b7:f0: 5e:6c:8c:fe:57:fe:cd:44:ff:21:74:02:ae:33:a1:d6:09:dc: 81:e4:2c:41:38:91:73:fe:34:d3:f9:31:3d:9b:d8:64:b5:0e: 21:74:b0:43:36:29:c7:04:84:3f:58:ef:17:ce:b9:db:5f:2d: 54:14:4e:a5:b8:af:63:05:41:41:67:dd:bb:91:a3:41:4c:77: b8:57:1d:e3:44:c3:16:33:24:07:be:a7:59:68:d4:a5:51:94: 2c:cb:c8:45:c6:d7:72:cb:03:f3:b5:7d:3e:6e:44:ca:bc:51: c7:ac:a9:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjUwOTE5MDcxMzQ2WhcNMjUwOTI2MDcxMzQ2WjAYMRYwFAYD VQQDEw02OGNkMDJhYS1iMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzmxVSw+8xh9giyK/+HTuyFY16AusDQ0F+UPFXkK9ipFe8Eh0QWHYnH0fypC ERSuZbDzfINDMgQAr8bghYsgN5lmLtYtI6OsfXByFxS/3ykzcQecsf9ejbLP1ZGP Sjm+Y57qqGW0bM3X2z4DMvEK/Ioh0Drfftaog/d0L7ke9K8PjghdzI1lHA58/DGV cCfXwfhNhv2G6o0yGmncfGpsyeKPafbRtybIGmFhydtmEC6rKFzzWNkbO06PrJKw iqVPI8pRT1P2fnZe2ed0KU5O3XPULx/OKWwK/X2OEmTEQsX57u2BjiyF+58JJIrA r6Npie5/iSPcYhObdaC/98H5FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItqSWU+ mr+Vl+DoT1FL9xYhwDS1MB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOrg9YfeO3S19OAngP+EnNwLGwBnYlUGsXaAVbThFAeyuMvqowka9D iccvGfbBlS0pgmvv8IcE/2aHo6Umqpo+c52Z2PrgCE9Lc5vzXz4j3FO1H0f0d2Jc fwARcEJucmsB8guwu4evZT8WpaiQ46JPV3xmIrmZccHIiPTQaQlN+bgCNvKc/edQ HJi/C5sjt/BebIz+V/7NRP8hdAKuM6HWCdyB5CxBOJFz/jTT+TE9m9hktQ4hdLBD NinHBIQ/WO8XzrnbXy1UFE6luK9jBUFBZ927kaNBTHe4Vx3jRMMWMyQHvqdZaNSl UZQsy8hFxtdyywPztX0+bkTKvFHHrKlF -----END CERTIFICATE-----Generated at Fri Sep 19 12:38:58 2025 by rpki-client