$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: jCXi9nAC23hMK1v7UkfiMhfWxaxObZupLWCXElqLtFA= Subject key identifier: 7A:94:2F:2C:8C:CF:90:A3:97:17:62:C7:A9:9D:E3:DA:41:B5:27:AF Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 09DB Signing time: Thu 18 Sep 2025 20:12:50 +0000 Manifest this update: Thu 18 Sep 2025 20:12:49 +0000 Manifest next update: Thu 25 Sep 2025 20:12:49 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: O4ewQySoOGl/gAeW5jN46uYexDeqPKdEoLDaCgldW80=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Sep 18 20:12:49 2025 GMT Not After : Sep 25 20:12:49 2025 GMT Subject: CN=68cc67c2-87c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:56:d0:da:09:b2:c7:f8:ca:80:12:45:cb: 56:2c:24:d9:bc:63:a6:53:0b:32:96:c3:88:50:4b: 9d:6d:ba:c7:ac:19:80:0c:b3:d2:8f:85:e0:f2:be: 51:f0:32:5a:0c:00:80:da:c9:85:d7:3f:76:a0:c9: 72:b4:ee:72:a8:98:d1:43:ff:99:84:f2:6b:53:ab: 58:86:8b:1a:42:a5:f2:64:ce:23:b0:74:5f:a5:93: 7b:a3:b8:92:a5:97:7d:5d:f7:80:b4:e1:b8:a7:68: 9c:25:22:84:cf:75:30:d9:a5:e7:44:f6:42:bf:89: 33:ed:d4:1d:70:0f:b2:96:c3:f7:06:15:c8:88:38: 5e:62:74:04:ea:f4:3e:45:0e:57:db:40:3e:57:c5: af:9f:2e:74:fb:0c:f9:c0:2a:fd:20:99:5b:1d:ec: e9:74:8f:b1:1d:b1:6a:7c:6b:11:48:0c:0d:3f:b9: 5f:b3:ae:7a:bc:9b:d1:a4:74:28:49:3b:3f:a1:11: ff:a4:98:fc:77:b0:30:21:97:ab:f6:c2:d1:d7:87: 23:d5:63:32:30:ca:d9:96:7b:f2:c2:27:91:35:ef: 8f:bf:97:af:75:66:99:b0:c1:cd:ba:1c:71:a6:a4: bd:15:2e:03:43:c6:4e:ed:4a:79:0d:55:22:14:39: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:2F:2C:8C:CF:90:A3:97:17:62:C7:A9:9D:E3:DA:41:B5:27:AF X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:16:7b:cf:37:c4:07:46:27:55:91:d8:b4:0a:6c:f7:5f:bd: dc:5f:f0:39:89:6c:b2:d6:ae:fe:30:b3:3c:db:ba:85:cb:00: cc:78:e1:45:a9:3e:d8:f4:15:21:4e:d3:82:16:a8:02:e0:4d: e8:8c:c8:34:57:a8:50:92:11:34:0d:df:c0:0e:d4:9f:ee:3f: c8:a9:c9:87:87:6f:f9:0a:da:db:dd:8e:e6:48:c8:aa:92:f0: 00:7d:60:8e:c9:fd:fd:ee:50:6f:a6:2b:e8:c2:73:24:8d:06: 4b:4d:11:a1:90:03:77:c8:01:d7:eb:3a:fd:84:23:f9:0f:fa: 40:79:4e:60:aa:e7:52:b6:44:75:13:26:47:3a:4d:2f:a9:4b: c2:8a:59:ca:85:ec:73:df:ca:97:1e:10:e8:bd:bd:bb:06:d1: 2b:44:16:b2:9b:98:44:07:25:90:5c:08:10:a7:8b:2b:0b:39: a9:74:75:4b:88:a0:41:ce:fc:fd:0d:87:d8:47:87:14:f6:75: bc:1f:9d:84:7f:2d:36:60:3b:51:32:e3:15:05:bd:31:64:b6: 55:e4:a1:d8:5e:df:ab:eb:b6:f9:a0:b6:e6:9e:63:ab:e1:58: 1f:29:cb:48:65:98:7f:4e:ca:8e:e1:bb:6b:97:3b:a1:1c:76: 96:65:f7:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwOTE4MjAxMjQ5WhcNMjUwOTI1MjAxMjQ5WjAYMRYwFAYD VQQDEw02OGNjNjdjMi04N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBZW0NoJssf4yoASRctWLCTZvGOmUwsylsOIUEudbbrHrBmADLPSj4Xg8r5R 8DJaDACA2smF1z92oMlytO5yqJjRQ/+ZhPJrU6tYhosaQqXyZM4jsHRfpZN7o7iS pZd9XfeAtOG4p2icJSKEz3Uw2aXnRPZCv4kz7dQdcA+ylsP3BhXIiDheYnQE6vQ+ RQ5X20A+V8Wvny50+wz5wCr9IJlbHezpdI+xHbFqfGsRSAwNP7lfs656vJvRpHQo STs/oRH/pJj8d7AwIZer9sLR14cj1WMyMMrZlnvywieRNe+Pv5evdWaZsMHNuhxx pqS9FS4DQ8ZO7Up5DVUiFDmw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqULyyM z5Cjlxdix6md49pBtSevMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXFnvPN8QHRidVkdi0Cmz3X73cX/A5iWyy1q7+MLM827qFywDMeOFF qT7Y9BUhTtOCFqgC4E3ojMg0V6hQkhE0Dd/ADtSf7j/IqcmHh2/5Ctrb3Y7mSMiq kvAAfWCOyf397lBvpivownMkjQZLTRGhkAN3yAHX6zr9hCP5D/pAeU5gqudStkR1 EyZHOk0vqUvCilnKhexz38qXHhDovb27BtErRBaym5hEByWQXAgQp4srCzmpdHVL iKBBzvz9DYfYR4cU9nW8H52Efy02YDtRMuMVBb0xZLZV5KHYXt+r67b5oLbmnmOr 4VgfKctIZZh/TsqO4btrlzuhHHaWZfdt -----END CERTIFICATE-----Generated at Fri Sep 19 07:10:13 2025 by rpki-client