$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: 6X/+7MZwjfw5mVDQVCpN6kf11IMKci/WX5BU3ZJjyPo= Subject key identifier: 6B:4A:BD:83:0B:7A:C4:EF:1A:B9:C2:FC:96:5A:F5:5F:CF:6E:46:AB Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 0281 Signing time: Sat 23 Aug 2025 01:55:50 +0000 Manifest this update: Sat 23 Aug 2025 01:55:50 +0000 Manifest next update: Sat 30 Aug 2025 01:55:50 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: EhSEa71fELWeLN8ktiJX+Dt9LAqYAr+7WXh/myITQl0=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: SSzVNdfhJc5xjlACETmueaivBNOUX59PK+NBqYEOe30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Aug 23 01:55:50 2025 GMT Not After : Aug 30 01:55:50 2025 GMT Subject: CN=68a91fa6-9ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:0b:64:d9:0c:1d:7c:19:ae:ca:a6:d8:46: 7d:de:85:d5:fb:c0:ce:d6:6f:0d:e1:4f:c8:19:ba: 31:86:b9:c7:6d:53:f9:19:50:b1:c5:1b:e9:3c:66: 42:df:b7:1a:ce:24:5c:86:6c:41:df:59:da:25:af: 1c:1c:8f:47:1a:d4:b5:15:ba:8f:13:52:83:46:e0: a6:30:5d:2b:41:7d:18:a5:89:5a:a7:ab:90:70:fc: 0d:eb:58:cc:c1:92:87:c4:75:f2:8a:1c:ac:3d:21: a2:d2:31:61:5a:f2:f2:89:49:8b:5e:83:d8:9b:84: b8:3b:81:c4:d9:9d:70:1c:5a:9a:69:8f:2b:5c:54: bd:38:23:11:77:2f:c7:24:48:fe:77:53:aa:9c:c9: 3c:67:b5:87:c2:e5:39:6f:82:1f:e2:d7:d7:5f:25: a5:3e:b9:0b:17:51:ad:4e:45:8c:ac:b0:df:8a:4f: 08:ef:5b:ea:84:1e:46:d9:db:82:83:ab:d8:c6:e5: 64:c3:b9:cc:a1:a5:d6:14:9c:59:a1:47:14:f8:08: ed:ae:de:ed:a1:03:17:4f:4e:98:e8:e5:74:6e:4f: d4:b5:8d:e2:59:ff:b9:5f:f1:f7:8c:64:bb:b0:41: 5c:59:3b:e1:db:0b:2c:07:aa:8f:ea:d9:1f:d7:c3: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:BD:83:0B:7A:C4:EF:1A:B9:C2:FC:96:5A:F5:5F:CF:6E:46:AB X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e0:be:f7:2f:c4:12:d6:b2:3a:10:45:80:5e:72:98:01:26: 15:c0:f1:cf:eb:1a:f0:89:c7:b5:b5:4d:e0:8b:42:b0:e9:87: 13:7d:a8:08:47:12:d3:e5:c5:c5:49:42:4f:f6:6b:19:be:d4: d4:bf:8e:db:df:ce:fe:4d:44:7b:fa:1f:10:43:86:4f:f1:f6: 2a:d7:ac:f8:c9:61:86:ae:e9:e4:2b:2e:d4:c6:c0:dd:a6:bf: 2c:c1:98:be:fc:2c:fe:e7:e3:c5:cf:55:5e:d3:bb:68:43:a2: 26:60:73:50:77:b1:78:59:82:44:8a:be:d8:44:cc:ed:c9:9d: ac:e7:ae:55:17:b3:cc:b1:d8:60:c2:15:25:fb:67:e1:2b:a4: 64:d8:3f:2e:df:33:2d:d1:e3:15:90:64:21:3c:17:84:fd:92: 45:05:14:6d:7d:5b:d3:fe:8c:39:fb:11:93:1e:b1:06:80:e6: ab:62:bb:6f:c4:b1:3a:c8:40:3f:0e:18:2a:dc:5e:c7:41:69: a5:2c:8e:88:80:ef:ff:b2:21:db:25:ca:b0:97:ff:8d:a3:c7: c0:a9:d2:a6:ba:c3:18:4d:7e:6e:c7:b5:76:64:0b:54:cc:a8: 75:93:71:a1:54:df:aa:8d:57:4f:4f:3c:d1:78:7d:5e:fe:e7: b0:8e:5c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUwODIzMDE1NTUwWhcNMjUwODMwMDE1NTUwWjAYMRYwFAYD VQQDEw02OGE5MWZhNi05Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BELZNkMHXwZrsqm2EZ93oXV+8DO1m8N4U/IGboxhrnHbVP5GVCxxRvpPGZC 37caziRchmxB31naJa8cHI9HGtS1FbqPE1KDRuCmMF0rQX0YpYlap6uQcPwN61jM wZKHxHXyihysPSGi0jFhWvLyiUmLXoPYm4S4O4HE2Z1wHFqaaY8rXFS9OCMRdy/H JEj+d1OqnMk8Z7WHwuU5b4If4tfXXyWlPrkLF1GtTkWMrLDfik8I71vqhB5G2duC g6vYxuVkw7nMoaXWFJxZoUcU+Ajtrt7toQMXT06Y6OV0bk/UtY3iWf+5X/H3jGS7 sEFcWTvh2wssB6qP6tkf18PYewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtKvYML esTvGrnC/JZa9V/PbkarMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD4L73L8QS1rI6EEWAXnKYASYVwPHP6xrwice1tU3gi0Kw6YcTfagI RxLT5cXFSUJP9msZvtTUv47b387+TUR7+h8QQ4ZP8fYq16z4yWGGrunkKy7UxsDd pr8swZi+/Cz+5+PFz1Ve07toQ6ImYHNQd7F4WYJEir7YRMztyZ2s565VF7PMsdhg whUl+2fhK6Rk2D8u3zMt0eMVkGQhPBeE/ZJFBRRtfVvT/ow5+xGTHrEGgOarYrtv xLE6yEA/Dhgq3F7HQWmlLI6IgO//siHbJcqwl/+No8fAqdKmusMYTX5ux7V2ZAtU zKh1k3GhVN+qjVdPTzzReH1e/uewjlzE -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:57 2025 by rpki-client