$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: 4U8Zfktc2EsKfeAhbXT/UVoS3Q/CQEfO+ZmbZ7ZQJMs= Subject key identifier: 26:C6:22:6A:24:C3:2F:8F:1C:A8:FE:BA:44:D4:D7:93:89:21:77:69 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 01B5 Signing time: Sun 07 Sep 2025 03:36:53 +0000 Manifest this update: Sun 07 Sep 2025 03:36:52 +0000 Manifest next update: Sun 14 Sep 2025 03:36:52 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: eNi0+n10CdCWRjZQ5+VSTsIEOc+UmoB4O5kPkY1Jivo=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: agND8JJbqlEXowZERcfKWZ71YKoau8ULA8IOXEAGAms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Sep 7 03:36:52 2025 GMT Not After : Sep 14 03:36:52 2025 GMT Subject: CN=68bcfdd5-a32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:01:93:7f:65:1b:3e:c5:3e:18:ed:7f:a7: 8b:0f:a8:97:66:2b:f3:0f:87:cd:03:27:aa:dd:2e: 25:73:29:63:20:4e:9f:6e:07:35:f9:ed:ae:eb:95: af:da:90:e1:68:2d:ec:05:19:8d:26:57:03:13:db: f3:49:a0:89:a2:7e:8a:fa:4c:e4:93:50:2a:ba:bd: ce:35:c0:a5:d9:49:a6:5c:c6:88:ca:61:d5:bc:99: 53:2b:5d:5f:f6:3f:ee:aa:8e:19:14:00:40:01:06: 1f:e8:51:e4:e8:e5:44:0d:1a:e0:48:b5:3c:63:a6: dc:71:10:63:cb:29:53:90:e5:50:97:ba:e3:96:f7: 82:df:44:80:c7:b6:e8:f9:be:0c:80:0e:79:a5:7c: 58:3f:16:5d:dd:56:0a:79:d7:15:49:1e:b5:1c:ce: a3:bd:11:23:f6:20:77:97:ae:40:30:0f:33:54:fb: a8:5b:53:2a:c5:5a:05:13:c7:ed:37:ef:62:48:48: a0:2e:a5:b1:7f:2e:5e:f8:24:62:f8:0a:08:41:c8: c7:f6:2e:e9:47:11:e2:82:a5:f3:49:15:21:5b:ab: e5:dd:f7:4b:12:45:b2:49:fa:f8:1d:3b:ab:d8:cf: 6a:c0:fd:db:27:16:f5:7e:d4:ad:8b:66:8e:2e:d9: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:22:6A:24:C3:2F:8F:1C:A8:FE:BA:44:D4:D7:93:89:21:77:69 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:af:4b:98:19:d6:00:4d:22:07:7b:92:99:5d:b3:a5:a2: e0:eb:d0:f4:95:85:3d:91:41:40:f2:2c:49:0e:9b:5c:8d:cc: 9a:8a:b6:d9:07:74:a0:f3:ef:f8:aa:06:60:af:41:73:f9:05: 90:9e:29:6d:77:63:ed:cb:e7:a2:99:22:62:43:b9:1b:e3:10: 0c:f6:1a:e2:fe:25:13:2b:f3:24:72:54:b4:32:3a:eb:6c:4a: 9b:65:87:b7:77:3e:a2:de:e4:b8:98:b0:5c:aa:45:4a:ac:3d: 6f:be:61:76:fd:d8:d1:1b:12:87:c4:e3:55:7d:4a:a9:05:67: 7e:16:7b:cb:83:a5:a8:92:40:70:ad:1b:0a:14:fb:65:6b:bb: ee:04:de:6b:00:62:76:76:a1:71:f7:ed:83:35:98:f1:82:51: a7:17:0c:5d:33:ec:6c:b6:dc:12:ad:a1:fc:47:34:f6:0c:13: 02:0b:c5:e1:4b:c4:93:ce:92:a3:2a:61:67:b0:b1:30:41:fe: 6a:73:c5:69:f9:b2:07:de:4f:85:2e:09:86:4e:19:cb:cc:7c: 9e:7a:8b:98:6e:1a:73:81:72:dc:c7:65:aa:9c:ae:fe:24:b8: e0:b0:33:9b:f4:7e:b4:da:17:58:a9:0d:b7:54:c9:c6:6a:5d: a3:17:fb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwOTA3MDMzNjUyWhcNMjUwOTE0MDMzNjUyWjAYMRYwFAYD VQQDEw02OGJjZmRkNS1hMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYQBk39lGz7FPhjtf6eLD6iXZivzD4fNAyeq3S4lcyljIE6fbgc1+e2u65Wv 2pDhaC3sBRmNJlcDE9vzSaCJon6K+kzkk1Aqur3ONcCl2UmmXMaIymHVvJlTK11f 9j/uqo4ZFABAAQYf6FHk6OVEDRrgSLU8Y6bccRBjyylTkOVQl7rjlveC30SAx7bo +b4MgA55pXxYPxZd3VYKedcVSR61HM6jvREj9iB3l65AMA8zVPuoW1MqxVoFE8ft N+9iSEigLqWxfy5e+CRi+AoIQcjH9i7pRxHigqXzSRUhW6vl3fdLEkWySfr4HTur 2M9qwP3bJxb1ftSti2aOLtk3uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbGImok wy+PHKj+ukTU15OJIXdpMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWCa9LmBnWAE0iB3uSmV2zpaLg69D0lYU9kUFA8ixJDptcjcyairbZ B3Sg8+/4qgZgr0Fz+QWQniltd2Pty+eimSJiQ7kb4xAM9hri/iUTK/MkclS0Mjrr bEqbZYe3dz6i3uS4mLBcqkVKrD1vvmF2/djRGxKHxONVfUqpBWd+FnvLg6WokkBw rRsKFPtla7vuBN5rAGJ2dqFx9+2DNZjxglGnFwxdM+xsttwSraH8RzT2DBMCC8Xh S8STzpKjKmFnsLEwQf5qc8Vp+bIH3k+FLgmGThnLzHyeeouYbhpzgXLcx2WqnK7+ JLjgsDOb9H602hdYqQ23VMnGal2jF/sB -----END CERTIFICATE-----Generated at Tue Sep 9 02:41:33 2025 by rpki-client