$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: /e5rhLI2M1KNCODYDE2G233xgCh6ihTouENUqMxAVj4= Subject key identifier: 54:CC:96:EE:82:37:84:8E:44:01:D2:77:72:B2:2A:33:1A:AA:A4:A0 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 11EE Signing time: Sun 24 Aug 2025 17:06:13 +0000 Manifest this update: Sun 24 Aug 2025 17:06:13 +0000 Manifest next update: Sun 31 Aug 2025 17:06:13 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: PHeqZWDhLP0XMdugmMQJoCOO5JPEDWDSNsW75RZLTgI=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: j4Rp5D2+LCtQywvaF1YDJd+cLnUdbw+y2x0d8ZW0p8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Aug 24 17:06:13 2025 GMT Not After : Aug 31 17:06:13 2025 GMT Subject: CN=68ab4685-14b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:fa:3c:ee:e5:ca:57:b0:17:2f:bf:31:2c: 65:e7:b0:82:1f:35:3d:63:ca:59:14:c8:0e:dd:5d: 30:10:5b:e0:df:c4:e9:47:05:8a:37:ed:a9:27:38: 6b:40:5a:1b:3b:b1:6d:4e:ac:75:9e:64:f2:67:2f: 03:54:06:50:f5:15:da:63:f5:99:ac:91:9b:c2:c4: 2e:52:4b:15:74:92:16:e2:0e:a2:e8:bd:aa:38:13: 76:c9:f3:59:00:aa:0a:cb:16:3b:85:bc:9f:7b:44: 4e:4d:e4:8a:12:35:cd:bc:7e:03:62:db:66:bd:c5: f1:e2:4c:78:fd:57:4f:7a:3f:7d:c5:89:f5:4c:ad: c0:18:ae:28:30:83:c9:70:43:3f:0d:85:67:29:9f: 4a:cd:30:11:f6:27:54:cd:d3:5b:22:07:fe:d1:31: 21:7d:26:e5:bb:9b:00:0c:96:f2:c3:fb:c5:08:80: 9b:50:1c:00:13:36:c4:e2:a7:18:21:8a:5d:38:18: 6a:79:56:59:4e:5e:51:f5:c4:24:c1:01:51:78:9b: 0d:43:14:ef:09:b0:50:51:9b:64:6d:1e:3e:9d:da: 13:6e:12:73:62:cd:7c:62:f3:b3:c4:a6:86:eb:54: ce:54:60:62:41:fe:be:cd:56:4e:32:97:28:52:e2: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CC:96:EE:82:37:84:8E:44:01:D2:77:72:B2:2A:33:1A:AA:A4:A0 X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:91:d1:3e:ab:b4:09:80:2d:59:17:60:07:9e:e0:3d:79:a2: fd:38:c9:d2:ef:b0:0c:36:36:07:d0:56:e3:0b:d1:3a:17:31: 62:3c:25:10:81:dc:dc:59:50:57:eb:83:84:82:7b:bf:ab:a3: a6:fd:c3:30:28:dc:37:5d:64:cb:5f:61:cb:a0:c8:34:4b:4b: 4c:5b:a7:ca:6c:04:c3:b5:54:18:a1:55:ea:bc:5f:f6:8c:c5: 57:16:ad:8b:b8:a7:6d:c5:fe:20:bb:b7:65:fb:7f:37:0f:fa: 95:02:26:7e:59:28:24:56:a7:06:f5:4d:e2:33:1a:6a:91:11: 98:be:80:fb:2c:c8:19:e6:52:ca:3c:b0:13:57:19:c1:f0:8a: 5e:c5:ac:b6:47:d2:ff:2d:da:9e:20:d2:e2:20:25:5e:5c:45: 76:75:94:be:5c:91:9c:4a:3a:22:8f:d0:8c:2d:fe:86:c4:c1: 72:64:29:f7:dd:09:1b:d2:b8:e9:d8:f6:23:7d:8d:d4:6a:c9: ef:d8:25:e3:ba:b5:73:25:09:86:82:3d:f6:99:a6:11:be:2b: 65:12:5e:d6:c8:23:88:d8:cf:8e:33:89:92:d8:60:d7:7c:8b: b6:9d:7c:ed:43:3a:37:fd:7a:ad:0b:f1:c3:62:fa:9f:f9:83: 4a:72:66:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjUwODI0MTcwNjEzWhcNMjUwODMxMTcwNjEzWjAYMRYwFAYD VQQDEw02OGFiNDY4NS0xNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8v6PO7lylewFy+/MSxl57CCHzU9Y8pZFMgO3V0wEFvg38TpRwWKN+2pJzhr QFobO7FtTqx1nmTyZy8DVAZQ9RXaY/WZrJGbwsQuUksVdJIW4g6i6L2qOBN2yfNZ AKoKyxY7hbyfe0ROTeSKEjXNvH4DYttmvcXx4kx4/VdPej99xYn1TK3AGK4oMIPJ cEM/DYVnKZ9KzTAR9idUzdNbIgf+0TEhfSblu5sADJbyw/vFCICbUBwAEzbE4qcY IYpdOBhqeVZZTl5R9cQkwQFReJsNQxTvCbBQUZtkbR4+ndoTbhJzYs18YvOzxKaG 61TOVGBiQf6+zVZOMpcoUuJKTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTMlu6C N4SORAHSd3KyKjMaqqSgMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJkdE+q7QJgC1ZF2AHnuA9eaL9OMnS77AMNjYH0FbjC9E6FzFiPCUQ gdzcWVBX64OEgnu/q6Om/cMwKNw3XWTLX2HLoMg0S0tMW6fKbATDtVQYoVXqvF/2 jMVXFq2LuKdtxf4gu7dl+383D/qVAiZ+WSgkVqcG9U3iMxpqkRGYvoD7LMgZ5lLK PLATVxnB8Ipexay2R9L/LdqeINLiICVeXEV2dZS+XJGcSjoij9CMLf6GxMFyZCn3 3Qkb0rjp2PYjfY3Uasnv2CXjurVzJQmGgj32maYRvitlEl7WyCOI2M+OM4mS2GDX fIu2nXztQzo3/XqtC/HDYvqf+YNKcmaE -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:12 2025 by rpki-client