$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: o57OX4vQmNoVMaLP0sS3v1x/evJ4nOq7jNLgS2gWAwo= Subject key identifier: DA:80:49:7C:8F:B7:9D:48:BC:AC:CE:47:2B:78:19:79:D0:88:1D:F2 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B4F Signing time: Thu 04 Sep 2025 19:23:25 +0000 Manifest this update: Thu 04 Sep 2025 19:23:25 +0000 Manifest next update: Thu 11 Sep 2025 19:23:25 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: GkNXIqnKAzAbNyYcmq6d6SbppNfV7AgXDmY6bcPvtUk=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Sep 4 19:23:25 2025 GMT Not After : Sep 11 19:23:25 2025 GMT Subject: CN=68b9e72d-8423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:20:63:33:c3:c7:cf:2e:3f:39:34:e5:a3: 6f:7b:8c:13:b7:75:48:b9:19:49:53:01:a2:2b:19: b6:32:83:4c:24:9a:25:cf:8b:c6:eb:fc:f8:86:04: d9:a8:d1:c3:87:f0:3e:8e:13:e1:cc:da:36:4d:3e: 20:d6:1f:bc:d4:56:16:ef:14:18:cc:3e:7e:2b:9a: 52:7f:86:ac:6a:bd:4b:01:c9:aa:ad:d5:2a:a6:bf: 28:c8:80:d0:94:39:5d:cf:3d:04:69:8f:a3:55:d9: e3:09:bd:a2:b8:51:2c:91:e9:de:62:1b:10:73:1b: fb:9e:f2:5d:27:49:8c:53:70:0f:16:ee:76:32:cc: b4:2d:c5:82:af:e4:1c:68:eb:89:13:7f:fe:ac:2d: 26:21:2c:9b:7c:60:ab:43:da:ae:55:ec:4f:1f:07: c4:d5:af:40:5b:a9:7f:64:a4:8b:c2:51:c6:89:68: 12:7c:5e:f7:be:ec:63:c4:b0:a9:42:14:14:60:b1: 02:f0:9e:df:56:08:ac:69:9c:f2:8f:6f:e6:1a:f7: de:16:e6:32:a0:5f:14:a1:1a:f9:84:44:86:bc:ea: 63:eb:18:59:35:41:43:5b:dc:1f:4d:a6:c7:6d:99: 18:96:c0:27:98:d8:68:29:1b:a5:2a:6c:64:ac:3a: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:49:7C:8F:B7:9D:48:BC:AC:CE:47:2B:78:19:79:D0:88:1D:F2 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:d0:ef:99:ac:34:a5:6a:dd:9e:18:6a:ac:15:12:5e:7a:7b: e3:3d:ae:4d:20:5f:22:fe:04:d7:09:cf:7a:56:b2:e9:1b:24: 9b:c1:b4:0d:f1:7f:55:5c:38:37:de:e8:d8:b6:0f:12:80:92: ee:63:68:9d:25:77:9c:6b:7e:22:7b:6e:30:9e:c8:1c:e8:11: 61:6e:62:b5:7e:39:03:50:e9:f0:ae:aa:9e:94:2f:6b:25:ab: 89:e9:7b:6a:f6:f7:6e:16:ad:77:36:ee:4e:14:79:82:db:da: f6:d9:e6:6b:75:3e:38:da:b7:bc:7e:5e:c6:4c:07:fb:b5:95: b9:85:ef:e1:c0:8b:27:f0:fb:04:5e:68:74:dc:f0:ea:d8:14: c4:94:61:15:4a:f5:93:81:cf:a3:a5:ea:a6:38:cf:60:7e:7d: ec:64:ba:ba:f7:1e:11:3e:5d:65:ef:e0:a9:8f:e7:2a:40:6c: 82:2b:1a:2b:04:7e:6e:30:ef:66:c5:c7:4c:fb:11:c6:41:0c: 05:79:ff:65:9b:f7:18:cb:99:b7:99:d7:d8:6a:f3:34:08:01: 72:33:71:ba:fb:7c:8a:d0:8c:72:67:c6:47:82:72:dc:27:34: 80:5c:d6:88:32:91:8e:de:92:4b:e5:a4:85:73:5b:82:2f:19: 5b:03:c9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwOTA0MTkyMzI1WhcNMjUwOTExMTkyMzI1WjAYMRYwFAYD VQQDEw02OGI5ZTcyZC04NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUwgYzPDx88uPzk05aNve4wTt3VIuRlJUwGiKxm2MoNMJJolz4vG6/z4hgTZ qNHDh/A+jhPhzNo2TT4g1h+81FYW7xQYzD5+K5pSf4asar1LAcmqrdUqpr8oyIDQ lDldzz0EaY+jVdnjCb2iuFEskeneYhsQcxv7nvJdJ0mMU3APFu52Msy0LcWCr+Qc aOuJE3/+rC0mISybfGCrQ9quVexPHwfE1a9AW6l/ZKSLwlHGiWgSfF73vuxjxLCp QhQUYLEC8J7fVgisaZzyj2/mGvfeFuYyoF8UoRr5hESGvOpj6xhZNUFDW9wfTabH bZkYlsAnmNhoKRulKmxkrDob8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqASXyP t51IvKzORyt4GXnQiB3yMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC20O+ZrDSlat2eGGqsFRJeenvjPa5NIF8i/gTXCc96VrLpGySbwbQN 8X9VXDg33ujYtg8SgJLuY2idJXeca34ie24wnsgc6BFhbmK1fjkDUOnwrqqelC9r JauJ6Xtq9vduFq13Nu5OFHmC29r22eZrdT442re8fl7GTAf7tZW5he/hwIsn8PsE Xmh03PDq2BTElGEVSvWTgc+jpeqmOM9gfn3sZLq69x4RPl1l7+Cpj+cqQGyCKxor BH5uMO9mxcdM+xHGQQwFef9lm/cYy5m3mdfYavM0CAFyM3G6+3yK0IxyZ8ZHgnLc JzSAXNaIMpGO3pJL5aSFc1uCLxlbA8mV -----END CERTIFICATE-----Generated at Sat Sep 6 16:04:56 2025 by rpki-client