$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: 3gpiNulsqFBQeo74Y0g6oeGAxeVWDN0rLMtagq2IyIc= Subject key identifier: 7C:EC:EB:A8:2C:51:FD:C1:2E:7F:DA:B2:16:8A:82:05:96:EB:45:3F Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 01E2 Signing time: Tue 09 Sep 2025 02:45:06 +0000 Manifest this update: Tue 09 Sep 2025 02:45:05 +0000 Manifest next update: Tue 16 Sep 2025 02:45:05 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: n3GxA9srt2pazEtBjzROFvq0jetS5KfvGWBm9qsy4dQ=) 2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=) 3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: w5eiVbjwCl7FcDiQB51RhcBa3fhBXTl0kBsUFzWTzow=) 4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: YzxhkuTIla90nMxllMuAPcH6Qo+CPshpVYgjHxiUelw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: Sep 9 02:45:05 2025 GMT Not After : Sep 16 02:45:05 2025 GMT Subject: CN=68bf94b2-7b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:30:7e:6a:7c:13:d2:70:18:2a:a0:74:a5: 22:c5:d0:8f:9a:d9:5d:9f:d0:31:54:08:0c:4c:73: bd:67:bf:53:96:0f:77:0c:9a:59:b4:52:26:8c:da: 73:73:7e:f0:32:57:59:37:3a:2a:a7:ce:10:f6:65: 5e:49:84:1a:fc:a6:29:2c:f6:83:f9:09:57:86:af: 16:d4:e4:6e:b1:f0:c3:c0:8c:ca:65:ca:2f:5f:70: 68:c6:e3:91:94:e1:51:48:10:be:7d:b9:b9:80:b9: bb:62:a0:cd:ea:4d:02:ba:c8:9c:7e:50:90:c3:91: 5b:8f:15:2b:70:23:7c:6a:08:34:cc:ea:6a:1b:e8: d4:d2:ff:7a:3b:f5:71:f8:2f:11:55:c9:28:72:19: e0:20:9d:52:cc:15:7b:ef:e2:94:fe:23:91:d1:c7: ec:ed:16:9d:96:0d:99:a5:41:54:cf:78:e3:09:0a: 88:7f:73:c8:5b:b7:a3:f8:9e:80:37:83:1b:68:5a: e5:36:54:b8:ac:70:9b:59:7a:fd:3a:b9:89:67:e7: d3:c3:9d:0d:83:c5:8a:a2:ea:c3:dc:42:ee:de:e7: e8:10:25:9e:a3:64:bf:2d:d1:4d:39:59:7d:be:0d: 73:11:8d:41:3b:7a:63:4a:21:35:da:ac:03:a2:0f: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:EB:A8:2C:51:FD:C1:2E:7F:DA:B2:16:8A:82:05:96:EB:45:3F X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5a:53:23:f1:cd:d3:96:67:e8:2b:b5:eb:06:1e:92:a4:68: 11:dd:ed:89:6e:7b:34:92:b1:68:07:3f:05:88:df:75:85:cb: 5d:47:79:52:8b:07:ee:cf:90:f2:d4:0f:fb:1b:9b:9a:ea:c0: 2d:67:bb:71:9a:46:5f:54:a7:8b:90:fe:fa:31:3b:a9:40:f3: a4:c6:24:08:f1:b7:9a:40:a8:0e:c7:c3:cb:b7:2e:43:8c:17: 6c:17:8a:6f:9f:4c:70:70:ba:b6:e5:90:14:0f:80:90:f1:e5: c9:c0:7a:db:9d:47:21:65:79:0a:d9:d6:48:3b:37:fc:36:1e: 81:d0:85:fd:f6:48:46:c9:2c:7c:6e:9b:29:ff:97:c5:fb:fd: 62:3a:7a:4f:52:98:f9:b4:7f:61:f3:33:f8:6a:54:9e:30:8b: c6:28:6a:ac:a9:c2:63:8e:58:85:aa:57:c2:aa:fa:a2:c0:66: 79:a3:09:56:e0:f1:03:07:95:af:18:5a:4c:be:dc:63:ff:92: fc:1d:8f:ec:35:ca:53:ba:44:d5:c9:52:81:f5:06:b6:8a:07: d0:52:35:ae:3b:45:c3:85:a9:55:17:35:27:a8:b8:04:25:6a: 99:55:24:7b:1b:86:1d:fc:53:50:db:9b:7d:b9:c0:e5:55:7c: 80:43:91:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjUwOTA5MDI0NTA1WhcNMjUwOTE2MDI0NTA1WjAYMRYwFAYD VQQDEw02OGJmOTRiMi03YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGUwfmp8E9JwGCqgdKUixdCPmtldn9AxVAgMTHO9Z79Tlg93DJpZtFImjNpz c37wMldZNzoqp84Q9mVeSYQa/KYpLPaD+QlXhq8W1ORusfDDwIzKZcovX3BoxuOR lOFRSBC+fbm5gLm7YqDN6k0CusicflCQw5FbjxUrcCN8agg0zOpqG+jU0v96O/Vx +C8RVckochngIJ1SzBV77+KU/iOR0cfs7Radlg2ZpUFUz3jjCQqIf3PIW7ej+J6A N4MbaFrlNlS4rHCbWXr9OrmJZ+fTw50Ng8WKourD3ELu3ufoECWeo2S/LdFNOVl9 vg1zEY1BO3pjSiE12qwDog/ftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzs66gs Uf3BLn/ashaKggWW60U/MB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtWlMj8c3TlmfoK7XrBh6SpGgR3e2Jbns0krFoBz8FiN91hctdR3lS iwfuz5Dy1A/7G5ua6sAtZ7txmkZfVKeLkP76MTupQPOkxiQI8beaQKgOx8PLty5D jBdsF4pvn0xwcLq25ZAUD4CQ8eXJwHrbnUchZXkK2dZIOzf8Nh6B0IX99khGySx8 bpsp/5fF+/1iOnpPUpj5tH9h8zP4alSeMIvGKGqsqcJjjliFqlfCqvqiwGZ5owlW 4PEDB5WvGFpMvtxj/5L8HY/sNcpTukTVyVKB9Qa2igfQUjWuO0XDhalVFzUnqLgE JWqZVSR7G4Yd/FNQ25t9ucDlVXyAQ5EH -----END CERTIFICATE-----Generated at Tue Sep 9 17:47:40 2025 by rpki-client