$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: 5ftZuHsFPuR5FI44PZPW+XCCYTjTm6PDx/68+ZkMg5Q= Subject key identifier: CD:EE:CD:EE:94:53:A5:F7:5A:67:68:94:E0:1F:C5:24:99:06:05:4D Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 07DF Signing time: Thu 18 Sep 2025 21:21:22 +0000 Manifest this update: Thu 18 Sep 2025 21:21:21 +0000 Manifest next update: Thu 25 Sep 2025 21:21:21 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: DgpXRs8XnuWfu4jqKy260OIylbV27wNdHGgDVnGgTj4=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Sep 18 21:21:21 2025 GMT Not After : Sep 25 21:21:21 2025 GMT Subject: CN=68cc77d1-aade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:7a:b7:be:bc:46:64:9d:49:9e:60:bf:77: 38:f6:1e:27:a2:b4:0b:7b:22:10:89:fb:05:74:b6: 1e:08:d3:f5:04:5d:bd:78:ce:e1:68:16:c6:13:d2: 13:aa:3e:0d:1e:49:2d:49:b0:e4:29:80:55:6f:00: fb:1d:89:b8:1b:8a:ad:35:7f:4a:9a:ee:fd:fd:91: a2:66:7c:58:8c:fa:95:3a:09:41:9b:9c:1f:8c:d1: 2f:4d:85:b5:7e:21:c8:ce:0a:16:a3:e3:06:db:69: f5:40:fe:6d:be:25:6e:00:a0:b1:1d:bf:d2:80:18: bc:f6:5f:a4:fe:12:5b:0b:bb:7b:18:93:f0:33:a0: 96:03:4c:ce:11:2e:8c:3e:fd:92:87:47:fd:f2:b4: 28:77:68:35:09:52:5c:95:d4:d3:22:d3:2d:17:b8: b2:43:2e:5c:58:f9:62:d8:80:9b:de:b4:49:d8:21: 67:68:45:3c:50:d4:ff:df:89:c0:f3:5d:c1:57:6e: c2:d0:68:61:6c:11:a1:2e:88:57:64:c2:33:ef:d4: 07:70:11:49:66:71:83:b7:13:fa:9c:41:f2:24:e0: e7:e9:2d:53:cc:95:e6:6c:98:54:b7:00:b6:dc:42: 55:5e:55:7c:f0:6f:b0:47:90:6d:0a:40:8b:e5:ae: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:CD:EE:94:53:A5:F7:5A:67:68:94:E0:1F:C5:24:99:06:05:4D X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:86:c9:70:ad:28:40:be:5c:0c:0f:8d:81:ea:e2:2f:48: f4:7f:12:13:b7:d7:74:8f:6c:b8:a4:c2:37:2a:e4:1b:1a:ec: 5d:40:d7:ec:aa:2b:87:1f:22:e0:f5:d8:48:f1:c6:cd:1b:08: a7:12:57:32:dd:59:22:4b:78:ac:e8:15:34:db:4c:b6:05:48: 92:08:00:a1:54:ba:71:8f:1e:cf:9b:35:39:e0:19:35:d9:5b: 84:b4:09:32:0b:50:8b:01:5b:31:a5:cf:98:f1:d5:be:aa:9d: 84:fd:18:57:d3:d1:1d:28:62:34:dd:72:29:f7:22:5c:53:5e: b4:14:08:4f:13:2a:ad:06:bb:9c:75:11:c1:fe:0c:04:9c:df: 98:b4:74:95:2e:10:87:71:da:26:2f:47:b5:31:8a:84:d4:9a: df:f1:61:8d:2f:5f:a9:6f:47:cc:9d:22:31:6b:0b:db:65:78: 6b:e3:b0:71:3c:5a:eb:0a:41:9f:f7:46:54:24:47:b0:55:0e: c8:e3:f7:83:52:bb:bb:56:ab:5a:cd:c2:27:61:75:98:c6:9d: 62:87:28:b3:0d:0c:ca:1a:62:6a:ff:ef:92:58:d3:17:53:72: c1:a5:26:f9:a4:a3:92:7c:08:b5:32:d6:d0:63:56:94:8e:f1: d0:31:fb:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUwOTE4MjEyMTIxWhcNMjUwOTI1MjEyMTIxWjAYMRYwFAYD VQQDEw02OGNjNzdkMS1hYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF56t768RmSdSZ5gv3c49h4norQLeyIQifsFdLYeCNP1BF29eM7haBbGE9IT qj4NHkktSbDkKYBVbwD7HYm4G4qtNX9Kmu79/ZGiZnxYjPqVOglBm5wfjNEvTYW1 fiHIzgoWo+MG22n1QP5tviVuAKCxHb/SgBi89l+k/hJbC7t7GJPwM6CWA0zOES6M Pv2Sh0f98rQod2g1CVJcldTTItMtF7iyQy5cWPli2ICb3rRJ2CFnaEU8UNT/34nA 813BV27C0GhhbBGhLohXZMIz79QHcBFJZnGDtxP6nEHyJODn6S1TzJXmbJhUtwC2 3EJVXlV88G+wR5BtCkCL5a7UywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3uze6U U6X3WmdolOAfxSSZBgVNMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKIbJcK0oQL5cDA+NgeriL0j0fxITt9d0j2y4pMI3KuQbGuxdQNfs qiuHHyLg9dhI8cbNGwinElcy3VkiS3is6BU020y2BUiSCAChVLpxjx7PmzU54Bk1 2VuEtAkyC1CLAVsxpc+Y8dW+qp2E/RhX09EdKGI03XIp9yJcU160FAhPEyqtBruc dRHB/gwEnN+YtHSVLhCHcdomL0e1MYqE1Jrf8WGNL1+pb0fMnSIxawvbZXhr47Bx PFrrCkGf90ZUJEewVQ7I4/eDUru7VqtazcInYXWYxp1ihyizDQzKGmJq/++SWNMX U3LBpSb5pKOSfAi1MtbQY1aUjvHQMfsZ -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:38 2025 by rpki-client