$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: OWCVSw4dcobSRRWfltoTAHW7jAVgMpU5JOTCEfQ4fao= Subject key identifier: C7:44:6B:70:4F:E4:1A:A4:16:5B:F3:6C:B4:77:16:B6:2F:09:79:F2 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0BDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 1418 Signing time: Sun 24 Aug 2025 18:49:44 +0000 Manifest this update: Sun 24 Aug 2025 18:49:44 +0000 Manifest next update: Sun 31 Aug 2025 18:49:44 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: 2PuFMwzvWB/Gn8TP+QYjRcPtDaNPoiVdSSw+jX6o80s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Aug 24 18:49:44 2025 GMT Not After : Aug 31 18:49:44 2025 GMT Subject: CN=68ab5ec8-0acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:07:70:d7:ff:20:22:01:dc:6f:a9:e0:59: 19:62:55:b1:50:9d:fb:96:24:28:7f:5d:9f:70:e8: db:f1:84:1e:f2:62:44:43:5a:5f:be:ab:96:f8:16: 3e:fb:cf:e0:e6:13:0d:86:82:c2:60:62:f7:83:12: d4:8e:ac:52:fa:75:8d:fe:fc:1b:67:81:13:dc:95: 22:86:9a:40:12:2a:9c:60:11:0c:97:07:9f:4e:bb: 56:6e:a7:5e:e9:b3:6b:9a:64:2f:9e:c0:7f:53:b0: dc:05:01:ff:21:2a:67:1e:bd:e3:1f:b6:8e:e4:c4: 54:92:10:d7:b6:72:a3:85:68:6f:9a:2e:87:5c:ab: 9d:30:cf:27:74:57:8a:9c:86:2f:b8:f8:3d:76:4a: 22:27:ae:0c:12:f3:0f:aa:8b:b9:ae:6a:5a:88:9d: 0b:1d:22:ae:b3:f0:24:74:6d:2b:5b:2d:26:da:b0: de:69:0f:9b:e5:f3:2f:83:ec:44:6c:f6:d9:f2:76: f3:8f:05:36:f5:ef:a9:88:2d:80:de:1b:9f:14:f9: 80:29:99:7d:85:36:8e:68:47:41:34:71:5e:af:68: 9f:71:0a:5d:e1:5c:b5:79:04:1a:3a:80:95:a3:e6: d9:8c:44:c8:c7:b1:f8:84:d8:f5:88:4a:76:a9:97: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:6B:70:4F:E4:1A:A4:16:5B:F3:6C:B4:77:16:B6:2F:09:79:F2 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:31:d9:e0:88:1e:80:c0:08:e5:f0:9d:33:32:92:cc:7e:fa: e8:12:15:f6:82:01:3b:4e:bc:89:fc:29:e5:47:b7:df:fc:0e: eb:93:07:3f:4e:9e:98:7d:d0:0d:c8:8a:75:32:a2:30:14:cf: 9c:33:fa:0f:23:7b:b7:98:21:a4:e3:96:84:8a:c6:44:25:38: ec:f7:00:13:29:ee:f9:e8:a1:3e:e2:3f:90:aa:55:1c:bb:6c: 0e:c6:ca:13:cb:38:db:59:6f:ab:73:af:bb:c1:87:93:26:1c: 32:05:09:12:f6:15:84:7c:84:ce:8a:11:02:9d:43:0e:62:ff: e3:d3:96:56:e7:a5:bb:70:7e:7f:c4:e7:d9:60:b3:40:67:87: c5:1d:e6:b0:5f:34:26:2b:83:64:04:a2:f3:5e:c7:8a:d3:ca: e2:2e:11:c7:0d:c5:06:f1:b2:39:21:3a:90:cb:28:ce:dd:04: 00:bf:23:f4:b7:d1:80:a8:43:68:d1:b9:13:69:48:b6:fb:d4: 37:54:29:12:f6:9b:16:a4:ea:94:94:e5:21:b2:e6:19:8c:3a: 0e:c6:db:70:66:b0:73:b7:87:1c:ab:b1:00:44:39:08:8e:09: f9:1a:ad:04:27:ac:e8:7e:14:26:18:0c:87:f4:3a:9e:4c:a3: e3:84:26:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUwODI0MTg0OTQ0WhcNMjUwODMxMTg0OTQ0WjAYMRYwFAYD VQQDEw02OGFiNWVjOC0wYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05EHcNf/ICIB3G+p4FkZYlWxUJ37liQof12fcOjb8YQe8mJEQ1pfvquW+BY+ +8/g5hMNhoLCYGL3gxLUjqxS+nWN/vwbZ4ET3JUihppAEiqcYBEMlwefTrtWbqde 6bNrmmQvnsB/U7DcBQH/ISpnHr3jH7aO5MRUkhDXtnKjhWhvmi6HXKudMM8ndFeK nIYvuPg9dkoiJ64MEvMPqou5rmpaiJ0LHSKus/AkdG0rWy0m2rDeaQ+b5fMvg+xE bPbZ8nbzjwU29e+piC2A3hufFPmAKZl9hTaOaEdBNHFer2ifcQpd4Vy1eQQaOoCV o+bZjETIx7H4hNj1iEp2qZe2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdEa3BP 5BqkFlvzbLR3FrYvCXnyMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMdngiB6AwAjl8J0zMpLMfvroEhX2ggE7TryJ/CnlR7ff/A7rkwc/ Tp6YfdANyIp1MqIwFM+cM/oPI3u3mCGk45aEisZEJTjs9wATKe756KE+4j+QqlUc u2wOxsoTyzjbWW+rc6+7wYeTJhwyBQkS9hWEfITOihECnUMOYv/j05ZW56W7cH5/ xOfZYLNAZ4fFHeawXzQmK4NkBKLzXseK08riLhHHDcUG8bI5ITqQyyjO3QQAvyP0 t9GAqENo0bkTaUi2+9Q3VCkS9psWpOqUlOUhsuYZjDoOxttwZrBzt4ccq7EARDkI jgn5Gq0EJ6zofhQmGAyH9DqeTKPjhCb5 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:43 2025 by rpki-client