$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: qS7q6Ebw6aMkB6vQ4DvOtqOCCfP70gBplIKe2Pa1vWU= Subject key identifier: FB:82:94:63:AC:59:48:05:40:46:0E:82:7B:D9:E1:88:A4:07:17:F5 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 4C Signing time: Mon 15 Sep 2025 07:47:51 +0000 Manifest this update: Mon 15 Sep 2025 07:47:50 +0000 Manifest next update: Mon 22 Sep 2025 07:47:50 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: vVS9DBr1i/XSVikTwhPRrSQJKJ0xMbA/+dn/7oBaQeM=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 07:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Sep 15 07:47:50 2025 GMT Not After : Sep 22 07:47:50 2025 GMT Subject: CN=68c7c4a6-cc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:95:20:81:04:61:d1:5b:1c:90:68:c1:e7: 9a:b9:af:69:c2:0e:a0:99:73:b5:81:06:c7:5a:12: e2:df:f5:bf:a0:8f:cd:5b:b4:b0:26:1f:b9:9b:b3: 12:2c:c9:d8:25:79:4a:6d:3f:3b:5e:e1:25:e1:0d: be:bf:c2:18:8a:77:aa:1b:5a:73:2a:17:0b:37:f3: 80:2d:56:1e:b0:eb:40:4c:25:75:9c:e7:41:4d:66: 86:9b:d5:35:e4:c0:25:b2:16:78:62:12:c7:8c:6c: 86:53:a4:97:17:46:72:e7:f7:3f:13:8b:18:f4:9e: a1:2b:48:4c:19:dd:87:2c:3a:4d:89:ef:6c:2e:f8: 75:7b:46:bc:d0:9c:5b:2c:70:de:69:ad:02:24:e1: 14:08:09:ca:59:af:14:3b:74:be:6d:90:43:bd:a9: 16:4e:9e:b4:5b:03:bb:9d:3a:35:bc:e5:09:62:d2: e9:74:e3:21:bc:9d:51:ce:56:38:a0:a6:a1:4d:5b: 70:84:06:a8:81:cd:f0:84:76:8c:fe:a9:50:4c:fc: 39:11:4b:8d:01:b5:43:bf:e2:69:95:61:d9:8e:2e: 0c:37:7b:70:cc:e5:49:91:b6:c5:70:e8:ea:66:28: b9:84:fe:f9:24:61:fa:f7:36:4b:76:7c:4b:df:4b: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:82:94:63:AC:59:48:05:40:46:0E:82:7B:D9:E1:88:A4:07:17:F5 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a6:54:00:e6:89:c9:1d:46:8b:cf:42:95:7a:45:3f:a9:87: f5:cb:81:23:cf:8e:f4:b9:65:72:25:b4:c3:bd:64:38:dc:52: 86:d2:93:86:b2:27:ac:ab:52:0d:61:e3:6f:d1:03:1d:6c:5b: e4:84:a6:33:bb:a6:8f:07:14:80:e9:a3:30:b5:00:1a:96:20: 64:75:f3:43:8c:24:d6:58:2a:ec:5c:cf:11:fd:49:1e:f6:ff: a2:59:ad:a0:3d:ac:6e:56:33:a6:69:52:0f:a2:0d:03:87:6a: 3b:92:14:1c:c3:52:0c:44:66:30:00:83:90:3a:40:c4:ad:7b: 98:ca:ad:b0:dd:cf:6a:77:83:bb:83:ac:80:7e:c8:26:d2:95: 52:24:67:8d:21:c6:7a:81:ab:c4:09:e0:5b:7b:85:9e:a5:42: 94:9c:04:ce:5a:24:6e:48:31:85:72:ae:bc:19:a3:1e:b1:c6: 8e:ae:2c:3d:52:8a:7d:c2:19:4c:1b:14:ae:97:6d:15:67:4a: 70:65:2c:bb:88:ef:75:f1:01:f4:11:7c:2e:0e:1b:0a:8e:aa: 7f:2d:dd:4c:2e:9d:36:2d:9e:39:e6:bb:17:05:13:c6:6d:e6: 3d:e9:ae:2c:ac:50:75:ea:47:4f:91:86:42:e1:36:18:8b:28: 8a:7a:a1:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA5MTUwNzQ3NTBaFw0yNTA5MjIwNzQ3NTBaMBgxFjAUBgNV BAMTDTY4YzdjNGE2LWNjOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIIpUggQRh0VsckGjB55q5r2nCDqCZc7WBBsdaEuLf9b+gj81btLAmH7mbsxIs ydgleUptPzte4SXhDb6/whiKd6obWnMqFws384AtVh6w60BMJXWc50FNZoab1TXk wCWyFnhiEseMbIZTpJcXRnLn9z8Tixj0nqErSEwZ3YcsOk2J72wu+HV7RrzQnFss cN5prQIk4RQICcpZrxQ7dL5tkEO9qRZOnrRbA7udOjW85Qli0ul04yG8nVHOVjig pqFNW3CEBqiBzfCEdoz+qVBM/DkRS40BtUO/4mmVYdmOLgw3e3DM5UmRtsVw6Opm KLmE/vkkYfr3Nkt2fEvfS5aHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+4KUY6xZ SAVARg6Ce9nhiKQHF/UwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACamVADmickdRovPQpV6RT+ph/XLgSPPjvS5ZXIltMO9ZDjcUobSk4ay J6yrUg1h42/RAx1sW+SEpjO7po8HFIDpozC1ABqWIGR180OMJNZYKuxczxH9SR72 /6JZraA9rG5WM6ZpUg+iDQOHajuSFBzDUgxEZjAAg5A6QMSte5jKrbDdz2p3g7uD rIB+yCbSlVIkZ40hxnqBq8QJ4Ft7hZ6lQpScBM5aJG5IMYVyrrwZox6xxo6uLD1S in3CGUwbFK6XbRVnSnBlLLuI73XxAfQRfC4OGwqOqn8t3UwunTYtnjnmuxcFE8Zt 5j3priysUHXqR0+RhkLhNhiLKIp6oRY= -----END CERTIFICATE-----Generated at Mon Sep 15 11:07:31 2025 by rpki-client