$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: MJVZ6Mpav0XdRDyLa69M5wZirBlIgbYDCXByViyba7Q= Subject key identifier: F8:87:B5:3E:7F:62:C0:F8:DD:BE:9F:43:37:B8:59:40:E3:53:21:F4 Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 30 Signing time: Thu 21 Aug 2025 07:52:08 +0000 Manifest this update: Thu 21 Aug 2025 07:52:08 +0000 Manifest next update: Thu 28 Aug 2025 07:52:08 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: w/yGUmmgabrKuOHsCjvKegLLzhE+VPILLun4kRL046Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Aug 21 07:52:08 2025 GMT Not After : Aug 28 07:52:08 2025 GMT Subject: CN=68a6d028-416d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:59:19:97:d4:f9:da:be:92:61:6f:69:4b: 11:7e:37:9d:98:12:bc:d3:43:12:41:d8:97:9b:ec: 04:2f:db:d2:ac:ca:8b:ec:1b:4b:c0:17:b2:43:75: 20:2a:05:e4:fb:07:3b:e4:39:75:6b:00:af:5a:61: bc:3a:50:94:04:e8:ba:8d:d1:2e:a8:22:f6:92:1f: be:bd:eb:3a:15:d0:ec:e6:36:80:63:16:a2:45:80: 55:93:84:b3:01:30:0b:dc:cf:5b:e2:9d:d2:49:e6: e4:ad:ed:70:8e:bd:4c:9f:b0:99:dd:34:b0:5c:fa: 9e:aa:e7:e6:48:af:dc:ae:e9:7f:0e:cb:8d:28:c4: 28:42:e5:b0:39:fc:16:cb:6b:5b:a0:4b:28:72:9b: 14:0c:25:39:42:ae:ea:d8:f8:f0:1f:80:ff:bb:64: 18:61:41:dc:b3:8c:59:df:01:81:87:bf:c0:b0:50: 66:65:db:cc:b8:48:1a:35:e6:f9:41:c6:f4:bf:d2: 6f:95:bd:4f:b4:35:f3:cc:bd:49:bc:2f:51:44:d2: 57:d6:f9:9d:22:37:b2:60:9c:be:67:f5:19:72:48: c2:53:b3:b5:3f:12:ea:9e:0c:cc:93:69:fc:d3:5a: 55:f9:2b:ea:18:f5:c1:cd:1f:c0:6b:3e:05:1b:18: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:B5:3E:7F:62:C0:F8:DD:BE:9F:43:37:B8:59:40:E3:53:21:F4 X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:62:9b:14:d5:a9:d7:fe:d2:81:9f:d2:40:62:7c:20:da:fc: 09:c9:7a:1b:a7:68:04:33:ae:8d:a7:ab:ad:aa:92:4f:db:45: 1e:a5:e0:a5:c0:e7:d4:19:75:3b:35:66:ae:f9:21:e8:10:bd: 86:a6:0c:db:db:f5:6e:5f:2d:e8:5d:b3:1b:d1:17:2f:43:d3: a7:a2:4d:b4:a2:80:ef:37:d0:cf:02:0c:ce:d0:e7:b6:9a:b2: 77:16:e0:f4:c1:7e:46:5b:29:c7:fb:2c:5f:2f:a6:0b:0e:65: f7:61:ce:17:12:3a:c8:1b:c6:8d:b3:0c:56:0d:36:28:ca:96: 31:2f:c7:dc:48:79:79:e3:00:2b:81:f1:da:49:c3:b0:fc:a6: 38:e5:9d:e5:55:72:5b:45:8f:6a:90:2c:8d:5c:25:7f:c2:05: f1:fc:fe:dc:40:33:24:95:3b:ca:44:6b:f2:3a:35:68:4a:e6: f7:46:2c:58:c6:e2:cf:be:63:ff:74:ca:ff:d0:d0:e0:69:eb: 42:8a:95:8f:3f:a6:c5:4e:56:a8:ce:a9:f8:d4:62:d9:70:71: 19:19:f5:53:0c:9e:34:51:9b:a6:03:60:1d:c6:8a:c0:2e:5a: 3f:90:7b:bd:d1:01:09:c3:1c:84:ac:21:a9:42:13:a5:6f:01: 9f:63:43:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTA4MjEwNzUyMDhaFw0yNTA4MjgwNzUyMDhaMBgxFjAUBgNV BAMTDTY4YTZkMDI4LTQxNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCelkZl9T52r6SYW9pSxF+N52YErzTQxJB2Jeb7AQv29KsyovsG0vAF7JDdSAq BeT7BzvkOXVrAK9aYbw6UJQE6LqN0S6oIvaSH7696zoV0OzmNoBjFqJFgFWThLMB MAvcz1vindJJ5uSt7XCOvUyfsJndNLBc+p6q5+ZIr9yu6X8Oy40oxChC5bA5/BbL a1ugSyhymxQMJTlCrurY+PAfgP+7ZBhhQdyzjFnfAYGHv8CwUGZl28y4SBo15vlB xvS/0m+VvU+0NfPMvUm8L1FE0lfW+Z0iN7JgnL5n9RlySMJTs7U/EuqeDMyTafzT WlX5K+oY9cHNH8BrPgUbGGMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+Ie1Pn9i wPjdvp9DN7hZQONTIfQwHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlimxTVqdf+0oGf0kBifCDa/AnJehunaAQzro2nq62qkk/bRR6l4KXA 59QZdTs1Zq75IegQvYamDNvb9W5fLehdsxvRFy9D06eiTbSigO830M8CDM7Q57aa sncW4PTBfkZbKcf7LF8vpgsOZfdhzhcSOsgbxo2zDFYNNijKljEvx9xIeXnjACuB 8dpJw7D8pjjlneVVcltFj2qQLI1cJX/CBfH8/txAMySVO8pEa/I6NWhK5vdGLFjG 4s++Y/90yv/Q0OBp60KKlY8/psVOVqjOqfjUYtlwcRkZ9VMMnjRRm6YDYB3GisAu Wj+Qe73RAQnDHISsIalCE6VvAZ9jQ5k= -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:15 2025 by rpki-client