$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: C/gvUhiGDzhX1sfZZ0jJ5h+k+P2xOGtsEIiFnOinwtU= Subject key identifier: 5D:BA:E9:69:AF:77:7E:83:38:90:76:A5:CB:46:33:B5:BA:64:D7:1B Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: A4 Signing time: Mon 11 Aug 2025 06:31:51 +0000 Manifest this update: Mon 11 Aug 2025 06:31:50 +0000 Manifest next update: Mon 18 Aug 2025 06:31:50 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: QbI45Laj1m75R6J2xKVPj4zjqqQA6N1dKy5Wfiyl6Vk=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Aug 11 06:31:50 2025 GMT Not After : Aug 18 06:31:50 2025 GMT Subject: CN=68998e57-71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:a9:5b:5f:42:9a:9a:56:da:09:8b:9c:64: 45:00:7f:5d:d4:3a:50:eb:cd:93:3f:c3:0f:e9:ab: c7:6e:e6:a7:09:03:5d:26:f9:f1:2d:6f:8e:9b:30: 82:6e:b1:2d:70:1f:17:f6:b1:60:e9:1c:b7:a9:b7: d3:75:f3:0f:76:99:04:ef:1d:bb:b9:b5:1a:3b:bd: f7:65:c0:4c:69:e1:d3:f2:80:56:f6:dc:1b:a8:98: be:e8:0d:53:55:61:07:08:39:65:84:34:1c:11:ab: 9b:b3:82:77:1d:39:39:86:71:c9:b5:72:0c:d2:91: 90:0a:f9:ce:d7:6b:3d:3b:cd:a8:ef:a6:53:3c:08: 12:d1:4d:48:31:db:2f:a6:9e:a9:a6:3a:80:4c:a2: e5:1b:14:8a:95:63:59:df:f0:8a:2e:25:7b:27:a4: 0c:e9:7a:77:4c:ce:a6:c4:2f:c7:7e:49:f5:31:d1: 79:e4:13:d0:7a:65:ca:5a:4d:fe:31:97:2e:01:5c: a4:a1:5f:80:e3:66:f4:ff:39:ba:b8:25:1e:13:37: b4:ca:30:95:01:0a:66:cb:e6:a0:a9:6c:72:52:07: 9b:ce:05:83:7a:de:56:0e:0d:a8:7a:f8:d3:e9:e3: f2:5a:f6:67:03:47:4a:8d:33:7f:48:9e:fa:46:e1: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BA:E9:69:AF:77:7E:83:38:90:76:A5:CB:46:33:B5:BA:64:D7:1B X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:be:a8:df:ee:80:6c:b9:15:cd:d7:da:62:f8:6b:23:48:a6: a0:a5:2f:2e:33:2d:88:11:15:4c:77:e6:80:e4:39:bd:e1:a0: 26:4d:ac:49:fa:32:97:50:e9:19:4a:bb:30:b0:9a:62:b3:ba: 74:29:b6:a6:25:3b:a1:ce:31:20:9e:2e:e8:ce:8f:ce:b6:43: f3:23:71:eb:cd:9f:9e:69:17:b4:cd:b1:10:4f:dd:19:17:38: 1d:ab:38:df:c9:17:08:8c:34:80:5b:84:cf:4a:a2:59:38:dd: d5:d8:58:22:c1:64:8d:d9:38:96:5e:23:6b:ed:ed:3c:79:8f: 9d:54:47:d0:1d:31:3e:a7:72:7a:19:10:e0:1d:2d:16:a1:d4: b2:10:98:4c:8d:7b:06:fc:5b:ea:52:4d:27:b0:95:be:70:41: 5f:88:57:f9:18:27:2e:df:71:aa:e8:de:41:10:b6:de:27:81: e3:fc:fc:13:07:1a:f2:99:91:4e:39:f8:0c:48:40:3d:75:d4: fc:d3:f3:1d:15:94:bd:76:53:05:72:df:d8:d3:ac:10:d7:ce: 12:f3:31:f9:69:e9:38:cd:18:bd:9e:e4:6b:96:0c:17:b7:5c: cf:ce:88:f5:11:c6:bc:cc:46:cc:a9:8d:2e:80:8b:07:66:02: fd:db:e5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUwODExMDYzMTUwWhcNMjUwODE4MDYzMTUwWjAYMRYwFAYD VQQDEw02ODk5OGU1Ny03MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVipW19CmppW2gmLnGRFAH9d1DpQ682TP8MP6avHbuanCQNdJvnxLW+OmzCC brEtcB8X9rFg6Ry3qbfTdfMPdpkE7x27ubUaO733ZcBMaeHT8oBW9twbqJi+6A1T VWEHCDllhDQcEaubs4J3HTk5hnHJtXIM0pGQCvnO12s9O82o76ZTPAgS0U1IMdsv pp6ppjqATKLlGxSKlWNZ3/CKLiV7J6QM6Xp3TM6mxC/Hfkn1MdF55BPQemXKWk3+ MZcuAVykoV+A42b0/zm6uCUeEze0yjCVAQpmy+agqWxyUgebzgWDet5WDg2oevjT 6ePyWvZnA0dKjTN/SJ76RuHSKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF266Wmv d36DOJB2pctGM7W6ZNcbMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATvqjf7oBsuRXN19pi+GsjSKagpS8uMy2IERVMd+aA5Dm94aAmTaxJ +jKXUOkZSrswsJpis7p0KbamJTuhzjEgni7ozo/OtkPzI3HrzZ+eaRe0zbEQT90Z FzgdqzjfyRcIjDSAW4TPSqJZON3V2FgiwWSN2TiWXiNr7e08eY+dVEfQHTE+p3J6 GRDgHS0WodSyEJhMjXsG/FvqUk0nsJW+cEFfiFf5GCcu33Gq6N5BELbeJ4Hj/PwT BxrymZFOOfgMSEA9ddT80/MdFZS9dlMFct/Y06wQ184S8zH5aek4zRi9nuRrlgwX t1zPzoj1Eca8zEbMqY0ugIsHZgL92+VN -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:05 2025 by rpki-client