$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: ztjixopzH3MBa1yU3SpKnUhudK5draaYQ25OOvVWL1w= Subject key identifier: 78:1C:1E:73:F8:B1:A9:7D:FD:5F:D8:6A:66:15:58:BB:61:C9:F3:A8 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 065B Signing time: Fri 08 Aug 2025 23:01:21 +0000 Manifest this update: Fri 08 Aug 2025 23:01:20 +0000 Manifest next update: Fri 15 Aug 2025 23:01:20 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: GqAOIVYDel0J7LEyE6+c1+eR9h2QFpIxvFqq8ekWpQM=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: vh0GgYCDzl5MpyGfL9qB9BZe6rjSGvbzU8V9PATHokg=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Aug 8 23:01:20 2025 GMT Not After : Aug 15 23:01:20 2025 GMT Subject: CN=689681c1-e89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:94:41:c7:e7:70:60:22:64:07:67:61:11: bb:6f:b4:d6:37:c9:0b:2b:c1:3e:e9:1b:7e:50:64: 46:dc:d9:30:d9:13:00:f9:cc:98:44:42:a1:9a:24: 3a:a4:81:d4:08:de:1a:07:06:f0:89:53:bd:05:09: 92:04:f2:c8:f0:9a:87:c9:93:6c:0a:30:71:bb:81: d8:6a:81:fe:ff:2f:02:7c:3d:7a:6a:a9:10:9a:40: 8e:17:d1:65:52:35:62:be:1e:83:d3:c1:33:5a:23: 14:2e:9b:b7:71:23:f6:18:c8:d2:dc:cf:ed:e4:94: 9f:87:8b:ba:be:2f:45:db:97:3c:50:4f:50:2f:4b: b7:b2:86:7c:8f:e0:00:41:c1:a0:1a:9c:31:47:7f: 4f:ef:14:f6:d8:15:9d:b1:36:21:9f:24:5b:4f:1c: 07:16:ba:1d:13:2e:db:b7:31:56:65:a6:9a:09:2a: 11:a9:a8:86:fe:d9:ec:62:39:d5:11:11:84:64:03: fb:4c:a0:d4:49:3a:a4:ba:c3:e3:65:06:61:0b:0a: 78:c9:85:29:13:86:2a:92:f6:5f:e8:e4:97:80:32: aa:b1:18:7f:4b:9d:31:f7:1f:ea:fb:79:3d:dc:18: bf:e1:45:e0:2a:56:db:17:96:ab:ee:2d:df:1a:76: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:1E:73:F8:B1:A9:7D:FD:5F:D8:6A:66:15:58:BB:61:C9:F3:A8 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3b:51:72:c4:13:02:27:67:39:3a:3f:06:7f:7e:4f:06:4f: 0b:b9:05:97:cc:80:7b:dc:6a:14:99:3c:99:74:4a:7e:d2:b6: c0:c5:ff:af:4d:8a:fb:ed:48:a6:4e:59:ec:0d:73:48:4f:76: e3:c1:a4:19:c6:dd:23:b4:ca:5d:1d:12:70:23:a8:9c:33:37: 01:ba:2b:d9:fc:9e:91:dd:c4:b0:cf:92:bb:13:89:05:e6:65: 75:6c:83:cb:91:ff:77:11:c3:dc:cc:29:23:a0:13:30:54:3e: 73:20:10:e1:49:ae:f4:6e:6f:23:ca:f0:9d:bf:ec:a5:b2:d7: 23:51:e6:fd:f0:a9:7e:2e:07:3f:bd:ec:53:f3:28:ec:0d:9a: ff:47:c2:2f:07:1d:7e:61:2a:47:01:1b:fd:27:48:01:10:27: 44:73:ef:8d:eb:f6:33:04:0c:4f:40:37:43:65:8c:40:64:8f: 77:4e:a4:65:f7:64:72:16:e9:1e:a1:df:ea:21:0f:33:65:c6: 6b:96:61:6b:e2:ab:17:b6:65:ef:bb:8b:6b:fe:79:78:a1:95: 0e:4b:48:c7:4e:fd:a0:bb:d2:99:c6:0f:44:09:00:b3:ca:13: f6:09:42:bd:0f:2b:a5:4b:f6:8d:fc:a7:f6:12:0f:f5:4b:11: 5d:3c:8a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwODA4MjMwMTIwWhcNMjUwODE1MjMwMTIwWjAYMRYwFAYD VQQDEw02ODk2ODFjMS1lODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/CUQcfncGAiZAdnYRG7b7TWN8kLK8E+6Rt+UGRG3Nkw2RMA+cyYREKhmiQ6 pIHUCN4aBwbwiVO9BQmSBPLI8JqHyZNsCjBxu4HYaoH+/y8CfD16aqkQmkCOF9Fl UjVivh6D08EzWiMULpu3cSP2GMjS3M/t5JSfh4u6vi9F25c8UE9QL0u3soZ8j+AA QcGgGpwxR39P7xT22BWdsTYhnyRbTxwHFrodEy7btzFWZaaaCSoRqaiG/tnsYjnV ERGEZAP7TKDUSTqkusPjZQZhCwp4yYUpE4YqkvZf6OSXgDKqsRh/S50x9x/q+3k9 3Bi/4UXgKlbbF5ar7i3fGnZIOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgcHnP4 sal9/V/YamYVWLthyfOoMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0O1FyxBMCJ2c5Oj8Gf35PBk8LuQWXzIB73GoUmTyZdEp+0rbAxf+v TYr77UimTlnsDXNIT3bjwaQZxt0jtMpdHRJwI6icMzcBuivZ/J6R3cSwz5K7E4kF 5mV1bIPLkf93EcPczCkjoBMwVD5zIBDhSa70bm8jyvCdv+ylstcjUeb98Kl+Lgc/ vexT8yjsDZr/R8IvBx1+YSpHARv9J0gBECdEc++N6/YzBAxPQDdDZYxAZI93TqRl 92RyFukeod/qIQ8zZcZrlmFr4qsXtmXvu4tr/nl4oZUOS0jHTv2gu9KZxg9ECQCz yhP2CUK9DyulS/aN/Kf2Eg/1SxFdPIrB -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:04 2025 by rpki-client