$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: XBGfpzhUXPK66EP5dbP3t2hlL34v+w/0gZ+cbF3pvso= Subject key identifier: BF:65:FB:29:97:5A:4F:79:A2:AA:4D:27:0A:93:08:79:AE:5A:79:40 Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 38 Signing time: Sat 09 Aug 2025 08:04:13 +0000 Manifest this update: Sat 09 Aug 2025 08:04:12 +0000 Manifest next update: Sat 16 Aug 2025 08:04:12 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: vpoYJS9XIJwuWooxeC6ZVwqAWjehSCOt8kP8RLLWJR4=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Aug 9 08:04:12 2025 GMT Not After : Aug 16 08:04:12 2025 GMT Subject: CN=689700fc-8700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:ad:66:60:7c:e6:9f:53:7a:4e:10:13:97: fb:0a:68:9b:3b:a6:04:4a:38:83:18:8b:fe:45:12: 3f:38:4d:9a:e7:fe:0d:0e:98:ea:ec:63:7c:b2:50: 27:d9:0d:fe:11:b3:c9:8d:bd:8b:a0:46:bf:0c:a1: 5d:a3:61:4c:da:87:ab:5d:b2:d4:78:c5:66:c6:74: 9f:b5:d9:c9:65:8d:31:8c:a4:0b:b9:6a:63:d7:5a: d8:28:2e:bb:cb:e3:ab:2b:32:76:d8:aa:cc:8e:33: 9e:15:93:35:96:6a:f7:11:31:7c:a3:88:7a:ab:aa: be:05:e1:6f:a5:e0:d1:57:e6:a1:b4:b4:89:1d:92: 6d:3e:d8:80:ef:67:87:af:fd:c7:50:de:e4:51:a6: d2:67:ba:5b:30:3e:8f:d6:48:20:9a:a0:a3:7b:e8: 50:06:f3:dd:18:4e:b3:07:4b:34:ee:9c:b1:95:33: a3:7b:16:92:0b:ec:9b:48:2a:8a:44:31:b6:5a:7f: f6:8e:f1:bc:0b:32:81:91:af:03:e5:aa:14:a8:6f: 9f:66:88:c2:af:ac:00:0b:37:53:26:56:84:c7:78: 1d:18:34:73:31:41:41:95:c3:f7:00:f7:4c:41:13: c8:6f:cb:40:dd:52:36:0d:1d:a6:9c:e6:44:11:ba: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:FB:29:97:5A:4F:79:A2:AA:4D:27:0A:93:08:79:AE:5A:79:40 X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:13:1f:41:61:80:e5:17:38:31:b9:27:09:80:a7:af:d4: 7d:f9:5f:22:85:3d:8d:c2:6e:68:71:2b:83:a0:f8:3f:59:5c: 27:9a:cd:c6:5a:73:9f:a9:72:04:8e:ae:43:0e:00:7c:58:af: 1c:7f:ea:ea:0b:90:2f:99:34:48:e5:4a:72:f8:6d:b1:0a:b6: ae:65:bb:2f:90:fa:77:37:ff:a7:24:5a:dc:7b:10:d1:a2:38: 3a:c3:27:50:6e:bb:a2:a4:1b:ec:42:e9:1e:09:6a:f4:e7:3e: 16:41:cf:b3:9f:a5:ce:30:79:09:f1:2e:0b:ce:58:f9:5a:b0: 82:c5:77:b2:50:6b:13:86:90:03:7d:e3:41:07:ea:79:1e:0d: 18:0c:0e:37:b0:ca:b7:3a:16:25:d6:d5:e1:64:31:e1:25:6a: a3:a0:49:16:30:93:38:05:77:3c:2c:19:c6:fc:17:c2:a1:41: 36:a9:b5:dc:9d:e5:ba:dd:e4:15:f4:99:34:8e:40:b0:1a:77: 7e:21:d0:a7:f2:29:de:b0:3f:7b:98:aa:16:4f:fe:1a:f8:f1: 80:9e:89:8e:a5:b1:16:a9:c5:48:c2:86:0a:d5:55:88:f5:bf: de:ff:21:26:c5:16:fa:8f:f9:16:58:bb:86:84:4d:c9:7c:de: df:55:ee:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA4MDkwODA0MTJaFw0yNTA4MTYwODA0MTJaMBgxFjAUBgNV BAMTDTY4OTcwMGZjLTg3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbsa1mYHzmn1N6ThATl/sKaJs7pgRKOIMYi/5FEj84TZrn/g0OmOrsY3yyUCfZ Df4Rs8mNvYugRr8MoV2jYUzah6tdstR4xWbGdJ+12clljTGMpAu5amPXWtgoLrvL 46srMnbYqsyOM54VkzWWavcRMXyjiHqrqr4F4W+l4NFX5qG0tIkdkm0+2IDvZ4ev /cdQ3uRRptJnulswPo/WSCCaoKN76FAG890YTrMHSzTunLGVM6N7FpIL7JtIKopE MbZaf/aO8bwLMoGRrwPlqhSob59miMKvrAALN1MmVoTHeB0YNHMxQUGVw/cA90xB E8hvy0DdUjYNHaac5kQRus6LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv2X7KZda T3miqk0nCpMIea5aeUAwHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrBEx9BYYDlFzgxuScJgKev1H35XyKFPY3CbmhxK4Og+D9ZXCeazcZa c5+pcgSOrkMOAHxYrxx/6uoLkC+ZNEjlSnL4bbEKtq5luy+Q+nc3/6ckWtx7ENGi ODrDJ1Buu6KkG+xC6R4JavTnPhZBz7Ofpc4weQnxLgvOWPlasILFd7JQaxOGkAN9 40EH6nkeDRgMDjewyrc6FiXW1eFkMeElaqOgSRYwkzgFdzwsGcb8F8KhQTaptdyd 5brd5BX0mTSOQLAad34h0KfyKd6wP3uYqhZP/hr48YCeiY6lsRapxUjChgrVVYj1 v97/ISbFFvqP+RZYu4aETcl83t9V7pU= -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:45 2025 by rpki-client