$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft File: lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json) Hash identifier: aj/YQ8UuqXphEiqCTUrap9N5fRpxiiBLyzpyxJ3mxi8= Subject key identifier: DC:03:E6:1C:8D:93:DE:55:0F:62:E2:23:CD:B3:AC:16:D8:B8:D5:1A Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 Certificate issuer: /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft Manifest number: 3F Signing time: Thu 07 Aug 2025 08:10:45 +0000 Manifest this update: Thu 07 Aug 2025 08:10:45 +0000 Manifest next update: Thu 14 Aug 2025 08:10:45 +0000 Files and hashes: 1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: nTnsVNpj+BFTyvtM5jDv2bHERJ5MKZZCG9sszDqdheQ=) 2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Validity Not Before: Aug 7 08:10:45 2025 GMT Not After : Aug 14 08:10:45 2025 GMT Subject: CN=68945f85-79fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:c3:32:4a:70:f0:58:a9:62:3a:bb:84:a1: 36:3f:d9:ab:29:8c:09:e1:07:5d:df:54:be:59:27: d3:b7:16:b3:6e:68:dd:36:2a:72:33:d4:bb:83:6d: 47:ee:9c:7c:03:fc:1a:15:40:8c:98:b7:c2:4f:6d: cd:36:44:ce:05:c3:38:4f:a0:b6:29:6a:0f:cc:68: 61:c0:f8:e1:35:d6:8d:70:cb:1f:f1:3d:b3:54:1f: 89:57:28:ae:1e:4d:72:bd:ff:b3:a8:7e:c6:e6:21: 08:ae:ec:d4:c3:c6:65:aa:2f:33:a7:ef:df:d1:f8: 0d:80:de:19:cd:1f:2a:7b:8d:79:fd:1f:8b:3f:a4: 13:60:c4:24:e7:09:2a:46:64:6c:53:91:3c:ec:15: 6c:c1:52:68:30:b7:87:66:bb:e8:a7:4e:52:61:c9: 6a:7d:db:d0:40:31:6a:94:3f:63:a0:76:de:4e:2f: 68:c1:51:81:48:f6:fd:a5:87:e2:25:b4:fd:d8:88: c9:0b:0b:75:ca:ea:8a:db:e8:6c:8f:83:f1:e9:db: 9a:31:11:49:27:d7:81:71:eb:9e:0f:62:85:61:bd: 73:f4:bb:66:9e:f2:ac:d3:d9:36:4d:e0:eb:9f:88: 16:03:28:21:90:05:77:66:34:33:09:7e:cc:e7:34: c9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:03:E6:1C:8D:93:DE:55:0F:62:E2:23:CD:B3:AC:16:D8:B8:D5:1A X509v3 Authority Key Identifier: keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:21:a3:f7:f9:c4:b3:79:8c:d6:9a:c3:35:f0:d2:da:90:66: a2:7c:2f:1e:78:a7:8b:0d:34:14:4d:0c:76:3b:54:13:0c:6a: a0:93:40:93:ad:d8:74:4e:28:b9:c8:0c:c2:2e:b3:9a:22:95: 8a:37:f0:44:6a:63:fb:78:12:e9:76:d8:3e:aa:2e:a9:21:d7: e3:a3:54:6d:0b:ae:f6:dc:d8:ed:c8:18:cd:6f:c1:51:12:8c: 02:99:73:96:38:07:f5:d6:1d:86:05:5d:05:0f:61:30:d7:57: b1:21:bc:f7:2c:e3:47:17:e0:4a:ec:09:b0:27:97:97:84:d5: 10:eb:cb:94:66:1c:dc:c0:98:cb:dc:ca:54:cc:73:19:88:70: 87:17:2c:35:e7:3d:8c:8a:66:bb:6b:5d:9b:13:be:29:69:5c: 6f:8d:88:3e:4c:07:fe:0f:cc:b7:72:9c:6b:d6:9a:bf:37:19: 14:cb:3c:16:45:88:5b:1a:54:a3:18:9b:c5:47:01:d6:aa:54: 23:c2:40:b2:ea:8a:3a:95:68:7f:93:29:4b:b1:78:b1:f6:c9: 55:9d:3c:1f:00:35:5f:19:74:8e:ce:11:81:3c:da:54:c7:93: 71:e4:8c:ec:be:0c:a7:95:35:81:fa:79:be:2a:85:07:d2:a0: ef:2a:21:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTUzMjExMC8GA1UEBRMoOTQ1MDhCMkFBQjAzMkFBMzNGOUEwMDI4MjU4MjNGOUFC ODVDNzAxMjAeFw0yNTA4MDcwODEwNDVaFw0yNTA4MTQwODEwNDVaMBgxFjAUBgNV BAMTDTY4OTQ1Zjg1LTc5ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqAMMySnDwWKliOruEoTY/2aspjAnhB13fVL5ZJ9O3FrNuaN02KnIz1LuDbUfu nHwD/BoVQIyYt8JPbc02RM4FwzhPoLYpag/MaGHA+OE11o1wyx/xPbNUH4lXKK4e TXK9/7OofsbmIQiu7NTDxmWqLzOn79/R+A2A3hnNHyp7jXn9H4s/pBNgxCTnCSpG ZGxTkTzsFWzBUmgwt4dmu+inTlJhyWp929BAMWqUP2Ogdt5OL2jBUYFI9v2lh+Il tP3YiMkLC3XK6orb6GyPg/Hp25oxEUkn14Fx654PYoVhvXP0u2ae8qzT2TZN4Ouf iBYDKCGQBXdmNDMJfsznNMlXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3APmHI2T 3lUPYuIjzbOsFti41RowHwYDVR0jBBgwFoAUlFCLKqsDKqM/mgAoJYI/mrhccBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTMyL0YzN0JENjdBMTlD NTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FNX21nQW9KWUlfbXJoY2NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEZDTEtxc0RLcU1fbWdBb0pZSV9tcmhjY0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 NTMyL0YzN0JENjdBMTlDNTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FN X21nQW9KWUlfbXJoY2NCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsho/f5xLN5jNaawzXw0tqQZqJ8Lx54p4sNNBRNDHY7VBMMaqCTQJOt 2HROKLnIDMIus5oilYo38ERqY/t4Eul22D6qLqkh1+OjVG0Lrvbc2O3IGM1vwVES jAKZc5Y4B/XWHYYFXQUPYTDXV7EhvPcs40cX4ErsCbAnl5eE1RDry5RmHNzAmMvc ylTMcxmIcIcXLDXnPYyKZrtrXZsTvilpXG+NiD5MB/4PzLdynGvWmr83GRTLPBZF iFsaVKMYm8VHAdaqVCPCQLLqijqVaH+TKUuxeLH2yVWdPB8ANV8ZdI7OEYE82lTH k3HkjOy+DKeVNYH6eb4qhQfSoO8qIcI= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:59 2025 by rpki-client