$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: mnMOLvwnZhV7/tuHP4Z9ZeZvlG7bKxil3jrEEz9SN1k= Subject key identifier: D5:9F:A3:FE:2C:C6:FA:05:33:4F:49:52:DA:4A:D6:17:39:61:E6:D5 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 07A4 Signing time: Fri 08 Aug 2025 21:46:29 +0000 Manifest this update: Fri 08 Aug 2025 21:46:29 +0000 Manifest next update: Fri 15 Aug 2025 21:46:29 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: 2Q6pdieN2MylcHvOXs6e34gfCdifPEjasmFM347dCEg=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Aug 8 21:46:29 2025 GMT Not After : Aug 15 21:46:29 2025 GMT Subject: CN=68967035-f590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:a7:4f:0d:7f:6e:1c:af:4b:a9:bb:93:05: cd:e3:e8:9a:e5:fe:84:26:ae:23:ca:a4:fa:8e:01: dc:ff:37:be:33:53:a9:53:25:fb:dd:fe:9d:37:70: 36:3d:09:b5:df:bf:0e:c1:ca:5c:e8:33:5e:f5:82: e1:2e:40:2e:4e:a5:98:f5:ed:5b:00:77:8e:01:16: a2:bb:14:64:2c:53:7d:a7:94:80:7a:3c:87:e9:4d: f4:0b:4f:b8:e3:43:50:1f:be:ef:69:cd:3c:ca:a6: ed:50:6d:0c:cc:1e:c5:74:49:b3:20:61:aa:2e:da: c0:64:4d:b2:a4:ff:0c:55:3b:28:86:06:ff:31:48: 87:70:17:c1:7c:b4:b2:46:f3:91:5a:c4:15:d8:5a: 96:a2:f2:c7:63:f1:aa:9a:75:6a:84:5e:f4:8f:d2: 94:1e:8f:8d:f6:6c:69:44:8f:4d:53:9b:0a:5d:4e: b0:d3:1c:f9:f2:6d:3e:a4:5e:32:0d:0b:41:80:a1: a5:b2:fe:03:c7:a7:9a:0d:1f:5d:cf:3d:66:70:7b: dd:09:9c:aa:2a:57:36:65:53:d7:cc:13:37:6a:cd: 42:3b:27:5a:8e:91:48:c7:03:56:30:d3:99:bb:9e: 0f:ad:a4:7c:73:ff:75:f0:ff:fb:a9:a3:4f:e7:c1: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9F:A3:FE:2C:C6:FA:05:33:4F:49:52:DA:4A:D6:17:39:61:E6:D5 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:be:73:68:1b:39:05:19:86:33:a2:a2:18:2a:35:79:22: be:11:a9:01:4b:ef:69:a0:ab:29:8d:9e:46:86:58:80:a1:d3: 0f:01:df:12:5b:52:cf:93:68:64:bb:c9:4d:e4:3b:6f:13:de: b0:8b:f8:9c:b7:fb:e1:49:f6:f8:af:42:a7:7c:80:28:50:2d: 2c:ff:13:2a:6e:3e:dc:b4:ed:b2:82:f5:cc:c1:95:3a:85:19: d9:e2:d9:a9:7e:8c:2e:1b:a5:05:d3:64:e4:60:1e:4d:90:d6: e0:0f:06:c6:aa:2c:f7:dd:d2:6e:55:c7:7f:b5:92:64:16:62: 00:99:59:aa:b1:9c:be:32:08:fa:b5:d2:bc:0e:cc:b2:3e:78: 61:56:68:f2:ac:86:7b:57:b6:c6:f9:89:77:71:ca:ed:87:1e: b5:2f:48:7a:14:ab:a3:7f:d5:c5:0d:99:fa:f5:ba:5f:eb:1b: 97:8e:9c:f4:b5:28:9a:5b:87:14:c2:1a:6b:0b:4d:4d:c5:14: e4:fb:02:cf:7e:45:b0:34:3a:97:e4:cf:de:0a:69:f5:f3:16: c3:2c:e9:80:a5:9a:b2:72:d8:dc:ba:b2:d9:be:57:83:7b:34: 30:37:a1:76:5f:d9:4e:18:41:9b:8a:ee:d4:cb:98:aa:86:83: d0:a2:58:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwODA4MjE0NjI5WhcNMjUwODE1MjE0NjI5WjAYMRYwFAYD VQQDEw02ODk2NzAzNS1mNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaenTw1/bhyvS6m7kwXN4+ia5f6EJq4jyqT6jgHc/ze+M1OpUyX73f6dN3A2 PQm1378Owcpc6DNe9YLhLkAuTqWY9e1bAHeOARaiuxRkLFN9p5SAejyH6U30C0+4 40NQH77vac08yqbtUG0MzB7FdEmzIGGqLtrAZE2ypP8MVTsohgb/MUiHcBfBfLSy RvORWsQV2FqWovLHY/GqmnVqhF70j9KUHo+N9mxpRI9NU5sKXU6w0xz58m0+pF4y DQtBgKGlsv4Dx6eaDR9dzz1mcHvdCZyqKlc2ZVPXzBM3as1COydajpFIxwNWMNOZ u54PraR8c/918P/7qaNP58Fb8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWfo/4s xvoFM09JUtpK1hc5YebVMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCFL5zaBs5BRmGM6KiGCo1eSK+EakBS+9poKspjZ5GhliAodMPAd8S W1LPk2hku8lN5DtvE96wi/ict/vhSfb4r0KnfIAoUC0s/xMqbj7ctO2ygvXMwZU6 hRnZ4tmpfowuG6UF02TkYB5NkNbgDwbGqiz33dJuVcd/tZJkFmIAmVmqsZy+Mgj6 tdK8DsyyPnhhVmjyrIZ7V7bG+Yl3ccrthx61L0h6FKujf9XFDZn69bpf6xuXjpz0 tSiaW4cUwhprC01NxRTk+wLPfkWwNDqX5M/eCmn18xbDLOmApZqyctjcurLZvleD ezQwN6F2X9lOGEGbiu7Uy5iqhoPQolhb -----END CERTIFICATE-----Generated at Sat Aug 9 10:38:18 2025 by rpki-client