$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: LxjPiMBGhNTNWnEtcCMKl0ven9jav6XxMrNhnDTWjvs= Subject key identifier: C8:7C:F6:29:2A:EA:73:BD:C9:24:8A:B3:1A:B5:4C:2A:D5:F8:24:63 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 08FB Signing time: Fri 08 Aug 2025 20:43:08 +0000 Manifest this update: Fri 08 Aug 2025 20:43:07 +0000 Manifest next update: Fri 15 Aug 2025 20:43:07 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: AXU2tWFAZn/CBnNzk1mv/cu5j4gLJC28ip2mXNN/+14=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: CznDNzibfuN72mTm1dEEU/9+8bTnV0dxmZQmYKqdCoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Aug 8 20:43:07 2025 GMT Not After : Aug 15 20:43:07 2025 GMT Subject: CN=6896615c-9f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:5f:c1:41:2a:5f:93:ef:80:fc:95:bb:d7: 8d:0d:91:87:cd:fa:8e:c5:84:3b:6c:75:99:91:fc: 83:43:b5:5f:d0:49:b6:e6:65:8b:0e:18:c6:50:80: 37:d1:72:0f:02:fd:96:b9:d2:d3:c6:38:81:f7:04: 36:cd:d7:9c:b2:06:ec:25:02:09:22:7e:e4:88:eb: 04:08:62:18:b0:a3:39:89:2e:0d:43:b0:29:ed:46: 4a:2d:df:dd:97:65:02:51:95:5d:0e:26:c8:7a:31: fc:b9:4d:e1:17:2b:7f:83:00:bd:0d:19:f5:04:bb: 59:f6:83:bf:c1:92:ce:6e:17:7d:e7:fa:45:e3:52: 18:43:b0:ba:36:df:09:0b:be:41:a2:2f:bd:c6:ab: 7d:b1:0d:64:b2:09:d8:fc:e4:51:61:56:94:85:5f: 68:3d:48:ad:9c:15:d8:29:cd:1c:39:da:72:81:9a: 35:6e:9d:9c:36:1a:17:0a:94:2c:a5:e1:49:09:37: ea:f6:c2:30:75:09:7e:04:a4:f0:80:f0:6f:c3:3d: 6a:4b:84:be:00:99:fb:8d:20:8d:dc:69:da:2c:4d: 0b:bc:53:b8:ea:13:85:37:36:d5:ee:a0:91:57:4d: 15:a2:cf:75:d0:fa:31:02:f3:93:bc:44:05:8d:78: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:F6:29:2A:EA:73:BD:C9:24:8A:B3:1A:B5:4C:2A:D5:F8:24:63 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b8:4f:b6:50:87:b5:93:e5:be:f3:71:bd:c4:bd:a3:fb:c9: 6a:70:88:17:0c:3d:1f:13:53:a8:79:fd:59:1f:17:c7:ed:fe: ea:f0:0f:f3:c8:04:27:64:d3:2b:bb:a8:9b:85:fd:06:48:64: 66:59:1f:b7:a2:37:44:52:40:25:e3:b1:65:4d:23:d3:a5:11: 93:2d:ba:a2:12:81:8b:71:0c:53:be:c7:22:4b:fc:4d:7f:40: 09:ae:bf:d1:66:67:ff:ca:bc:d6:74:99:57:68:87:18:93:28: e3:e0:d8:ca:06:67:ee:f0:9e:55:5e:03:11:92:97:f6:5e:64: cb:8f:1c:38:81:b0:47:61:00:79:9b:36:f3:c7:80:76:6d:5d: cb:47:87:99:3d:eb:5d:5b:24:c5:70:5d:64:74:ac:55:c5:17: c4:35:aa:3e:5f:14:c6:b9:3a:8f:d8:71:db:70:d2:d2:85:8b: 4f:69:7c:67:56:e1:4f:85:fb:b8:5e:35:5e:e9:f5:81:00:2a: 98:b7:87:48:28:e6:9c:62:4f:a8:99:6a:13:40:a3:e4:80:47: 2b:3e:ce:a7:c1:e8:71:14:16:36:75:48:aa:4a:5b:e8:24:d7: 3b:93:34:3a:77:91:ca:7d:23:47:11:0a:c4:4d:b3:4a:7e:c4: 75:30:dc:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwODA4MjA0MzA3WhcNMjUwODE1MjA0MzA3WjAYMRYwFAYD VQQDEw02ODk2NjE1Yy05ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLJfwUEqX5PvgPyVu9eNDZGHzfqOxYQ7bHWZkfyDQ7Vf0Em25mWLDhjGUIA3 0XIPAv2WudLTxjiB9wQ2zdecsgbsJQIJIn7kiOsECGIYsKM5iS4NQ7Ap7UZKLd/d l2UCUZVdDibIejH8uU3hFyt/gwC9DRn1BLtZ9oO/wZLObhd95/pF41IYQ7C6Nt8J C75Boi+9xqt9sQ1ksgnY/ORRYVaUhV9oPUitnBXYKc0cOdpygZo1bp2cNhoXCpQs peFJCTfq9sIwdQl+BKTwgPBvwz1qS4S+AJn7jSCN3GnaLE0LvFO46hOFNzbV7qCR V00Vos910PoxAvOTvEQFjXgnvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh89ikq 6nO9ySSKsxq1TCrV+CRjMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJuE+2UIe1k+W+83G9xL2j+8lqcIgXDD0fE1Ooef1ZHxfH7f7q8A/z yAQnZNMru6ibhf0GSGRmWR+3ojdEUkAl47FlTSPTpRGTLbqiEoGLcQxTvsciS/xN f0AJrr/RZmf/yrzWdJlXaIcYkyjj4NjKBmfu8J5VXgMRkpf2XmTLjxw4gbBHYQB5 mzbzx4B2bV3LR4eZPetdWyTFcF1kdKxVxRfENao+XxTGuTqP2HHbcNLShYtPaXxn VuFPhfu4XjVe6fWBACqYt4dIKOacYk+omWoTQKPkgEcrPs6nwehxFBY2dUiqSlvo JNc7kzQ6d5HKfSNHEQrETbNKfsR1MNx6 -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:22 2025 by rpki-client