$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: 2ZSY37Pjf/dyFST3wvoTabsqw0rf5dN3Bba2AxkjeB8= Subject key identifier: D0:0E:E7:69:4E:9E:5D:33:43:74:C6:DB:8B:32:4A:D5:14:E7:B1:20 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 0139 Signing time: Sat 09 Aug 2025 04:50:09 +0000 Manifest this update: Sat 09 Aug 2025 04:50:09 +0000 Manifest next update: Sat 16 Aug 2025 04:50:09 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: Iwt6htXoQu7S3ENPdH4dgoHSqinKkc22yt/xTZ6WsfA=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Aug 9 04:50:09 2025 GMT Not After : Aug 16 04:50:09 2025 GMT Subject: CN=6896d381-1bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:32:90:b3:2e:43:0c:66:e0:ac:76:f2:18: 28:6e:87:55:4c:5c:5f:46:79:48:50:a9:27:67:a7: bd:3b:e8:f3:6d:b5:cb:36:cc:7f:b7:ad:13:ca:dd: 5c:0e:3a:3c:9d:77:3b:00:6d:d5:da:a6:d1:43:68: 9a:7d:85:50:37:fa:e2:07:a9:08:f5:8b:60:80:76: bf:b4:7a:fe:dd:42:e4:86:a3:fa:27:f5:b2:44:95: cc:22:8a:01:85:0c:f8:14:a3:44:c0:9c:1c:ce:a9: 50:e4:f4:e3:40:a4:78:b8:18:b1:39:44:fb:45:12: 10:54:1d:e4:9f:23:73:1c:1b:88:f0:97:14:52:45: 54:67:3a:15:46:a4:51:76:6a:91:a6:f6:17:79:ca: c0:1f:39:a1:8f:a5:32:d0:d6:fd:e5:51:e1:bc:1c: 6c:83:9b:0d:92:7c:9b:f5:6c:60:1a:9e:73:90:5d: e1:e3:bd:6a:fe:b9:db:6b:0b:7b:7c:8f:b8:2e:b0: 3f:8d:94:30:cd:68:2f:b6:a6:a0:96:f5:61:58:85: c2:58:e1:d0:7e:3e:ab:d1:58:6d:d3:48:11:1e:28: da:0f:fc:91:af:6f:17:47:46:ab:01:0d:85:e7:bd: 87:f9:15:19:d5:84:5e:1c:0b:e6:fd:bb:7a:c6:92: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0E:E7:69:4E:9E:5D:33:43:74:C6:DB:8B:32:4A:D5:14:E7:B1:20 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0b:70:0c:ad:17:0d:7d:1c:31:3e:1c:1f:1f:e9:b1:40:19: 17:4e:8c:e1:1b:13:c5:53:fc:2b:04:76:80:24:4f:95:6b:fc: 22:04:de:bc:b6:14:04:6d:8b:2e:ab:aa:17:43:ea:b7:b5:69: cb:2c:31:2d:53:5f:58:84:7c:c1:fd:a0:b4:70:29:cb:e5:8a: b2:29:33:ed:83:9c:f3:d5:2a:00:42:0f:c6:27:fb:8a:f0:a6: 20:de:36:bc:49:ad:8b:f8:ee:c6:4c:05:12:13:f3:44:2f:0c: dc:40:49:3e:ce:a6:b2:c9:12:4a:97:15:ea:64:d5:5b:5f:c0: 62:05:1f:a7:91:3f:bf:b4:d5:d3:e2:fe:9b:3c:c4:7e:83:5c: 01:94:70:d7:82:58:03:05:87:1a:0f:b1:25:7c:7a:6a:69:53: 50:67:ea:a4:b7:32:59:96:15:89:5f:31:5f:48:95:e4:5d:8e: b2:c9:67:f4:84:6a:15:7e:93:1e:62:d6:c5:5b:eb:21:73:90: b3:56:db:71:d9:d7:7a:ac:95:da:24:80:6d:03:61:d2:98:28: 83:d5:2b:09:64:87:77:c2:b5:03:df:3f:eb:42:e6:b8:c3:e0: 95:c8:6d:cd:53:97:7b:55:ee:8c:bd:e8:9f:7a:d8:d2:8a:af: d7:a2:93:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwODA5MDQ1MDA5WhcNMjUwODE2MDQ1MDA5WjAYMRYwFAYD VQQDEw02ODk2ZDM4MS0xYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL0ykLMuQwxm4Kx28hgobodVTFxfRnlIUKknZ6e9O+jzbbXLNsx/t60Tyt1c Djo8nXc7AG3V2qbRQ2iafYVQN/riB6kI9YtggHa/tHr+3ULkhqP6J/WyRJXMIooB hQz4FKNEwJwczqlQ5PTjQKR4uBixOUT7RRIQVB3knyNzHBuI8JcUUkVUZzoVRqRR dmqRpvYXecrAHzmhj6Uy0Nb95VHhvBxsg5sNknyb9WxgGp5zkF3h471q/rnbawt7 fI+4LrA/jZQwzWgvtqaglvVhWIXCWOHQfj6r0Vht00gRHijaD/yRr28XR0arAQ2F 572H+RUZ1YReHAvm/bt6xpJFMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAO52lO nl0zQ3TG24syStUU57EgMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMC3AMrRcNfRwxPhwfH+mxQBkXTozhGxPFU/wrBHaAJE+Va/wiBN68 thQEbYsuq6oXQ+q3tWnLLDEtU19YhHzB/aC0cCnL5YqyKTPtg5zz1SoAQg/GJ/uK 8KYg3ja8Sa2L+O7GTAUSE/NELwzcQEk+zqayyRJKlxXqZNVbX8BiBR+nkT+/tNXT 4v6bPMR+g1wBlHDXglgDBYcaD7ElfHpqaVNQZ+qktzJZlhWJXzFfSJXkXY6yyWf0 hGoVfpMeYtbFW+shc5CzVttx2dd6rJXaJIBtA2HSmCiD1SsJZId3wrUD3z/rQua4 w+CVyG3NU5d7Ve6MveifetjSiq/XopNF -----END CERTIFICATE-----Generated at Sun Aug 10 18:58:51 2025 by rpki-client