$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: 1iPsHpvrktNlr5zdFuXx60QuT7zSCw9ZPNq651f+cjw= Subject key identifier: D6:65:25:95:FE:7E:0E:B4:EF:71:C9:49:2F:69:1D:83:8E:E6:74:2A Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 0143 Signing time: Sat 09 Aug 2025 04:45:14 +0000 Manifest this update: Sat 09 Aug 2025 04:45:14 +0000 Manifest next update: Sat 16 Aug 2025 04:45:14 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: x5LC1KCjBWmNNfccKei6Gu1rhoGbista78oFIW+feXw=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Aug 9 04:45:14 2025 GMT Not After : Aug 16 04:45:14 2025 GMT Subject: CN=6896d25a-5c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:46:62:71:3c:75:73:03:25:31:83:da:28: ae:64:90:27:2d:07:4c:8b:9b:a6:51:df:b1:e5:29: 0a:92:39:0b:96:57:3c:98:2f:63:02:6d:ff:73:11: 58:15:9a:51:e1:33:5d:80:10:57:66:09:90:91:b1: bc:65:58:40:db:ae:b1:d9:61:e0:68:c4:f1:2e:dd: d3:ba:13:50:0e:a0:e7:38:e7:99:07:97:67:92:e0: 95:9f:18:6e:18:2c:42:e2:e1:54:07:8c:28:57:4e: be:ed:df:83:12:9b:c6:ff:99:06:e5:95:c4:b2:38: 45:2d:bb:f5:63:12:e3:c9:57:47:9c:b2:69:40:70: f7:20:10:19:c0:34:df:14:0c:cd:58:df:ff:5e:7c: 50:52:4a:63:27:83:e4:09:56:b7:93:81:86:78:c4: 80:23:e2:eb:8d:bc:fa:aa:82:e3:e8:1a:39:4d:bc: 20:17:f3:99:f0:2c:9a:47:f7:14:f6:63:d3:77:2f: 95:41:24:6f:34:3b:1b:19:f9:6e:4e:0f:b0:42:ba: 67:24:0e:09:b7:52:7e:3c:fc:f3:57:78:a3:28:09: 99:e5:97:25:75:f5:2b:9c:ea:76:31:a1:5f:77:00: 88:f8:b9:c3:e3:de:6a:f8:3f:37:6b:b1:0d:22:35: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:25:95:FE:7E:0E:B4:EF:71:C9:49:2F:69:1D:83:8E:E6:74:2A X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:55:6b:e1:84:21:ac:fe:e1:95:e8:76:e2:3c:3b:bc:86:55: ce:21:42:75:61:e4:77:8e:06:2f:fc:5b:8f:0b:60:73:ad:c4: d3:6c:ce:c5:fe:f1:c5:50:db:ce:b0:89:79:e6:8f:87:c7:f4: b9:e6:95:ba:9b:63:a3:0b:9b:0c:31:69:29:95:d0:50:33:8e: f3:17:e4:1c:3c:82:5f:82:fc:1b:1d:11:95:a4:fe:84:5d:1a: 0e:20:3b:54:f1:5c:b5:0b:02:70:87:ab:ff:c8:1e:27:69:fa: 54:20:aa:49:92:e5:c3:27:09:81:72:10:a2:1c:8a:cb:6d:e4: 95:e2:3d:fb:32:39:87:12:e4:e1:ab:97:e6:1e:99:72:af:d3: 40:0d:93:5e:da:5f:bf:03:bb:1a:5d:39:09:d2:9a:d0:8f:20: e0:3c:ff:00:77:e6:36:12:d4:ba:f3:4d:1b:c3:c6:a4:3d:e0: 29:67:59:d9:16:e6:23:9a:a0:d4:ca:dc:9b:5a:a1:3c:af:c5: c9:7d:04:82:88:dc:1f:99:ec:ae:28:0c:b2:68:3a:b4:2a:cf: b1:f4:13:c1:29:f3:09:3a:2e:7a:ac:fd:e2:58:3d:43:c3:63: ab:e3:d2:c6:81:50:52:e1:55:d3:11:93:2a:21:b7:c6:cd:67: e3:71:0d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjUwODA5MDQ0NTE0WhcNMjUwODE2MDQ0NTE0WjAYMRYwFAYD VQQDEw02ODk2ZDI1YS01YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7JGYnE8dXMDJTGD2iiuZJAnLQdMi5umUd+x5SkKkjkLllc8mC9jAm3/cxFY FZpR4TNdgBBXZgmQkbG8ZVhA266x2WHgaMTxLt3TuhNQDqDnOOeZB5dnkuCVnxhu GCxC4uFUB4woV06+7d+DEpvG/5kG5ZXEsjhFLbv1YxLjyVdHnLJpQHD3IBAZwDTf FAzNWN//XnxQUkpjJ4PkCVa3k4GGeMSAI+Lrjbz6qoLj6Bo5TbwgF/OZ8CyaR/cU 9mPTdy+VQSRvNDsbGfluTg+wQrpnJA4Jt1J+PPzzV3ijKAmZ5ZcldfUrnOp2MaFf dwCI+LnD495q+D83a7ENIjVsvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZlJZX+ fg6073HJSS9pHYOO5nQqMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9VWvhhCGs/uGV6HbiPDu8hlXOIUJ1YeR3jgYv/FuPC2BzrcTTbM7F /vHFUNvOsIl55o+Hx/S55pW6m2OjC5sMMWkpldBQM47zF+QcPIJfgvwbHRGVpP6E XRoOIDtU8Vy1CwJwh6v/yB4nafpUIKpJkuXDJwmBchCiHIrLbeSV4j37MjmHEuTh q5fmHplyr9NADZNe2l+/A7saXTkJ0prQjyDgPP8Ad+Y2EtS6800bw8akPeApZ1nZ FuYjmqDUytybWqE8r8XJfQSCiNwfmeyuKAyyaDq0Ks+x9BPBKfMJOi56rP3iWD1D w2Or49LGgVBS4VXTEZMqIbfGzWfjcQ1D -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:23 2025 by rpki-client