$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: GlSHW2FBz8XTEDa5TdiQyadkjeATcXa9N082veCZKTQ= Subject key identifier: EC:B1:B5:5A:99:F5:AF:D1:97:47:7F:97:42:27:BB:D8:D7:80:1E:06 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0C53 Signing time: Thu 12 Jun 2025 18:13:26 +0000 Manifest this update: Thu 12 Jun 2025 18:13:26 +0000 Manifest next update: Thu 19 Jun 2025 18:13:26 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: bM0JlG3EOvgmhUdK7HgGoqMsg7Il2tQU9uAap+A9FRI=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: xaKObum3EFlGZQF/g5wk0khI8wDbWZb2Cu/3w9bjJUY=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: +PNWRMsQpZdZrhBnxEHUPHxE2UGarRHAqMGQOz8wwvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Jun 12 18:13:26 2025 GMT Not After : Jun 19 18:13:26 2025 GMT Subject: CN=684b18c6-4946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:e1:bf:9d:6e:8f:9c:6a:f4:35:f8:8d:cb: 64:b1:27:10:32:d2:37:c1:a6:e2:47:e5:25:4f:44: dd:f3:95:23:c0:5e:63:80:80:db:79:b0:b8:8d:c0: 6b:c2:f4:fd:1e:21:48:f4:7b:b9:a3:76:a2:4f:18: 23:86:39:5c:3c:7b:f4:cf:28:47:d7:a2:7a:69:59: 7f:29:6b:1d:31:61:91:8c:7e:49:5e:34:4c:67:18: 73:a1:38:41:94:c7:36:cb:7c:b4:32:cf:fd:7c:e9: 33:b3:27:44:5a:39:c7:13:94:0a:2f:4e:54:a7:e6: 1b:9c:55:70:1d:3f:97:b8:b3:62:92:1c:32:73:37: c8:cc:ee:dd:26:65:38:89:86:c5:aa:de:ef:44:c1: 49:3d:99:c3:d1:d0:06:cc:6a:71:81:b7:a6:ed:eb: 1e:05:df:af:b9:c7:1e:f9:84:6c:94:34:4c:56:45: 63:70:ed:76:ed:d0:d4:c2:62:5a:3e:60:3f:a5:b1: 58:57:a8:cb:f8:19:64:a6:c0:5f:e2:31:3f:2f:e8: 3b:99:53:2f:e4:10:43:ea:bc:22:eb:15:bb:5a:a7: b1:f8:2c:94:9d:0b:27:85:49:e8:a2:bc:7e:a6:74: 7d:71:29:3e:ac:e9:44:24:27:5c:b0:7a:0b:0e:27: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:B5:5A:99:F5:AF:D1:97:47:7F:97:42:27:BB:D8:D7:80:1E:06 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:75:67:96:6e:c4:de:b1:a9:98:c3:23:03:ab:a2:04:e0:55: 07:3f:7b:2d:9c:c7:83:73:c1:5c:b5:40:63:b6:2b:1c:f1:6e: e9:80:61:7e:89:7a:2a:ba:33:d5:a1:9b:e9:7e:c1:f6:af:ff: d7:0a:a1:47:21:1d:9f:c1:0a:d7:17:62:f4:f1:12:fe:c3:93: 7a:9b:0c:63:e4:6b:29:4f:f4:68:2b:a7:a9:ce:87:88:95:7e: 16:48:79:6c:78:f7:b8:19:3f:cf:66:df:0c:01:5e:81:40:54: ef:eb:54:71:22:73:f9:6d:44:84:34:b1:19:6c:01:4e:7c:f6: 12:15:98:d2:5c:df:5f:b2:f4:6b:f7:fa:cd:3c:39:35:e8:66: c0:5a:54:12:be:a4:43:a6:5c:6f:b5:22:35:f2:cb:a1:3d:8a: e5:e6:0f:dc:ce:41:38:b4:df:00:ea:1f:ed:28:34:41:dc:b0: 85:b7:53:d2:cf:0e:86:2d:f8:56:d9:a4:6c:60:30:36:ce:e1: 41:40:47:cd:c6:36:e0:20:a9:aa:9e:d8:44:39:15:40:0d:b3: e2:31:6d:93:8d:33:50:48:51:49:8b:55:4b:2a:11:94:82:35: 49:60:d5:62:e9:1e:4d:19:87:f1:ca:6d:10:7c:3c:8d:cf:f7: 4e:8c:3e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjUwNjEyMTgxMzI2WhcNMjUwNjE5MTgxMzI2WjAYMRYwFAYD VQQDEw02ODRiMThjNi00OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbvhv51uj5xq9DX4jctksScQMtI3wabiR+UlT0Td85UjwF5jgIDbebC4jcBr wvT9HiFI9Hu5o3aiTxgjhjlcPHv0zyhH16J6aVl/KWsdMWGRjH5JXjRMZxhzoThB lMc2y3y0Ms/9fOkzsydEWjnHE5QKL05Up+YbnFVwHT+XuLNikhwyczfIzO7dJmU4 iYbFqt7vRMFJPZnD0dAGzGpxgbem7eseBd+vucce+YRslDRMVkVjcO127dDUwmJa PmA/pbFYV6jL+BlkpsBf4jE/L+g7mVMv5BBD6rwi6xW7Wqex+CyUnQsnhUnoorx+ pnR9cSk+rOlEJCdcsHoLDicvVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyxtVqZ 9a/Rl0d/l0Inu9jXgB4GMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtdWeWbsTesamYwyMDq6IE4FUHP3stnMeDc8FctUBjtisc8W7pgGF+ iXoqujPVoZvpfsH2r//XCqFHIR2fwQrXF2L08RL+w5N6mwxj5GspT/RoK6epzoeI lX4WSHlsePe4GT/PZt8MAV6BQFTv61RxInP5bUSENLEZbAFOfPYSFZjSXN9fsvRr 9/rNPDk16GbAWlQSvqRDplxvtSI18suhPYrl5g/czkE4tN8A6h/tKDRB3LCFt1PS zw6GLfhW2aRsYDA2zuFBQEfNxjbgIKmqnthEORVADbPiMW2TjTNQSFFJi1VLKhGU gjVJYNVi6R5NGYfxym0QfDyNz/dOjD7+ -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:18 2025 by rpki-client