$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: uyZ4b7qZybxW+0zhYgiLZyXDcqXa9LwHwPtFOUHMVzs= Subject key identifier: 59:DC:EC:11:0D:F9:AF:63:60:65:2C:7A:22:5F:2F:29:70:D9:54:2F Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 0164 Signing time: Thu 07 Aug 2025 04:28:31 +0000 Manifest this update: Thu 07 Aug 2025 04:28:30 +0000 Manifest next update: Thu 14 Aug 2025 04:28:30 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: Pp6H2w1nSFZ5VOUVS3yKnTbzCwb0kX0OffJSXKHOkZk=) 2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: 7mVuQ3E5O7SHzP2lHVSGMO1XS8RjhP+KUyO8u78EdqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: Aug 7 04:28:30 2025 GMT Not After : Aug 14 04:28:30 2025 GMT Subject: CN=68942b6f-7267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:dd:38:3e:d1:c8:1d:74:0f:c4:4a:62:c7:b6: e5:2f:1d:3b:f9:9d:20:e5:50:4c:3e:0a:09:d3:bb: 9a:05:e0:89:4b:0f:ff:c3:68:49:5d:64:a3:3c:2a: 30:06:65:33:47:b2:63:7d:46:51:c1:ec:94:ea:f5: b4:65:6e:94:f6:a6:17:17:99:5e:9b:4e:cc:dd:fd: 57:18:28:be:79:ca:1a:d5:8d:5c:6f:09:6b:bd:d8: a2:13:a8:65:c3:f9:5f:0c:c9:1c:21:86:db:29:5a: 8c:fb:d1:26:ae:b9:99:1c:3f:f7:6e:18:60:6f:16: f7:4a:4e:56:05:29:52:13:cc:99:02:cf:b1:d2:d7: 0c:92:49:7b:f8:a7:b7:0b:4f:17:01:b9:a6:20:1a: de:a5:f8:96:1c:eb:71:13:9a:b6:1e:c2:d1:4c:b8: b2:e9:05:70:b8:2f:c1:dd:82:bd:57:70:43:e8:32: 35:42:a3:e3:d6:30:ed:20:fe:2e:42:0e:1f:7d:61: 8b:78:51:2c:d1:be:ef:e8:ef:f0:69:4d:b4:d7:36: 16:06:55:b7:72:da:4d:5e:95:c4:f2:e4:60:53:20: 3e:fb:52:d2:14:6e:20:62:bd:94:fa:f9:a9:91:fa: fc:c1:91:49:ef:00:f7:b4:10:64:0e:fc:67:c1:df: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DC:EC:11:0D:F9:AF:63:60:65:2C:7A:22:5F:2F:29:70:D9:54:2F X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d2:be:6f:7c:f5:d7:eb:5c:65:3b:d1:9f:c3:d6:8a:a2:d4: e4:c7:41:27:fb:8f:4b:77:1e:e1:8f:1d:4e:ce:84:bf:18:cf: 57:a9:9c:6d:c1:8d:1c:78:39:f0:47:3c:d5:f1:09:33:ab:dd: 7f:6f:89:a7:87:d7:23:00:e1:6c:89:e4:af:6c:03:85:15:d9: e8:4f:27:24:fb:c1:f8:8d:f5:e0:5f:21:d2:8e:a1:82:87:2d: ca:6c:96:08:53:d3:18:dc:76:4d:bd:42:28:f2:42:dd:b5:e1: 30:76:03:df:07:7f:1d:01:e1:cd:27:49:68:83:dc:10:1a:3e: bc:69:83:99:cc:a7:7f:5a:04:4c:24:97:24:c3:e8:c0:3c:3d: ff:50:59:8d:36:cb:76:74:6c:45:40:b5:31:b5:84:1c:f6:65: cf:62:fe:9f:65:d3:fd:6b:99:d4:4f:c3:4a:9c:29:52:e9:17: 87:2c:40:16:d1:89:aa:92:14:72:0a:0a:e6:ca:56:2c:39:76: 96:42:13:d9:33:60:0f:69:e7:93:ea:0f:58:c0:a9:d2:7b:46: 8b:22:6b:96:db:f8:58:e7:00:1f:42:e7:55:04:14:03:8b:c7: 2d:3c:b1:ca:f3:0a:db:6c:2c:49:49:d1:3e:81:f8:55:b0:e4: be:40:1b:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjUwODA3MDQyODMwWhcNMjUwODE0MDQyODMwWjAYMRYwFAYD VQQDEw02ODk0MmI2Zi03MjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9t04PtHIHXQPxEpix7blLx07+Z0g5VBMPgoJ07uaBeCJSw//w2hJXWSjPCow BmUzR7JjfUZRweyU6vW0ZW6U9qYXF5lem07M3f1XGCi+ecoa1Y1cbwlrvdiiE6hl w/lfDMkcIYbbKVqM+9EmrrmZHD/3bhhgbxb3Sk5WBSlSE8yZAs+x0tcMkkl7+Ke3 C08XAbmmIBrepfiWHOtxE5q2HsLRTLiy6QVwuC/B3YK9V3BD6DI1QqPj1jDtIP4u Qg4ffWGLeFEs0b7v6O/waU201zYWBlW3ctpNXpXE8uRgUyA++1LSFG4gYr2U+vmp kfr8wZFJ7wD3tBBkDvxnwd8RmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnc7BEN +a9jYGUseiJfLylw2VQvMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB40r5vfPXX61xlO9Gfw9aKotTkx0En+49Ldx7hjx1OzoS/GM9XqZxt wY0ceDnwRzzV8Qkzq91/b4mnh9cjAOFsieSvbAOFFdnoTyck+8H4jfXgXyHSjqGC hy3KbJYIU9MY3HZNvUIo8kLdteEwdgPfB38dAeHNJ0log9wQGj68aYOZzKd/WgRM JJckw+jAPD3/UFmNNst2dGxFQLUxtYQc9mXPYv6fZdP9a5nUT8NKnClS6ReHLEAW 0YmqkhRyCgrmylYsOXaWQhPZM2APaeeT6g9YwKnSe0aLImuW2/hY5wAfQudVBBQD i8ctPLHK8wrbbCxJSdE+gfhVsOS+QBvD -----END CERTIFICATE-----Generated at Fri Aug 8 20:56:39 2025 by rpki-client