$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft File: luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json) Hash identifier: 5Z/2sg6s+hIVKcUKl2Ub9RH+9Ne8SIdHXuCI9aLoqbk= Subject key identifier: 2F:47:FB:EE:D5:DD:48:48:CB:9E:79:9C:D8:19:E3:F8:2B:1B:27:35 Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1 Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft Manifest number: 068B Signing time: Fri 08 Aug 2025 22:44:29 +0000 Manifest this update: Fri 08 Aug 2025 22:44:29 +0000 Manifest next update: Fri 15 Aug 2025 22:44:29 +0000 Files and hashes: 1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: yEM2vmNFJ/BE/+MVQtdfSiqwLuge3PVz1E9s4k5Or1E=) 2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=) 3: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1 Validity Not Before: Aug 8 22:44:29 2025 GMT Not After : Aug 15 22:44:29 2025 GMT Subject: CN=68967dcd-361e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:ac:fc:da:f1:8f:af:d9:d4:14:94:30:4b: 8f:7c:54:07:8b:87:7f:7f:2c:11:e0:2e:ec:f2:d1: 8e:89:7e:26:d4:45:da:d2:15:13:13:10:20:28:6c: 62:42:eb:67:a8:7d:ee:8f:5a:77:21:0d:05:ff:ec: 44:42:14:25:50:ea:44:d1:24:dc:c0:0a:9e:f8:e3: 3b:c7:6c:e1:a1:d1:2a:53:b9:a2:fb:88:72:07:65: 5e:26:79:85:cb:d0:d0:68:69:54:d1:91:2a:da:f8: 13:02:38:1b:2a:89:66:a7:38:db:70:61:fa:91:e3: c2:d5:be:8d:70:5f:dc:00:57:7d:8e:f7:19:48:15: 5d:1c:2c:c8:1d:4b:14:78:a0:a3:56:d9:4f:50:c6: 50:d7:cd:b7:6a:15:3a:36:0f:57:92:e1:ea:5a:97: a6:40:ed:85:71:48:46:83:e5:f5:af:0a:70:74:ab: 8f:c9:10:0f:5f:95:87:38:86:68:83:b5:01:0e:c0: e7:f2:62:13:7b:ef:a0:cd:ba:e5:df:78:63:08:d4: 80:54:ef:72:6a:b0:62:34:0b:90:81:0d:5a:fb:a5: 03:e9:6b:57:cf:43:c7:93:3f:71:ae:9f:83:32:0e: 08:e7:37:c7:d4:70:99:72:8b:39:64:90:26:3e:b0: ef:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:47:FB:EE:D5:DD:48:48:CB:9E:79:9C:D8:19:E3:F8:2B:1B:27:35 X509v3 Authority Key Identifier: keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:40:82:c8:f3:4f:88:f4:91:2f:3b:0e:16:fa:54:d1:d3:60: bc:d1:41:d1:30:62:b1:22:f1:91:d2:16:73:57:0d:1e:23:eb: 6f:b3:36:c3:f9:a1:76:03:43:36:19:ef:88:42:64:9f:53:35: 35:cf:2b:51:2d:24:19:35:0e:7c:5c:27:49:cd:49:cd:4d:8b: 23:95:ee:5a:f2:f2:db:77:4d:31:e9:ee:89:1a:2e:66:df:09: 8f:be:e0:1b:f4:d1:34:56:7e:43:e6:04:10:0b:32:82:ad:bf: 77:d8:ca:ea:4d:31:a4:74:55:5a:da:50:b6:c6:41:14:7a:49: f9:67:23:43:8d:42:0e:f4:fd:02:89:01:f1:ee:f1:8d:58:fd: b7:10:65:32:13:81:db:39:bb:3e:4a:68:d6:02:f8:38:eb:1e: fe:99:bb:6c:c0:a2:17:40:47:26:20:86:96:80:e7:56:af:ca: e4:84:03:a7:51:f5:f0:c5:17:fa:d5:cb:07:5c:14:5c:aa:e3: d6:4a:1a:34:49:af:a5:e0:e2:a0:9c:21:20:42:27:2d:6c:c4: 71:04:97:65:d7:67:ed:15:ea:e9:23:c4:c8:4a:d9:e7:8a:19: 62:b4:14:68:1b:53:59:1a:65:32:a7:35:16:59:58:83:61:25: bc:18:ab:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2ODgxMTAvBgNVBAUTKDk2RTVBQTcwODI0QjhEMTNERENGRTYxRkNDOUEyMENB RDY1RTYwQzEwHhcNMjUwODA4MjI0NDI5WhcNMjUwODE1MjI0NDI5WjAYMRYwFAYD VQQDEw02ODk2N2RjZC0zNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAis/Nrxj6/Z1BSUMEuPfFQHi4d/fywR4C7s8tGOiX4m1EXa0hUTExAgKGxi QutnqH3uj1p3IQ0F/+xEQhQlUOpE0STcwAqe+OM7x2zhodEqU7mi+4hyB2VeJnmF y9DQaGlU0ZEq2vgTAjgbKolmpzjbcGH6kePC1b6NcF/cAFd9jvcZSBVdHCzIHUsU eKCjVtlPUMZQ1823ahU6Ng9XkuHqWpemQO2FcUhGg+X1rwpwdKuPyRAPX5WHOIZo g7UBDsDn8mITe++gzbrl33hjCNSAVO9yarBiNAuQgQ1a+6UD6WtXz0PHkz9xrp+D Mg4I5zfH1HCZcos5ZJAmPrDvJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9H++7V 3UhIy555nNgZ4/grGyc1MB8GA1UdIwQYMBaAFJblqnCCS40T3c/mH8yaIMrWXmDB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4OC85RDU2MjlBMDgx NDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpSUGR6LVlmekpvZ3l0WmVZ TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1V3FjSUpMalJQZHotWWZ6Sm9neXRaZVlNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4OC85RDU2MjlBMDgxNDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpS UGR6LVlmekpvZ3l0WmVZTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQILI80+I9JEvOw4W+lTR02C80UHRMGKxIvGR0hZzVw0eI+tvszbD +aF2A0M2Ge+IQmSfUzU1zytRLSQZNQ58XCdJzUnNTYsjle5a8vLbd00x6e6JGi5m 3wmPvuAb9NE0Vn5D5gQQCzKCrb932MrqTTGkdFVa2lC2xkEUekn5ZyNDjUIO9P0C iQHx7vGNWP23EGUyE4HbObs+SmjWAvg46x7+mbtswKIXQEcmIIaWgOdWr8rkhAOn UfXwxRf61csHXBRcquPWSho0Sa+l4OKgnCEgQictbMRxBJdl12ftFerpI8TIStnn ihlitBRoG1NZGmUypzUWWViDYSW8GKvB -----END CERTIFICATE-----Generated at Sun Aug 10 18:51:58 2025 by rpki-client