$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: /Dti1FJQaDIrSRMN7xZ2un/b6QgJwI0Ks1HhKazbbOI= Subject key identifier: 45:4F:A6:6A:77:67:D8:35:04:6D:F9:6A:4D:6A:69:14:E0:B8:90:DD Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 0261 Signing time: Thu 07 Aug 2025 02:22:55 +0000 Manifest this update: Thu 07 Aug 2025 02:22:54 +0000 Manifest next update: Thu 14 Aug 2025 02:22:54 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: bPiG72Zu1SGKug4nGunR4pXUo9WmpLtLMd6FYbb1M/s=) 2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: dsbPmjXp/oYWvfHXOZsMcI3WqL8KWucAeTqSoUbpKas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Aug 7 02:22:54 2025 GMT Not After : Aug 14 02:22:54 2025 GMT Subject: CN=68940dfe-5b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:fb:97:13:15:a6:37:4c:fd:55:12:ee:00: 77:c1:83:d3:b7:4f:ea:f7:ac:94:12:df:06:40:be: ef:41:be:f0:04:7f:33:78:1f:2d:64:4c:35:a9:10: 7a:6c:bd:30:f5:21:46:5f:1d:e4:14:a2:e5:a3:fd: 72:07:4e:de:de:96:08:75:64:c7:98:55:c0:54:75: f8:a8:cf:fe:8e:11:8b:33:aa:a7:c1:2d:f3:2d:24: e8:ac:40:3d:be:e5:9b:cf:6d:75:af:58:05:e4:52: e6:46:d1:52:7c:d9:b7:52:b7:82:e5:d7:c2:11:35: ff:0e:b7:dd:30:ad:b6:fc:e0:28:e3:d9:16:0e:62: db:c1:27:54:96:57:97:b1:6d:74:fe:42:58:66:f2: bd:2c:df:ba:63:75:42:d9:fd:47:8c:06:33:22:07: 09:50:d3:7f:c7:50:4b:c0:e2:b6:9c:13:52:51:70: b7:79:d7:99:ac:1d:58:a1:18:1e:d9:7c:3c:0b:28: 4b:a5:2d:bc:9a:f3:22:de:a8:19:a5:05:ae:47:89: 29:2d:e2:80:eb:43:73:5f:95:79:9b:47:59:27:c5: b7:64:c9:5d:e7:47:81:38:60:af:01:eb:e8:c8:03: 8d:f8:ae:63:d2:0f:d7:29:20:4c:bb:95:e5:ac:b0: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4F:A6:6A:77:67:D8:35:04:6D:F9:6A:4D:6A:69:14:E0:B8:90:DD X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f6:73:10:03:6f:53:7d:aa:9c:27:d2:ae:c5:3c:44:b0:42: 09:8c:80:bc:55:81:cb:b4:c2:3f:30:6a:f1:19:be:fd:f8:9a: 3c:b7:3c:b8:24:90:52:1e:55:45:17:37:b3:21:14:a3:c4:0e: bd:13:31:fb:f1:b2:7f:1e:4a:5c:a3:e8:dd:5d:3c:87:62:f2: ea:4a:40:46:66:67:af:a9:46:50:97:69:3c:08:a3:ce:9f:15: 22:70:3a:8f:51:4c:ef:80:ec:b5:d3:90:eb:78:23:0a:d9:4e: b3:68:19:8c:35:c1:ac:2a:b5:d8:ea:8f:fb:78:e6:de:30:0c: b0:24:c3:1e:a8:e5:8d:77:3d:49:90:43:e5:55:e9:99:bf:43: 0c:e6:dc:16:7e:49:ec:9c:5a:c8:ec:62:70:6e:2d:fd:2b:d6: c1:8f:6e:23:ba:12:f8:92:e3:27:bf:2a:18:cb:0e:ab:b5:e8: 79:dd:04:c2:7a:df:53:ca:ec:5a:8f:ed:04:a8:3c:98:e8:40: 5e:61:29:f9:2e:05:8e:e9:b2:6b:cc:d6:c8:44:d8:69:88:de: b5:f4:d4:d4:cb:7d:b5:0d:19:8b:24:96:75:36:03:03:4c:34: 8c:12:7e:d3:e2:40:15:16:09:20:28:a1:5b:51:01:ec:a5:1e: 2d:f9:26:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjUwODA3MDIyMjU0WhcNMjUwODE0MDIyMjU0WjAYMRYwFAYD VQQDEw02ODk0MGRmZS01YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bD7lxMVpjdM/VUS7gB3wYPTt0/q96yUEt8GQL7vQb7wBH8zeB8tZEw1qRB6 bL0w9SFGXx3kFKLlo/1yB07e3pYIdWTHmFXAVHX4qM/+jhGLM6qnwS3zLSTorEA9 vuWbz211r1gF5FLmRtFSfNm3UreC5dfCETX/DrfdMK22/OAo49kWDmLbwSdUlleX sW10/kJYZvK9LN+6Y3VC2f1HjAYzIgcJUNN/x1BLwOK2nBNSUXC3edeZrB1YoRge 2Xw8CyhLpS28mvMi3qgZpQWuR4kpLeKA60NzX5V5m0dZJ8W3ZMld50eBOGCvAevo yAON+K5j0g/XKSBMu5XlrLBhcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVPpmp3 Z9g1BG35ak1qaRTguJDdMB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu9nMQA29TfaqcJ9KuxTxEsEIJjIC8VYHLtMI/MGrxGb79+Jo8tzy4 JJBSHlVFFzezIRSjxA69EzH78bJ/Hkpco+jdXTyHYvLqSkBGZmevqUZQl2k8CKPO nxUicDqPUUzvgOy105DreCMK2U6zaBmMNcGsKrXY6o/7eObeMAywJMMeqOWNdz1J kEPlVemZv0MM5twWfknsnFrI7GJwbi39K9bBj24juhL4kuMnvyoYyw6rteh53QTC et9Tyuxaj+0EqDyY6EBeYSn5LgWO6bJrzNbIRNhpiN619NTUy321DRmLJJZ1NgMD TDSMEn7T4kAVFgkgKKFbUQHspR4t+SY2 -----END CERTIFICATE-----Generated at Thu Aug 7 04:26:58 2025 by rpki-client