$ rpki-client -vvf rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft File: LYDKYjgbJHmcBConufMnPeEiLO4.mft (raw, json) Hash identifier: eDTg7wPawbHORsB27eMp/PjNktP+U3apPRB8jvJnEpA= Subject key identifier: 08:99:F5:AE:C7:2F:72:C2:CB:8F:FB:30:A1:E1:F3:6A:7F:4B:1D:3C Authority key identifier: 2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE Certificate issuer: /CN=A9163272/serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft Manifest number: 01C9 Signing time: Mon 11 Aug 2025 02:58:02 +0000 Manifest this update: Mon 11 Aug 2025 02:58:01 +0000 Manifest next update: Mon 18 Aug 2025 02:58:01 +0000 Files and hashes: 1: LYDKYjgbJHmcBConufMnPeEiLO4.crl (hash: 4O4AqiX9d4FEJvL6Ygt3TuwG/1w4JOb4WIvrCQ0iD7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163272, serialNumber=2D80CA62381B24799C042A27B9F3273DE1222CEE Validity Not Before: Aug 11 02:58:01 2025 GMT Not After : Aug 18 02:58:01 2025 GMT Subject: CN=68995c39-e649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:19:03:39:b5:4c:43:ef:44:bf:86:fe:9d: b8:b7:c6:35:2e:5e:b1:17:64:a3:bd:5a:f9:e9:f8: cb:85:af:8e:40:d9:9d:b0:d1:34:5b:fb:b4:a7:d9: 56:41:87:cb:a1:83:b1:04:12:c5:ef:83:ea:6b:58: 33:ba:38:28:58:f1:f7:3e:aa:35:aa:44:0f:57:0d: e1:d4:7e:d5:8e:a8:e7:f0:d5:5d:fe:7e:e7:56:2d: 1a:8f:b4:2a:ec:5d:5f:a3:51:eb:46:ee:fd:f3:b4: 96:38:71:52:48:b5:55:f9:ca:99:4e:a4:11:6c:93: 0b:74:24:89:9e:29:5e:fd:a3:5f:4a:38:ac:d2:5a: 4a:06:22:28:3f:d3:9c:90:25:ae:10:f7:6f:43:73: 21:2f:8c:a0:24:a1:b2:dd:62:e5:e7:62:96:74:68: ed:fa:16:65:c1:51:88:21:36:74:89:1c:5e:ff:92: 7c:55:bf:f7:1d:37:a4:dc:4b:8f:0c:ba:39:5d:83: ce:9b:21:67:46:54:36:c6:cc:81:b2:65:09:6b:d0: 66:64:4e:69:97:42:de:6f:52:0a:da:26:92:49:b6: 30:6e:30:e9:e6:66:2d:4a:9c:63:b0:92:db:c8:52: 26:05:56:45:1a:ff:35:5f:f0:e0:f0:3a:ba:37:7e: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:99:F5:AE:C7:2F:72:C2:CB:8F:FB:30:A1:E1:F3:6A:7F:4B:1D:3C X509v3 Authority Key Identifier: keyid:2D:80:CA:62:38:1B:24:79:9C:04:2A:27:B9:F3:27:3D:E1:22:2C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LYDKYjgbJHmcBConufMnPeEiLO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163272/DF2669D6B68211EDA0AB991BC4F9AE02/LYDKYjgbJHmcBConufMnPeEiLO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4a:1e:f9:fa:d8:6b:fb:21:f3:4d:d3:a4:34:79:a2:06:c4: dd:bf:8e:bf:59:89:32:5f:f5:ce:68:d7:d1:e8:7f:3e:3f:c1: 37:31:c0:b4:78:47:c5:c7:33:16:0a:fa:03:d6:aa:02:be:21: f3:2f:31:61:2c:f6:17:5a:33:85:45:a0:81:98:e6:6f:80:0e: 19:1a:03:15:eb:d2:fb:06:0f:ef:dc:20:0e:6d:25:19:68:ff: cf:52:3e:7a:9a:89:93:a4:3e:ca:8d:de:a9:7c:a0:94:09:e6: 04:a8:e3:55:4a:18:b1:24:94:fc:67:70:b9:0b:05:50:4a:e1: e7:96:39:d0:36:8c:df:f2:02:c4:e8:2a:66:b9:d7:37:b8:47: 8a:ba:69:86:36:30:95:53:59:e0:7b:4b:2a:63:11:70:c0:fa: 98:52:32:41:74:93:17:00:48:89:18:f0:e4:1e:c4:70:6a:ee: 11:97:6a:99:bb:cd:40:64:89:fa:97:62:c9:33:71:06:11:c2: 09:94:e3:1f:2c:08:75:a9:32:5c:5e:a6:0e:30:65:53:da:c0: 3a:2d:8d:eb:d1:ee:c8:fe:f2:bf:78:16:68:35:88:a5:8b:a9: 59:71:43:fa:05:8d:32:58:c7:52:df:41:07:e6:7f:f7:f1:39: e4:a4:b2:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyNzIxMTAvBgNVBAUTKDJEODBDQTYyMzgxQjI0Nzk5QzA0MkEyN0I5RjMyNzNE RTEyMjJDRUUwHhcNMjUwODExMDI1ODAxWhcNMjUwODE4MDI1ODAxWjAYMRYwFAYD VQQDEw02ODk5NWMzOS1lNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8EZAzm1TEPvRL+G/p24t8Y1Ll6xF2SjvVr56fjLha+OQNmdsNE0W/u0p9lW QYfLoYOxBBLF74Pqa1gzujgoWPH3Pqo1qkQPVw3h1H7Vjqjn8NVd/n7nVi0aj7Qq 7F1fo1HrRu7987SWOHFSSLVV+cqZTqQRbJMLdCSJnile/aNfSjis0lpKBiIoP9Oc kCWuEPdvQ3MhL4ygJKGy3WLl52KWdGjt+hZlwVGIITZ0iRxe/5J8Vb/3HTek3EuP DLo5XYPOmyFnRlQ2xsyBsmUJa9BmZE5pl0Leb1IK2iaSSbYwbjDp5mYtSpxjsJLb yFImBVZFGv81X/Dg8Dq6N35UuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiZ9a7H L3LCy4/7MKHh82p/Sx08MB8GA1UdIwQYMBaAFC2AymI4GyR5nAQqJ7nzJz3hIizu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzI3Mi9ERjI2NjlENkI2 ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpIbWNCQ29udWZNblBlRWlM TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xZREtZamdiSkhtY0JDb251Zk1uUGVFaUxPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzI3Mi9ERjI2NjlENkI2ODIxMUVEQTBBQjk5MUJDNEY5QUUwMi9MWURLWWpnYkpI bWNCQ29udWZNblBlRWlMTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSSh75+thr+yHzTdOkNHmiBsTdv46/WYkyX/XOaNfR6H8+P8E3McC0 eEfFxzMWCvoD1qoCviHzLzFhLPYXWjOFRaCBmOZvgA4ZGgMV69L7Bg/v3CAObSUZ aP/PUj56momTpD7Kjd6pfKCUCeYEqONVShixJJT8Z3C5CwVQSuHnljnQNozf8gLE 6Cpmudc3uEeKummGNjCVU1nge0sqYxFwwPqYUjJBdJMXAEiJGPDkHsRwau4Rl2qZ u81AZIn6l2LJM3EGEcIJlOMfLAh1qTJcXqYOMGVT2sA6LY3r0e7I/vK/eBZoNYil i6lZcUP6BY0yWMdS30EH5n/38TnkpLLw -----END CERTIFICATE-----Generated at Tue Aug 12 22:48:25 2025 by rpki-client