$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: owp8gUmnV1DjK8gyO0wYG9tDjuAf+T+5FthVHMlR1+Y= Subject key identifier: 4B:4C:2F:8D:31:B8:7A:8F:F0:F0:D2:17:2E:02:77:0B:FE:90:90:43 Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0A9B Signing time: Sun 10 Aug 2025 19:33:55 +0000 Manifest this update: Sun 10 Aug 2025 19:33:55 +0000 Manifest next update: Sun 17 Aug 2025 19:33:55 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: fX4zeD/EEi5uU021M8XR2AydmkHXyd3Tfp565bZxhZ4=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Aug 10 19:33:55 2025 GMT Not After : Aug 17 19:33:55 2025 GMT Subject: CN=6898f423-eb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:3e:9e:80:de:3b:95:0f:7d:f4:61:53:46: 42:11:83:27:9f:d3:5f:75:55:f2:3c:95:f2:30:9c: a7:55:7a:9b:ed:9d:d6:18:c3:ee:68:e5:38:01:7c: a0:f9:dd:d6:9e:b7:81:f5:08:7a:68:4d:a5:d7:d0: 64:73:55:a7:57:96:e4:24:25:86:01:61:70:5b:94: 4c:14:00:84:7c:29:2e:89:0f:a7:3e:b1:2d:ca:d0: ce:15:e2:3c:ac:a4:87:d1:a6:ce:95:ad:3b:98:29: 1d:41:c3:ca:1f:72:9e:2f:9c:87:62:7c:c9:1b:97: eb:c0:93:8f:7a:6e:a1:73:89:da:da:ce:71:00:38: d1:ab:1e:88:4a:8f:d2:99:0b:19:b4:46:50:84:76: 58:7a:54:dd:e4:d6:11:33:c9:04:28:3d:a9:ed:51: 3d:92:fd:f5:52:22:bb:11:2e:e3:6c:1a:a1:98:8c: a7:ef:a1:7a:b6:5b:68:ec:6e:ac:a2:dc:67:f5:d8: 76:a7:38:09:d0:c0:f8:a0:f9:fe:bf:fa:7b:5a:af: d0:fd:2a:de:42:0b:0d:df:3a:6a:4b:dd:d3:2a:01: cc:ba:70:06:d2:2a:08:b9:d6:a2:c0:71:9e:0c:f7: ae:a1:21:47:6c:ca:6c:a4:c1:3e:13:ee:52:99:1a: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:2F:8D:31:B8:7A:8F:F0:F0:D2:17:2E:02:77:0B:FE:90:90:43 X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:66:95:80:5d:bd:5d:9e:4c:88:ad:85:10:e9:d7:7f:67:b3: 79:bf:b2:c1:3e:1f:b2:c6:5a:e6:d5:7e:bd:ee:1f:43:b2:88: 29:a0:a2:82:84:25:2b:8c:b6:1b:8d:a2:99:7a:ca:0e:20:a0: f9:cb:23:52:e9:37:68:8f:06:1a:e5:8b:a9:88:22:ae:30:98: f5:1d:11:b6:7a:b8:e5:cb:78:4e:33:4f:03:a2:bc:dc:3e:d5: e4:d7:ce:37:d7:03:13:2a:93:77:0f:eb:1b:15:f8:27:88:45: d9:ac:f8:26:25:55:e9:11:45:70:d3:4c:5e:31:e9:8c:c9:81: 8a:d0:77:39:2c:a1:9c:e7:24:98:23:8d:d0:c5:b6:c5:9f:03: 6b:3c:7a:c3:8c:77:5b:67:5f:20:51:47:9f:2b:dc:89:a3:e5: 72:99:ff:fb:68:b0:02:60:a1:3f:01:35:eb:66:62:14:74:1c: 5c:36:4e:0a:0d:42:ef:1b:f5:2d:c8:7f:58:91:ad:4d:69:48: ce:98:d5:1c:f6:02:da:49:31:e9:66:20:23:9c:c3:39:cf:4e: 45:a4:37:16:c8:6c:08:07:28:15:d5:e6:44:e9:42:cb:a9:02: b1:d3:46:e6:0b:7d:52:f7:ab:f6:83:7d:b2:5b:2b:38:80:a1: 1c:51:ee:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwODEwMTkzMzU1WhcNMjUwODE3MTkzMzU1WjAYMRYwFAYD VQQDEw02ODk4ZjQyMy1lYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP0+noDeO5UPffRhU0ZCEYMnn9NfdVXyPJXyMJynVXqb7Z3WGMPuaOU4AXyg +d3WnreB9Qh6aE2l19Bkc1WnV5bkJCWGAWFwW5RMFACEfCkuiQ+nPrEtytDOFeI8 rKSH0abOla07mCkdQcPKH3KeL5yHYnzJG5frwJOPem6hc4na2s5xADjRqx6ISo/S mQsZtEZQhHZYelTd5NYRM8kEKD2p7VE9kv31UiK7ES7jbBqhmIyn76F6tlto7G6s otxn9dh2pzgJ0MD4oPn+v/p7Wq/Q/SreQgsN3zpqS93TKgHMunAG0ioIudaiwHGe DPeuoSFHbMpspME+E+5SmRpd0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtML40x uHqP8PDSFy4Cdwv+kJBDMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALZpWAXb1dnkyIrYUQ6dd/Z7N5v7LBPh+yxlrm1X697h9DsogpoKKC hCUrjLYbjaKZesoOIKD5yyNS6TdojwYa5YupiCKuMJj1HRG2erjly3hOM08Dorzc PtXk18431wMTKpN3D+sbFfgniEXZrPgmJVXpEUVw00xeMemMyYGK0Hc5LKGc5ySY I43QxbbFnwNrPHrDjHdbZ18gUUefK9yJo+Vymf/7aLACYKE/ATXrZmIUdBxcNk4K DULvG/UtyH9Yka1NaUjOmNUc9gLaSTHpZiAjnMM5z05FpDcWyGwIBygV1eZE6ULL qQKx00bmC31S96v2g32yWys4gKEcUe5p -----END CERTIFICATE-----Generated at Mon Aug 11 07:36:53 2025 by rpki-client