$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json) Hash identifier: Hjy31Jqc1sO4NUBTyGWe8MwrRLi6J9VqHy9DaWw9R/g= Subject key identifier: F1:D2:1C:31:62:F5:AC:08:5C:A5:E6:22:87:9E:4A:B1:12:40:AF:96 Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft Manifest number: 01EA Signing time: Thu 07 Aug 2025 03:01:45 +0000 Manifest this update: Thu 07 Aug 2025 03:01:45 +0000 Manifest next update: Thu 14 Aug 2025 03:01:45 +0000 Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: Spu+EpOouUqM28wgJ1VAgl8yRAMVKfIN8xYBxYsbURY=) 2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Validity Not Before: Aug 7 03:01:45 2025 GMT Not After : Aug 14 03:01:45 2025 GMT Subject: CN=68941719-a737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9d:ec:be:c0:57:58:ec:79:5c:3c:bd:ed:f2: 96:ba:88:8a:f6:ac:ec:a8:e7:96:2f:e5:48:e9:1a: e7:70:cc:e4:fd:73:52:89:e8:cd:58:f4:38:5e:96: 17:3e:fe:56:53:8b:4c:ab:55:70:1a:26:7d:9d:ea: 81:09:7b:99:a9:18:c8:62:47:0a:7a:66:32:21:7e: 0d:c8:35:8c:db:b1:41:e2:af:b4:06:11:29:a1:4e: 94:f3:c2:a4:85:1d:1b:5d:87:9e:6a:0a:90:7b:94: d9:3e:e9:16:9f:b5:5c:3b:b8:51:74:42:46:d3:fb: e0:eb:28:1e:b6:92:f3:34:07:02:22:04:6a:61:58: 23:ba:69:a7:42:fb:bf:c4:ca:0c:0b:2a:87:ee:5f: 13:21:12:bc:99:40:5f:1b:83:40:2c:3d:f1:ef:54: db:71:b2:af:c0:ca:1a:ea:b6:93:b3:20:01:6d:de: 49:bd:3b:84:de:e4:98:f2:8c:54:0a:b8:ff:bf:8e: d4:7c:6f:0d:81:5c:31:ba:12:a6:df:e1:b9:ab:4e: 64:ea:04:85:b0:b8:6b:2c:0d:f5:63:5e:d0:62:ed: b3:d9:fd:21:19:77:0d:fc:29:fb:dc:77:a1:e0:3b: 60:f1:a5:8a:bf:d3:16:5f:41:ad:3d:65:da:e5:6b: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D2:1C:31:62:F5:AC:08:5C:A5:E6:22:87:9E:4A:B1:12:40:AF:96 X509v3 Authority Key Identifier: keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:de:60:7e:65:ed:2b:e2:9d:f2:b4:47:4d:db:99:c7:d0:f4: 65:4a:f5:c5:4a:b0:14:16:50:f7:e4:b9:15:79:1e:54:c8:dd: 6f:4f:88:30:34:74:38:3f:21:35:3f:fa:15:35:55:b6:83:5c: e9:65:d6:94:51:a8:17:0a:68:be:5f:9a:80:ed:89:83:84:eb: b0:9b:7e:fb:36:7f:a3:56:13:fc:0f:48:74:1c:8a:b2:db:32: 92:4b:49:63:42:eb:5e:43:75:47:f2:c4:08:6c:34:ea:0d:51: fc:ba:d2:56:4b:49:c6:d1:f6:d5:e5:32:77:a3:80:bc:42:6b: 4c:a5:d0:a5:2e:8b:14:a2:9d:f0:49:fb:d0:a4:57:e8:8c:11: 98:b6:55:de:b0:70:6c:08:7d:91:6a:13:93:6d:70:a0:b4:3c: f4:74:c1:dd:cf:ed:d7:84:f6:35:f7:18:df:f4:17:84:9a:0f: 3c:8c:3c:03:7a:37:bb:53:73:24:1e:e5:84:0f:72:73:bc:eb: 39:ef:36:0f:ec:2a:0c:59:05:2b:fc:86:92:73:bd:bc:00:df: 55:dc:c5:1e:82:c5:e8:ee:1e:10:02:9f:61:70:55:6d:03:cb: 6b:cd:ec:1f:53:47:a9:c1:6b:2d:ce:4e:f9:97:f9:56:5b:69: 8d:16:74:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB Q0Y2RDIyQjYwHhcNMjUwODA3MDMwMTQ1WhcNMjUwODE0MDMwMTQ1WjAYMRYwFAYD VQQDEw02ODk0MTcxOS1hNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3J3svsBXWOx5XDy97fKWuoiK9qzsqOeWL+VI6RrncMzk/XNSiejNWPQ4XpYX Pv5WU4tMq1VwGiZ9neqBCXuZqRjIYkcKemYyIX4NyDWM27FB4q+0BhEpoU6U88Kk hR0bXYeeagqQe5TZPukWn7VcO7hRdEJG0/vg6ygetpLzNAcCIgRqYVgjummnQvu/ xMoMCyqH7l8TIRK8mUBfG4NALD3x71TbcbKvwMoa6raTsyABbd5JvTuE3uSY8oxU Crj/v47UfG8NgVwxuhKm3+G5q05k6gSFsLhrLA31Y17QYu2z2f0hGXcN/Cn73Heh 4Dtg8aWKv9MWX0GtPWXa5WsbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHSHDFi 9awIXKXmIoeeSrESQK+WMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0 RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85 U01FeDBJWUs4c0dzOXRJclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ3mB+Ze0r4p3ytEdN25nH0PRlSvXFSrAUFlD35LkVeR5UyN1vT4gw NHQ4PyE1P/oVNVW2g1zpZdaUUagXCmi+X5qA7YmDhOuwm377Nn+jVhP8D0h0HIqy 2zKSS0ljQuteQ3VH8sQIbDTqDVH8utJWS0nG0fbV5TJ3o4C8QmtMpdClLosUop3w SfvQpFfojBGYtlXesHBsCH2RahOTbXCgtDz0dMHdz+3XhPY19xjf9BeEmg88jDwD eje7U3MkHuWED3JzvOs57zYP7CoMWQUr/IaSc728AN9V3MUegsXo7h4QAp9hcFVt A8trzewfU0epwWstzk75l/lWW2mNFnSW -----END CERTIFICATE-----Generated at Fri Aug 8 19:25:00 2025 by rpki-client