$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json) Hash identifier: wLDNyir7Qrkuu5419+KwTcsGpQnYqeQ4vmhGakDXBco= Subject key identifier: 07:6C:AC:64:A4:F4:9C:3C:10:28:BC:98:D3:92:5D:19:CA:FD:07:97 Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft Manifest number: 0724 Signing time: Wed 18 Jun 2025 21:40:28 +0000 Manifest this update: Wed 18 Jun 2025 21:40:28 +0000 Manifest next update: Wed 25 Jun 2025 21:40:28 +0000 Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: PZP6RHYxMUYmycrcGguNUse1O5iysgil4ZxDgusrozA=) 2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: if2Ty+xI9lsixRtkfYJ2DrsSLWOZeEaMUkbkKLpKeBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Validity Not Before: Jun 18 21:40:28 2025 GMT Not After : Jun 25 21:40:28 2025 GMT Subject: CN=6853324c-32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:64:f3:bd:0e:42:31:59:9f:b4:3f:8d:ea: 6c:52:e2:d8:78:a2:d0:7b:14:16:83:69:8d:19:23: 97:e5:81:9c:0d:d1:7d:e1:a7:c5:95:43:d5:e7:4c: b6:4c:c1:7d:c6:f6:1f:c9:53:9d:ef:8a:bc:56:0d: 41:41:8b:42:98:dc:cd:87:6c:38:8d:79:66:cb:31: 4e:f6:7d:10:34:78:ce:2f:ba:69:01:22:87:4b:36: a1:65:20:c7:38:5e:ca:66:72:f2:71:46:39:f3:65: ea:9d:d7:f0:bb:a7:51:7b:c3:19:1e:59:e5:18:58: 2c:17:eb:1d:d6:18:d0:86:2f:e6:81:64:ad:84:24: 68:01:a9:c6:ae:f2:67:3b:dd:2e:6b:90:aa:4d:d6: 64:b1:83:3c:09:7a:f9:e8:0f:51:e0:51:b2:af:13: 29:8e:0d:f9:c5:ea:39:39:17:5e:0b:0f:b0:11:3f: 05:f1:c8:6f:f6:b7:ec:75:28:3a:b8:f2:cf:16:ce: f0:f9:bb:f6:64:14:b8:7c:b7:7c:5b:25:74:28:c9: 7b:bf:94:2c:19:ff:f1:10:1c:69:1b:ba:bd:67:c8: 88:4e:60:1f:fd:05:56:e2:bd:fb:46:59:4a:1b:e6: 62:bc:06:90:72:22:75:af:86:51:d3:ca:0e:24:b1: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:AC:64:A4:F4:9C:3C:10:28:BC:98:D3:92:5D:19:CA:FD:07:97 X509v3 Authority Key Identifier: keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:be:28:36:e3:cf:a3:96:7a:5d:ec:02:f3:0c:b9:b3:ac: 4a:47:15:bb:8c:0c:fc:34:40:b5:dd:41:f4:97:b8:eb:ed:37: 80:11:9e:88:2b:6a:74:66:78:ae:7e:1f:3e:ee:81:f3:7f:65: 98:4f:c9:69:5b:13:0a:b0:71:17:d8:be:d4:1c:d5:eb:11:ab: 0d:83:3e:f2:87:e1:6e:80:ab:71:a0:33:f7:f8:2c:21:a7:4c: 70:cc:2a:f0:67:6e:43:e2:17:40:37:ed:3d:6e:43:62:68:e5: 03:b1:29:6b:2f:47:ca:58:4e:0a:f1:d1:f6:ad:80:f1:77:c9: 85:97:91:4b:ae:be:d1:84:48:30:2d:b4:ac:97:a2:e6:54:93: 9e:65:98:48:5b:bb:e0:01:22:78:46:4c:6f:08:e2:00:93:2c: c4:51:07:f6:17:e6:74:f8:c0:12:05:9d:2a:3c:08:d3:ba:6e: 38:68:9d:7a:03:57:44:13:8d:50:e8:d4:59:2a:88:80:99:34: f4:b8:05:96:37:20:cd:14:04:28:42:85:ab:b7:ce:b9:e3:3e: 5d:71:32:36:2a:24:70:76:7c:68:c3:f4:0d:18:71:cb:45:af: 4f:e2:9e:a7:03:d3:ec:29:44:a3:1f:e5:c8:bb:5a:60:a0:dc: d6:60:02:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5 MjhFQTdCMzkwHhcNMjUwNjE4MjE0MDI4WhcNMjUwNjI1MjE0MDI4WjAYMRYwFAYD VQQDEw02ODUzMzI0Yy0zMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rRk870OQjFZn7Q/jepsUuLYeKLQexQWg2mNGSOX5YGcDdF94afFlUPV50y2 TMF9xvYfyVOd74q8Vg1BQYtCmNzNh2w4jXlmyzFO9n0QNHjOL7ppASKHSzahZSDH OF7KZnLycUY582Xqndfwu6dRe8MZHlnlGFgsF+sd1hjQhi/mgWSthCRoAanGrvJn O90ua5CqTdZksYM8CXr56A9R4FGyrxMpjg35xeo5ORdeCw+wET8F8chv9rfsdSg6 uPLPFs7w+bv2ZBS4fLd8WyV0KMl7v5QsGf/xEBxpG7q9Z8iITmAf/QVW4r37RllK G+ZivAaQciJ1r4ZR08oOJLHSuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdsrGSk 9Jw8ECi8mNOSXRnK/QeXMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU X1BZT21OQVhBeTZTanFlemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKLr4oNuPPo5Z6XewC8wy5s6xKRxW7jAz8NEC13UH0l7jr7TeAEZ6I K2p0Zniufh8+7oHzf2WYT8lpWxMKsHEX2L7UHNXrEasNgz7yh+FugKtxoDP3+Cwh p0xwzCrwZ25D4hdAN+09bkNiaOUDsSlrL0fKWE4K8dH2rYDxd8mFl5FLrr7RhEgw LbSsl6LmVJOeZZhIW7vgASJ4RkxvCOIAkyzEUQf2F+Z0+MASBZ0qPAjTum44aJ16 A1dEE41Q6NRZKoiAmTT0uAWWNyDNFAQoQoWrt8654z5dcTI2KiRwdnxow/QNGHHL Ra9P4p6nA9PsKUSjH+XIu1pgoNzWYAL3 -----END CERTIFICATE-----Generated at Fri Jun 20 08:15:03 2025 by rpki-client