$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json) Hash identifier: lCq84sZXVWsV/bWGRmHxr9kA0jLHyCqmyJ1i3GwjHhs= Subject key identifier: E1:9E:84:D9:8C:66:47:F1:08:C6:5E:D7:C1:7A:B8:3B:8A:A4:6D:7A Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft Manifest number: 0740 Signing time: Tue 12 Aug 2025 22:06:05 +0000 Manifest this update: Tue 12 Aug 2025 22:06:05 +0000 Manifest next update: Tue 19 Aug 2025 22:06:05 +0000 Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: d1VedPzt9bYW1ljwR17NDrS2Q8nFuh5CKpMUedbV0Os=) 2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: if2Ty+xI9lsixRtkfYJ2DrsSLWOZeEaMUkbkKLpKeBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167278, serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Validity Not Before: Aug 12 22:06:05 2025 GMT Not After : Aug 19 22:06:05 2025 GMT Subject: CN=689bbacd-ba7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:b9:2f:0c:47:f9:9a:f2:2e:5f:fb:15:80: 0d:9d:7c:82:ad:71:82:5c:c5:ed:c1:a4:9a:3f:20: 17:96:a7:a9:30:26:57:fc:b1:7c:27:55:45:14:2a: f5:92:e8:0b:a0:6d:a5:00:61:93:56:1b:69:fd:17: ad:c6:7a:86:8d:42:ac:2d:06:ca:8d:b6:57:48:c5: 47:27:78:c4:4b:1f:ee:bb:8e:1e:f0:63:e7:cc:14: 6d:e5:86:45:cb:16:b0:3b:32:a0:a3:f8:3a:27:b0: 03:b9:6b:34:22:cc:39:ee:c0:5e:ce:12:e5:5c:17: ff:c5:7f:fb:b8:9b:29:59:f3:54:2c:20:90:fe:53: 6a:6d:97:0e:b6:0c:64:f8:72:4d:6c:d0:88:d7:d5: 3b:49:30:9b:bb:f6:58:fa:0d:9e:cc:f1:4e:86:96: dd:83:30:97:f7:ba:b2:9b:e3:89:97:e8:4c:b2:97: b3:e8:96:f5:a4:fd:8c:bd:09:18:e6:c6:bf:e4:ad: d3:d4:63:9c:36:9f:c8:cd:4d:49:4d:67:ad:b6:7a: 73:e7:a2:ae:1d:b2:f9:7a:54:87:29:71:c8:2d:f4: 2d:08:b7:a5:54:a3:3e:e1:70:a0:6e:74:44:6d:8d: 11:cc:9e:64:62:af:0c:eb:82:95:93:74:3e:4b:0d: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:84:D9:8C:66:47:F1:08:C6:5E:D7:C1:7A:B8:3B:8A:A4:6D:7A X509v3 Authority Key Identifier: keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:be:7d:31:a7:e1:b1:5c:64:2e:ce:8a:e5:29:58:19:f6:6b: a4:5d:fa:c1:27:bb:97:44:bb:10:ba:00:99:25:bb:99:50:cd: fd:61:14:9b:1b:2f:31:85:c0:01:d5:bf:c1:4b:88:22:ee:8c: 66:b1:c4:fd:67:6b:ce:d3:16:73:ee:39:4f:56:ac:9c:ca:9c: d0:da:ae:3d:7f:cc:69:3e:6a:c4:ae:b7:5e:db:20:e4:f0:8f: bf:90:cb:bc:35:8f:41:eb:19:c4:68:9d:cb:d3:12:71:ee:5c: 41:4c:ee:24:02:51:17:8b:1a:da:97:f2:24:fd:da:f8:ea:3a: 95:54:0c:8d:9d:dc:d8:43:90:26:3a:df:1a:ad:c5:11:c2:75: a1:44:36:73:70:aa:5b:15:86:c0:f3:a6:db:7c:38:f8:a1:47: ae:fc:ac:35:71:83:12:e8:c5:be:10:cc:66:6e:b4:f7:e5:52: 98:4d:c9:f1:0a:9b:f5:91:df:d7:bd:aa:91:79:c3:52:f7:4c: c3:19:70:0c:d2:67:0c:d2:e5:03:c0:dc:95:65:b4:a2:cb:23: 9a:00:e5:5d:09:c6:18:6c:20:d7:24:7a:cb:c4:e1:96:d8:53: 67:bc:ba:5c:ab:6f:6b:98:bd:67:3d:2e:f9:bb:be:9e:1b:ce: 89:14:63:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5 MjhFQTdCMzkwHhcNMjUwODEyMjIwNjA1WhcNMjUwODE5MjIwNjA1WjAYMRYwFAYD VQQDEw02ODliYmFjZC1iYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1K5LwxH+ZryLl/7FYANnXyCrXGCXMXtwaSaPyAXlqepMCZX/LF8J1VFFCr1 kugLoG2lAGGTVhtp/RetxnqGjUKsLQbKjbZXSMVHJ3jESx/uu44e8GPnzBRt5YZF yxawOzKgo/g6J7ADuWs0Isw57sBezhLlXBf/xX/7uJspWfNULCCQ/lNqbZcOtgxk +HJNbNCI19U7STCbu/ZY+g2ezPFOhpbdgzCX97qym+OJl+hMspez6Jb1pP2MvQkY 5sa/5K3T1GOcNp/IzU1JTWettnpz56KuHbL5elSHKXHILfQtCLelVKM+4XCgbnRE bY0RzJ5kYq8M64KVk3Q+Sw2wiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGehNmM ZkfxCMZe18F6uDuKpG16MB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU X1BZT21OQVhBeTZTanFlemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsvn0xp+GxXGQuzorlKVgZ9mukXfrBJ7uXRLsQugCZJbuZUM39YRSb Gy8xhcAB1b/BS4gi7oxmscT9Z2vO0xZz7jlPVqycypzQ2q49f8xpPmrErrde2yDk 8I+/kMu8NY9B6xnEaJ3L0xJx7lxBTO4kAlEXixral/Ik/dr46jqVVAyNndzYQ5Am Ot8arcURwnWhRDZzcKpbFYbA86bbfDj4oUeu/Kw1cYMS6MW+EMxmbrT35VKYTcnx Cpv1kd/XvaqRecNS90zDGXAM0mcM0uUDwNyVZbSiyyOaAOVdCcYYbCDXJHrLxOGW 2FNnvLpcq29rmL1nPS75u76eG86JFGOr -----END CERTIFICATE-----Generated at Wed Aug 13 02:49:11 2025 by rpki-client