$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: jOR2GZYvh+bSGmzxxdWrauV110r/2m2IpfNwJPu8cIs= Subject key identifier: E9:57:39:FC:98:0A:2C:4E:A9:47:6F:1F:25:79:3C:F1:04:E1:86:3E Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 02D1 Signing time: Sat 09 Aug 2025 01:55:20 +0000 Manifest this update: Sat 09 Aug 2025 01:55:20 +0000 Manifest next update: Sat 16 Aug 2025 01:55:20 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: jH4I1wFgtzTS5Tx5vrkwJduCXFp32sI+mlriZUZup2Q=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Aug 9 01:55:20 2025 GMT Not After : Aug 16 01:55:20 2025 GMT Subject: CN=6896aa88-b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:19:80:fb:7a:9a:48:27:ef:33:d6:42:36: e2:90:8f:3e:ff:4e:b8:94:88:bc:7c:97:62:da:04: 4f:db:e1:a2:f8:02:f8:b9:81:63:30:11:5f:28:c7: 30:2a:3d:2e:e4:54:ba:a6:3e:2b:b7:19:06:b4:22: 76:25:72:25:be:33:38:72:d4:1c:dd:ab:c8:d3:37: b1:87:3b:87:85:76:13:06:5d:77:52:d2:d1:d5:6b: 54:1b:b5:1d:b6:b0:ac:ab:41:6e:30:09:2d:c7:ee: 19:f1:04:d1:c3:f0:bb:62:51:ef:f8:1f:b7:90:2d: 42:54:4d:fa:ec:27:f1:4b:c0:d4:76:9f:f0:ee:0a: 89:e9:ee:a3:c8:10:20:e5:7e:ff:c7:47:0a:9b:45: 55:0c:c9:be:15:7e:6c:9c:88:b9:3f:1f:06:05:2e: 05:b3:80:32:d2:23:58:7a:2f:25:a5:ec:42:5b:3c: d4:9b:89:33:80:e4:97:1f:31:a1:d9:1e:40:7c:4e: f0:3b:ad:48:bb:6e:22:83:36:08:f2:98:82:d9:0d: 8a:37:44:c2:1a:3f:3c:4d:12:f7:27:1d:5d:45:7b: 93:ab:b9:ef:cd:5b:4e:53:05:4a:4a:2e:f7:11:78: 53:03:33:f3:99:41:3d:50:e5:b6:4f:15:06:09:6f: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:57:39:FC:98:0A:2C:4E:A9:47:6F:1F:25:79:3C:F1:04:E1:86:3E X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:7d:89:8e:43:a5:51:68:4d:51:4a:c6:1c:49:69:c7:ba: 4b:71:5c:bb:93:45:e9:81:8d:62:ad:58:2d:c8:a9:0e:e6:96: 2b:f2:af:d2:c3:1f:22:95:55:d0:5b:8b:2f:6d:c7:4c:98:62: 8f:0a:d5:37:93:6c:c7:41:d7:3b:ce:0f:4a:09:1b:db:4f:41: 0d:05:4f:90:9a:d2:a4:a0:82:0e:ab:81:ef:33:dd:43:32:f4: ec:72:af:31:9a:b2:17:7a:96:07:0d:4b:4c:94:24:87:14:8d: b8:b1:92:a2:e0:13:82:75:92:d1:80:19:7c:a4:4e:00:e8:e2: 2c:57:bc:7a:e2:f6:52:a5:31:8c:09:ae:e3:db:cf:83:cd:b1: f1:fb:7b:0c:03:e4:70:83:3e:87:00:02:fd:ca:6c:d2:45:8a: f6:87:e8:5f:bb:32:b6:1f:0e:c2:82:77:ec:f7:e0:12:ff:f8: 86:08:a3:44:62:f4:a7:08:3e:88:d5:77:cf:84:ed:cd:66:dc: 14:be:21:e7:6f:cb:cd:e1:b1:ec:70:76:16:f8:55:a5:65:83: 67:56:b7:0b:28:b0:01:e5:6e:c7:bb:5a:f0:30:6b:a6:3d:64: a5:cb:7d:a6:60:43:f5:e9:77:22:7c:ac:c0:76:94:95:89:e5: 16:77:e7:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwODA5MDE1NTIwWhcNMjUwODE2MDE1NTIwWjAYMRYwFAYD VQQDEw02ODk2YWE4OC1iMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyesZgPt6mkgn7zPWQjbikI8+/064lIi8fJdi2gRP2+Gi+AL4uYFjMBFfKMcw Kj0u5FS6pj4rtxkGtCJ2JXIlvjM4ctQc3avI0zexhzuHhXYTBl13UtLR1WtUG7Ud trCsq0FuMAktx+4Z8QTRw/C7YlHv+B+3kC1CVE367CfxS8DUdp/w7gqJ6e6jyBAg 5X7/x0cKm0VVDMm+FX5snIi5Px8GBS4Fs4Ay0iNYei8lpexCWzzUm4kzgOSXHzGh 2R5AfE7wO61Iu24igzYI8piC2Q2KN0TCGj88TRL3Jx1dRXuTq7nvzVtOUwVKSi73 EXhTAzPzmUE9UOW2TxUGCW+bbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlXOfyY CixOqUdvHyV5PPEE4YY+MB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Ln2JjkOlUWhNUUrGHElpx7pLcVy7k0XpgY1irVgtyKkO5pYr8q/S wx8ilVXQW4svbcdMmGKPCtU3k2zHQdc7zg9KCRvbT0ENBU+QmtKkoIIOq4HvM91D MvTscq8xmrIXepYHDUtMlCSHFI24sZKi4BOCdZLRgBl8pE4A6OIsV7x64vZSpTGM Ca7j28+DzbHx+3sMA+Rwgz6HAAL9ymzSRYr2h+hfuzK2Hw7Cgnfs9+AS//iGCKNE YvSnCD6I1XfPhO3NZtwUviHnb8vN4bHscHYW+FWlZYNnVrcLKLAB5W7Hu1rwMGum PWSly32mYEP16XcifKzAdpSVieUWd+fF -----END CERTIFICATE-----Generated at Sun Aug 10 18:10:47 2025 by rpki-client