$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: wNl2g0c+sMdUIAza0/G+uRUQaTgTzszv1H0PrMkH8fQ= Subject key identifier: 9A:81:22:C0:9E:71:BD:45:BB:95:85:4B:A0:3A:56:8C:C0:5B:95:CD Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 012F Signing time: Sat 09 Aug 2025 04:56:30 +0000 Manifest this update: Sat 09 Aug 2025 04:56:30 +0000 Manifest next update: Sat 16 Aug 2025 04:56:30 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: NT/kE68+baV1ZzMT36HtixJSOjV3df+H0XGSllxSNi4=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Aug 9 04:56:30 2025 GMT Not After : Aug 16 04:56:30 2025 GMT Subject: CN=6896d4fe-ca30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:e8:e7:52:df:c4:2e:8f:26:b4:a5:d4:91: 4e:53:9e:0a:5c:d4:1c:d1:42:06:3c:a7:ba:db:e0: 8a:63:1a:9e:0e:78:24:cc:39:18:67:77:a8:2a:fb: 19:5b:c8:33:3f:a8:a9:7c:0c:df:db:ff:13:8a:1b: cd:c4:ee:b3:ac:b5:99:bd:68:03:e0:9d:e1:8e:4e: bb:23:cb:9d:e5:39:b2:d2:38:1b:87:8a:b6:13:fb: 7b:37:65:67:6a:23:fb:d0:c8:77:05:f8:61:39:e4: e7:6d:2e:3a:29:64:3f:5b:66:e7:5f:4f:5c:57:03: 1d:ee:dc:b2:5b:fc:d4:f3:1f:d0:d9:66:84:07:98: 98:7f:fc:73:56:7c:ea:13:d9:22:16:2c:20:95:97: d8:7e:85:47:1b:c2:be:9d:46:40:2b:b7:ea:30:01: f8:45:a7:99:54:b8:e6:20:33:e1:6f:47:19:3d:ee: a8:25:51:62:3f:d9:34:61:bf:1b:25:c4:da:39:83: c9:c1:9b:c4:9d:15:23:dd:52:6f:cf:d8:db:6f:bc: 9b:0b:d1:88:ed:1a:9b:9a:fb:96:f5:7f:6e:1f:fb: cf:a0:ad:4c:f0:c1:e0:d1:d0:00:9a:d9:d4:87:41: 9d:66:50:90:eb:ce:3a:3a:b0:7a:94:3f:95:5d:3d: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:22:C0:9E:71:BD:45:BB:95:85:4B:A0:3A:56:8C:C0:5B:95:CD X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fe:65:8b:91:e5:67:aa:31:84:0e:f2:3c:0e:4b:11:32:f2: 80:bd:43:bf:06:97:b4:95:59:71:55:88:e1:03:d3:46:73:65: be:f2:90:ce:8b:8d:25:74:e9:28:03:ad:f8:54:48:08:cd:5e: c8:b4:ea:c4:d3:5d:e0:e2:a4:bd:e4:bf:95:f3:6e:22:6d:52: 17:bf:fe:b3:e4:18:ca:20:aa:e6:df:32:10:f6:17:81:9b:c6: bc:c0:51:b2:e1:9b:f0:9e:bb:93:36:c1:89:66:3a:5d:17:e1: 84:69:38:57:94:b3:d8:63:f0:36:23:09:26:54:75:18:55:f5: f0:17:17:c4:23:4e:b9:88:81:34:96:63:07:01:4d:89:f5:b0: 4f:f1:13:2e:0e:29:99:8f:4b:9f:71:e8:7c:b9:6c:6e:ba:0b: b7:42:bb:74:24:f2:0c:12:22:d8:fa:b5:2e:53:bc:5c:df:1d: 73:74:2f:6c:f0:aa:4b:c9:a0:ec:e0:bf:16:ca:1f:b1:a9:bc: c3:96:0b:ce:09:64:89:a8:75:de:5f:9f:12:d1:96:9b:c5:4d: 60:23:ea:4c:fd:49:07:36:fa:8b:4c:1f:f2:08:f0:36:16:4a: 30:ed:ab:79:ab:ca:b3:20:82:45:ed:26:ba:a7:cf:69:7d:9e: 89:60:ac:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwODA5MDQ1NjMwWhcNMjUwODE2MDQ1NjMwWjAYMRYwFAYD VQQDEw02ODk2ZDRmZS1jYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfzo51LfxC6PJrSl1JFOU54KXNQc0UIGPKe62+CKYxqeDngkzDkYZ3eoKvsZ W8gzP6ipfAzf2/8TihvNxO6zrLWZvWgD4J3hjk67I8ud5Tmy0jgbh4q2E/t7N2Vn aiP70Mh3BfhhOeTnbS46KWQ/W2bnX09cVwMd7tyyW/zU8x/Q2WaEB5iYf/xzVnzq E9kiFiwglZfYfoVHG8K+nUZAK7fqMAH4RaeZVLjmIDPhb0cZPe6oJVFiP9k0Yb8b JcTaOYPJwZvEnRUj3VJvz9jbb7ybC9GI7RqbmvuW9X9uH/vPoK1M8MHg0dAAmtnU h0GdZlCQ6846OrB6lD+VXT3eYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqBIsCe cb1Fu5WFS6A6VozAW5XNMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/mWLkeVnqjGEDvI8DksRMvKAvUO/Bpe0lVlxVYjhA9NGc2W+8pDO i40ldOkoA634VEgIzV7ItOrE013g4qS95L+V824ibVIXv/6z5BjKIKrm3zIQ9heB m8a8wFGy4ZvwnruTNsGJZjpdF+GEaThXlLPYY/A2IwkmVHUYVfXwFxfEI065iIE0 lmMHAU2J9bBP8RMuDimZj0ufceh8uWxuugu3Qrt0JPIMEiLY+rUuU7xc3x1zdC9s 8KpLyaDs4L8Wyh+xqbzDlgvOCWSJqHXeX58S0ZabxU1gI+pM/UkHNvqLTB/yCPA2 Fkow7at5q8qzIIJF7Sa6p89pfZ6JYKy2 -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:59 2025 by rpki-client