$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: TMP4NiAx3tjw68+5nkaxOwBLKhPVzNDyCBis201AZik= Subject key identifier: CF:D6:75:23:51:D3:1E:72:A6:D9:40:BF:EE:3D:38:03:37:62:84:EF Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B53 Signing time: Wed 06 Aug 2025 19:26:22 +0000 Manifest this update: Wed 06 Aug 2025 19:26:21 +0000 Manifest next update: Wed 13 Aug 2025 19:26:21 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: e6KSdgwzrwGnL69n1UxpmQO1xQttnPY/sOYGNbnrQgk=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Aug 6 19:26:21 2025 GMT Not After : Aug 13 19:26:21 2025 GMT Subject: CN=6893ac5d-7cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:5d:91:83:aa:62:60:9b:64:89:10:ad:8c: f5:11:de:db:62:02:7f:7e:f3:1b:cd:e0:a7:20:b2: 82:d0:31:0b:e6:dd:f8:27:ac:88:9a:ad:f7:a4:2e: 1d:c3:ef:87:bd:8f:9f:70:96:f6:8f:d8:02:4f:bb: 85:29:84:1a:d8:6e:71:cb:5e:b2:5d:fc:ae:fb:1b: 29:4b:f6:55:96:96:db:cb:36:a8:57:5d:9c:f4:02: 2e:d4:91:92:ad:10:65:d3:83:37:68:c1:18:3a:34: 8e:b6:a7:35:15:70:16:6e:ab:5d:5c:58:53:4c:48: 06:e0:a8:66:14:04:50:b6:17:b9:f8:6c:26:0a:82: 49:f0:57:61:b8:04:72:d9:86:26:46:d1:56:5f:6e: 9d:b6:c3:28:bc:9c:e8:6b:fb:0d:ef:c8:c6:36:61: 31:8c:50:f7:65:ef:82:fb:36:ed:1c:99:08:4b:ea: c9:09:d3:d3:46:11:b0:5f:6f:f9:50:5a:44:b9:ca: 51:04:65:a1:91:f9:ae:2f:0b:64:55:53:cb:d7:4e: f6:1d:4c:27:0f:71:4b:b5:d2:b7:b0:a5:e4:25:44: b5:6a:91:f5:77:fa:96:09:fc:32:5e:3a:fe:ed:8e: 2e:6d:d3:48:c8:41:59:aa:b3:bb:01:74:34:38:05: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:75:23:51:D3:1E:72:A6:D9:40:BF:EE:3D:38:03:37:62:84:EF X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:11:d4:0e:ae:56:f1:50:eb:33:83:eb:43:19:e6:bc:2c: ba:f8:b9:f4:15:ee:d7:82:21:96:9c:e3:27:b3:b1:93:f3:7f: bb:58:ac:7e:6f:c2:8c:31:f8:e3:59:ee:08:d5:7c:b9:16:5e: 11:ab:03:1e:4e:d5:f0:e6:68:e1:0b:19:2d:74:73:90:0b:55: 95:3c:c1:09:b0:0a:7a:cb:c6:e0:49:30:57:6c:17:7b:47:b7: c6:fd:9e:b0:2f:e1:f9:9f:5a:e9:c5:59:6e:dd:b3:31:2c:79: 2a:91:e0:21:2e:39:4e:49:87:f2:97:7a:8f:8c:26:77:b5:52: e2:a2:e6:8b:22:ff:c0:fe:47:d7:d2:e2:0c:e0:f0:66:79:da: 3f:64:e6:d2:7f:be:b3:51:e3:34:91:d2:7e:fa:0d:41:f1:ad: 4f:87:91:e4:76:05:73:af:0f:25:c6:8c:d6:b1:ed:83:1a:07: 7b:99:6c:a0:ca:c5:4f:91:a8:90:e6:ed:2c:80:f4:98:d9:6b: 68:6f:be:fd:f8:d0:5b:6f:90:b8:b1:75:87:c9:46:13:f0:ea: 33:bf:6f:73:04:d2:7b:75:0b:11:3b:54:8d:fa:79:89:aa:9d: 44:c9:d9:f1:00:b1:fb:c6:bb:d6:09:d3:67:50:4e:75:b5:90: 72:ec:25:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwODA2MTkyNjIxWhcNMjUwODEzMTkyNjIxWjAYMRYwFAYD VQQDEw02ODkzYWM1ZC03Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2D5dkYOqYmCbZIkQrYz1Ed7bYgJ/fvMbzeCnILKC0DEL5t34J6yImq33pC4d w++HvY+fcJb2j9gCT7uFKYQa2G5xy16yXfyu+xspS/ZVlpbbyzaoV12c9AIu1JGS rRBl04M3aMEYOjSOtqc1FXAWbqtdXFhTTEgG4KhmFARQthe5+GwmCoJJ8FdhuARy 2YYmRtFWX26dtsMovJzoa/sN78jGNmExjFD3Ze+C+zbtHJkIS+rJCdPTRhGwX2/5 UFpEucpRBGWhkfmuLwtkVVPL1072HUwnD3FLtdK3sKXkJUS1apH1d/qWCfwyXjr+ 7Y4ubdNIyEFZqrO7AXQ0OAWINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/WdSNR 0x5yptlAv+49OAM3YoTvMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuCBHUDq5W8VDrM4PrQxnmvCy6+Ln0Fe7XgiGWnOMns7GT83+7WKx+ b8KMMfjjWe4I1Xy5Fl4RqwMeTtXw5mjhCxktdHOQC1WVPMEJsAp6y8bgSTBXbBd7 R7fG/Z6wL+H5n1rpxVlu3bMxLHkqkeAhLjlOSYfyl3qPjCZ3tVLiouaLIv/A/kfX 0uIM4PBmedo/ZObSf76zUeM0kdJ++g1B8a1Ph5HkdgVzrw8lxozWse2DGgd7mWyg ysVPkaiQ5u0sgPSY2Wtob779+NBbb5C4sXWHyUYT8Oozv29zBNJ7dQsRO1SN+nmJ qp1EydnxALH7xrvWCdNnUE51tZBy7CVV -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:21 2025 by rpki-client