$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft File: Lfmh43Whe46lYCe0WovWb5Z0fYY.mft (raw, json) Hash identifier: 8Skcknnj+Qbr5PC8tJL4AM666+2m+c5NiFg3+4dOkFg= Subject key identifier: 07:52:93:73:6A:A3:B1:22:95:DB:FE:B8:5B:DB:46:0E:3A:2E:54:2A Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft Manifest number: 011A Signing time: Thu 07 Aug 2025 05:35:27 +0000 Manifest this update: Thu 07 Aug 2025 05:35:27 +0000 Manifest next update: Thu 14 Aug 2025 05:35:27 +0000 Files and hashes: 1: Lfmh43Whe46lYCe0WovWb5Z0fYY.crl (hash: HamsU9Qir5csEB3ha6TVm4PHwpaIQVsy+txAuAf+Rog=) 2: BA6555344DEE11F0B209371DC4F9AE02.roa (hash: CQr2hobxwoFHY9a4Ev/A2yb3z142YhpnnpTJ8f2F528=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86 Validity Not Before: Aug 7 05:35:27 2025 GMT Not After : Aug 14 05:35:27 2025 GMT Subject: CN=68943b1f-7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:de:ca:74:24:b0:8d:35:d4:3d:e7:47:de: df:03:f3:37:e3:2d:14:50:67:ef:a8:8e:06:41:60: 2d:87:b2:6d:c0:aa:48:24:bf:a1:db:e1:57:0c:4d: 37:63:6e:f0:fc:b6:a9:c8:2c:45:66:5c:4c:2a:99: f7:1f:2b:a1:73:be:bf:52:64:88:15:bb:14:48:1f: 3a:3b:00:c1:55:f8:0d:d5:89:97:73:bf:a3:88:d6: a7:b5:32:d6:01:e3:b2:5e:e1:47:d8:14:9a:95:05: b4:f2:45:37:10:da:e1:30:1e:aa:e0:eb:50:1f:9f: 3e:43:19:91:ab:f2:fe:26:4a:53:da:23:17:48:43: fa:e4:40:09:e5:95:ac:08:b5:eb:07:81:86:ee:f6: 3c:e6:f4:12:53:9b:fc:32:e8:7f:40:d8:d6:6f:0f: fe:21:08:df:3c:88:50:ab:06:c9:9e:85:aa:4e:84: d5:48:23:d3:ec:b0:5c:42:b5:26:98:af:cb:4a:1a: 16:a2:cc:37:1a:13:84:44:b3:00:9a:80:48:03:16: f2:3a:ef:38:c5:49:7f:0f:bd:fb:fc:12:44:48:82: a8:31:77:30:9d:12:a4:2f:27:cf:45:6c:86:b7:69: 85:ed:cf:5d:e1:f0:f2:d6:5e:78:e7:f6:86:84:b9: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:52:93:73:6A:A3:B1:22:95:DB:FE:B8:5B:DB:46:0E:3A:2E:54:2A X509v3 Authority Key Identifier: keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7e:9b:99:c8:76:9d:16:64:5c:45:73:db:69:ca:79:34:7e: 86:1e:01:29:fb:dd:01:c0:0c:22:b6:0b:2e:81:11:fd:e7:a4: 41:73:9f:62:8e:f8:cf:57:1a:97:24:37:90:c9:94:02:13:f3: a7:61:24:14:0c:b5:68:09:3f:76:8d:c0:81:b9:7d:98:2d:6b: 0f:ce:5d:13:38:84:62:10:d6:21:0c:34:93:29:61:6d:2b:df: 85:e9:65:77:08:36:ea:59:bb:98:fc:81:3c:32:29:d5:88:2b: 5f:a3:2c:e8:e0:26:a7:53:18:54:1f:95:b0:37:89:e4:a5:ae: e3:6e:90:77:39:95:1c:2a:12:ab:4a:bd:5b:24:a0:e3:3f:57: ef:d8:23:8b:9e:17:4c:94:23:4c:c2:83:5c:41:25:a4:8b:a7: 80:7b:06:eb:2d:f1:1b:d3:a0:1d:3d:f3:c7:80:9a:02:bb:2b: 9b:cd:96:60:94:3e:d4:a3:bb:7c:39:f4:b5:60:16:c6:07:c1: c0:fb:61:48:36:ae:f2:e7:77:13:4b:86:bd:92:05:c6:3d:03: 6a:8e:5e:5a:7c:4c:df:11:b4:b1:63:5d:fb:d9:a8:96:17:fd: a5:7f:8d:6a:8e:98:63:dd:84:a0:53:b7:25:96:e4:88:0c:c8: 4e:a0:42:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG OTY3NDdEODYwHhcNMjUwODA3MDUzNTI3WhcNMjUwODE0MDUzNTI3WjAYMRYwFAYD VQQDEw02ODk0M2IxZi03Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw//eynQksI011D3nR97fA/M34y0UUGfvqI4GQWAth7JtwKpIJL+h2+FXDE03 Y27w/LapyCxFZlxMKpn3Hyuhc76/UmSIFbsUSB86OwDBVfgN1YmXc7+jiNantTLW AeOyXuFH2BSalQW08kU3ENrhMB6q4OtQH58+QxmRq/L+JkpT2iMXSEP65EAJ5ZWs CLXrB4GG7vY85vQSU5v8Muh/QNjWbw/+IQjfPIhQqwbJnoWqToTVSCPT7LBcQrUm mK/LShoWosw3GhOERLMAmoBIAxbyOu84xUl/D737/BJESIKoMXcwnRKkLyfPRWyG t2mF7c9d4fDy1l545/aGhLl+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdSk3Nq o7Eildv+uFvbRg46LlQqMB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8xODFCODIyMEU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0 NmxZQ2UwV292V2I1WjBmWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3fpuZyHadFmRcRXPbacp5NH6GHgEp+90BwAwitgsugRH956RBc59i jvjPVxqXJDeQyZQCE/OnYSQUDLVoCT92jcCBuX2YLWsPzl0TOIRiENYhDDSTKWFt K9+F6WV3CDbqWbuY/IE8MinViCtfoyzo4CanUxhUH5WwN4nkpa7jbpB3OZUcKhKr Sr1bJKDjP1fv2COLnhdMlCNMwoNcQSWki6eAewbrLfEb06AdPfPHgJoCuyubzZZg lD7Uo7t8OfS1YBbGB8HA+2FINq7y53cTS4a9kgXGPQNqjl5afEzfEbSxY1372aiW F/2lf41qjphj3YSgU7clluSIDMhOoEJc -----END CERTIFICATE-----Generated at Fri Aug 8 19:40:15 2025 by rpki-client