$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: uCBJnt4VP+3Q8xQ+ZPzF/JJ2bRUidI15g+20jT5jyNM= Subject key identifier: C5:63:44:B3:68:A5:A3:3A:DF:90:B2:1E:9E:09:10:C4:28:C9:3C:3D Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 4B Signing time: Sat 09 Aug 2025 07:50:49 +0000 Manifest this update: Sat 09 Aug 2025 07:50:49 +0000 Manifest next update: Sat 16 Aug 2025 07:50:49 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: OBVilBxC4ASC4fJniTwSDC1hn9cvFoUJ3iM/+Ofi1kM=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: riovgsjK6T9Xk/OVypXbdv81H28kZxqc1J6kqB+epyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: Aug 9 07:50:49 2025 GMT Not After : Aug 16 07:50:49 2025 GMT Subject: CN=6896fdd9-aa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:a3:b3:cd:d5:80:ca:3b:f4:b8:c3:3a:a2: 27:4f:94:80:2b:7f:3a:0f:ae:02:e4:45:95:ae:c7: 36:2b:50:cb:65:1e:45:ab:3b:e4:c6:4c:9b:79:81: e0:1a:2b:39:34:8e:01:bc:a3:fc:ff:a8:e1:74:83: 2a:7b:c8:5d:a0:7d:e7:49:8b:2f:f4:d0:e2:43:58: d9:f1:a6:df:fa:29:c3:d1:21:7a:42:d0:d1:42:b7: 10:43:f5:84:a6:8b:3d:ff:b1:f2:2c:7e:1f:e6:77: b5:bf:17:19:75:ca:9e:f6:4f:a2:b1:f0:e6:07:2b: 41:45:0b:f8:36:96:30:08:00:f7:d3:30:32:20:97: fc:37:16:d8:ef:20:80:60:4e:a2:c3:e2:a8:b9:29: 93:c4:10:70:77:56:e0:6b:2d:a6:fd:40:d3:f0:19: a7:73:c7:cf:c1:65:d3:89:87:5f:fc:5b:a7:08:78: 44:f3:f2:3f:59:3b:42:88:b1:d5:14:50:31:a0:af: dc:ab:9d:65:dd:eb:fd:bf:2f:14:2f:da:f6:0a:ee: f5:1f:63:84:51:b1:40:78:ba:0b:80:85:bc:bc:bc: 16:2a:a2:19:30:6c:a3:f3:d5:07:c9:71:93:ca:e0: 59:24:fa:52:0f:52:16:c1:3c:ff:04:7a:5a:04:74: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:63:44:B3:68:A5:A3:3A:DF:90:B2:1E:9E:09:10:C4:28:C9:3C:3D X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:2d:10:0d:7b:39:e4:47:56:93:a8:55:93:77:bb:36:8b:6a: bc:b2:8c:f9:b5:0b:ac:b3:69:5c:58:b3:ae:28:da:33:76:54: c5:dd:68:64:e8:11:ee:67:d0:ae:83:a3:29:e7:ec:5b:29:9e: 06:0b:df:cb:39:89:f9:af:1b:01:bb:65:83:17:12:d0:34:7d: 83:10:e4:5f:33:f6:4f:7c:3a:67:91:78:86:a6:d3:ad:f5:00: 36:a9:a6:ee:e2:d9:73:a2:2e:d8:68:d0:21:16:f2:2d:be:e0: d2:12:a3:1f:92:01:39:94:72:54:fa:76:92:09:20:37:55:be: 54:3d:b4:6e:bd:a5:75:ab:71:52:3b:43:6e:c1:fa:5c:c7:26: 01:ff:2d:6e:30:34:48:9d:0a:fe:4b:6c:7b:8d:43:a2:42:89: 5a:25:5b:da:c5:c3:9b:d4:dd:53:11:25:b1:d0:2a:15:7b:0a: 5c:a8:86:ae:13:2b:f9:50:f8:9a:9f:35:c2:c4:99:36:55:31: 81:d6:7f:9b:3c:8e:60:e0:13:28:9c:9f:13:a9:98:a0:8a:10: 9c:66:df:32:70:d0:0e:17:1a:b1:86:b4:c7:dc:ae:1b:bc:46: 45:41:11:6b:0e:68:f4:20:0a:2f:2e:da:e9:c8:65:d2:b8:62: 58:74:9a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTA4MDkwNzUwNDlaFw0yNTA4MTYwNzUwNDlaMBgxFjAUBgNV BAMTDTY4OTZmZGQ5LWFhNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQNKOzzdWAyjv0uMM6oidPlIArfzoPrgLkRZWuxzYrUMtlHkWrO+TGTJt5geAa Kzk0jgG8o/z/qOF0gyp7yF2gfedJiy/00OJDWNnxpt/6KcPRIXpC0NFCtxBD9YSm iz3/sfIsfh/md7W/Fxl1yp72T6Kx8OYHK0FFC/g2ljAIAPfTMDIgl/w3FtjvIIBg TqLD4qi5KZPEEHB3VuBrLab9QNPwGadzx8/BZdOJh1/8W6cIeETz8j9ZO0KIsdUU UDGgr9yrnWXd6/2/LxQv2vYK7vUfY4RRsUB4uguAhby8vBYqohkwbKPz1QfJcZPK 4Fkk+lIPUhbBPP8EeloEdOcrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxWNEs2il ozrfkLIengkQxCjJPD0wHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgtEA17OeRHVpOoVZN3uzaLaryyjPm1C6yzaVxYs64o2jN2VMXdaGTo Ee5n0K6Doynn7FspngYL38s5ifmvGwG7ZYMXEtA0fYMQ5F8z9k98OmeReIam0631 ADappu7i2XOiLtho0CEW8i2+4NISox+SATmUclT6dpIJIDdVvlQ9tG69pXWrcVI7 Q27B+lzHJgH/LW4wNEidCv5LbHuNQ6JCiVolW9rFw5vU3VMRJbHQKhV7Clyohq4T K/lQ+JqfNcLEmTZVMYHWf5s8jmDgEyicnxOpmKCKEJxm3zJw0A4XGrGGtMfcrhu8 RkVBEWsOaPQgCi8u2unIZdK4Ylh0mhE= -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:23 2025 by rpki-client