$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: TcqHKbD6r4oxVm3VcDh96Zzd2/NllWqUI5EQORl5f4g= Subject key identifier: 9F:BD:6C:31:7B:32:F1:74:CF:56:E3:73:5B:DE:80:11:99:3F:B8:36 Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02B3 Signing time: Fri 13 Jun 2025 00:58:54 +0000 Manifest this update: Fri 13 Jun 2025 00:58:53 +0000 Manifest next update: Fri 20 Jun 2025 00:58:53 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: f6f9xiyEEhl77s8mpVwAwl7wdIbwni030ycoUEiLrXI=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Jun 13 00:58:53 2025 GMT Not After : Jun 20 00:58:53 2025 GMT Subject: CN=684b77cd-e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:bc:73:4e:8c:38:66:bf:a3:2a:b0:c9:f8: d5:6a:79:49:20:13:3f:48:d2:e2:70:90:e8:98:85: d9:37:9a:28:4a:ee:48:3c:0c:68:eb:6b:ac:bf:cb: 2f:2b:96:b1:e1:e3:3d:a6:f9:17:c2:59:ef:5a:cd: 32:9b:2c:13:b9:8a:ef:04:3a:1f:aa:17:40:2c:8f: a8:69:6c:6c:4d:6c:51:ce:a5:b5:58:fc:e2:48:16: ff:39:10:7e:81:58:a6:5c:6c:10:23:9c:7d:84:62: db:6b:4b:bb:99:dd:c4:a3:1f:34:64:92:4b:8b:e3: 98:7c:8b:cc:cd:5e:07:d0:a4:c9:f2:05:30:e9:4f: 3d:76:50:8c:be:bc:f5:3a:bb:b8:21:87:bf:3d:70: ce:64:3e:0c:98:9a:86:6b:92:70:45:f2:30:11:e3: a0:d8:14:22:25:b2:eb:bf:55:5b:7e:29:06:ce:d7: cd:32:01:59:04:ac:39:87:94:48:4f:97:00:dc:e2: e3:e4:58:fa:50:04:e1:3f:ee:c1:c2:9c:6a:2b:7c: ad:ee:cd:ad:85:45:dc:54:5a:9b:41:e1:4c:72:6c: 61:d7:30:b8:bd:0c:af:97:d9:4b:9b:0a:65:40:a0: 28:c1:fd:82:c4:12:7c:b0:9f:39:27:ee:4e:e3:84: c5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:6C:31:7B:32:F1:74:CF:56:E3:73:5B:DE:80:11:99:3F:B8:36 X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ae:f1:ad:30:01:cb:1a:97:78:48:01:c9:3e:fe:ad:88:23: 5e:84:06:5c:72:c1:b4:53:d9:a8:fc:80:1f:80:9f:53:0f:f7: 0b:e4:e2:9a:1f:49:91:1a:da:5d:3b:93:c7:18:92:89:8f:18: 27:36:bc:69:e6:d7:75:ee:d1:d0:af:d0:5c:e2:b6:ad:93:a9: bc:94:bd:9b:55:f9:39:c9:ba:22:8e:8c:68:52:97:04:82:8b: 58:40:08:e1:f2:b8:0e:c9:70:83:03:ad:15:71:78:06:f9:65: 67:57:b8:9f:ad:8c:dd:9f:b4:4d:6d:ad:be:0f:19:41:1c:82: 4c:72:cb:32:2f:4a:f1:6b:1f:3e:85:f6:48:88:20:c8:fc:a0: 11:73:0d:ab:97:05:4a:a4:03:4a:d5:96:90:75:d4:e8:69:2c: c3:c6:21:14:2c:66:b5:70:f3:31:07:51:a6:08:75:f5:d7:8c: ee:5f:ab:1b:cf:2b:b1:d8:b1:d9:7d:7c:52:9e:6d:fd:95:62: d2:4b:68:87:50:6f:ce:23:63:f5:6a:3c:00:14:bc:95:d3:9a: a9:72:24:44:c9:b0:c2:31:cc:63:65:80:5d:77:d0:81:1d:d1: 9b:1f:89:3b:b2:56:fa:79:f6:c0:5e:b2:25:c1:91:40:13:8c: 7e:03:b3:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwNjEzMDA1ODUzWhcNMjUwNjIwMDA1ODUzWjAYMRYwFAYD VQQDEw02ODRiNzdjZC1lMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dy8c06MOGa/oyqwyfjVanlJIBM/SNLicJDomIXZN5ooSu5IPAxo62usv8sv K5ax4eM9pvkXwlnvWs0ymywTuYrvBDofqhdALI+oaWxsTWxRzqW1WPziSBb/ORB+ gVimXGwQI5x9hGLba0u7md3Eox80ZJJLi+OYfIvMzV4H0KTJ8gUw6U89dlCMvrz1 Oru4IYe/PXDOZD4MmJqGa5JwRfIwEeOg2BQiJbLrv1VbfikGztfNMgFZBKw5h5RI T5cA3OLj5Fj6UAThP+7BwpxqK3yt7s2thUXcVFqbQeFMcmxh1zC4vQyvl9lLmwpl QKAowf2CxBJ8sJ85J+5O44TFtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+9bDF7 MvF0z1bjc1vegBGZP7g2MB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFrvGtMAHLGpd4SAHJPv6tiCNehAZccsG0U9mo/IAfgJ9TD/cL5OKa H0mRGtpdO5PHGJKJjxgnNrxp5td17tHQr9Bc4ratk6m8lL2bVfk5yboijoxoUpcE gotYQAjh8rgOyXCDA60VcXgG+WVnV7ifrYzdn7RNba2+DxlBHIJMcssyL0rxax8+ hfZIiCDI/KARcw2rlwVKpANK1ZaQddToaSzDxiEULGa1cPMxB1GmCHX114zuX6sb zyux2LHZfXxSnm39lWLSS2iHUG/OI2P1ajwAFLyV05qpciREybDCMcxjZYBdd9CB HdGbH4k7slb6efbAXrIlwZFAE4x+A7OX -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:02 2025 by rpki-client