$ rpki-client -vvf rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft File: lMnUO1O12FDZjg2i1e88ThwxIEU.mft (raw, json) Hash identifier: Lq4fTc4QK+L/CnZSzyZ6xCEyWrHnUTvzmIolLZzWBUI= Subject key identifier: 9E:AE:C1:B0:4D:6F:A3:6F:F6:79:FA:DA:8A:49:41:68:90:20:F5:F4 Authority key identifier: 94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 Certificate issuer: /CN=A9120E21/serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Certificate serial: 103F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft Manifest number: 103D Signing time: Mon 28 Jul 2025 17:41:23 +0000 Manifest this update: Mon 28 Jul 2025 17:41:23 +0000 Manifest next update: Mon 04 Aug 2025 17:41:23 +0000 Files and hashes: 1: lMnUO1O12FDZjg2i1e88ThwxIEU.crl (hash: uhOe9F5VDBAq8Vyr85kdMl5PT/mbMTh8OERR4JjYyfc=) 2: 90FBBCBEB3F311EFA5A0C630C4F9AE02.roa (hash: s0rt/11Smtj23daczcK+GTeADbubE2DR+2IXbCK0jO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 17:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120E21, serialNumber=94C9D43B53B5D850D98E0DA2D5EF3C4E1C312045 Validity Not Before: Jul 28 17:41:23 2025 GMT Not After : Aug 4 17:41:23 2025 GMT Subject: CN=6887b643-5136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:d4:c1:f4:7e:0f:04:a7:0e:75:da:d3:4d: 8c:31:5c:f0:f0:10:40:86:66:6b:71:ed:8e:5a:78: 33:40:54:75:fc:af:9c:6e:fb:6c:9a:a4:c8:b9:90: b8:92:95:c2:05:d3:8f:d2:c5:11:7a:6c:aa:cf:44: b8:56:2a:b4:20:19:e1:87:3c:6c:3d:84:fe:c9:b1: c5:f6:01:3b:f6:23:0d:07:22:80:0a:89:f4:8f:5a: 3d:b8:84:c9:86:d6:5d:3c:34:08:df:cd:95:19:fb: cd:8b:6d:08:93:4e:f7:59:14:a8:15:94:5f:d7:8d: ca:64:b7:f0:54:71:27:24:04:3b:91:b9:2a:46:ea: 7f:76:7a:1b:15:f9:88:9e:32:1b:cc:1f:ca:90:1f: 83:22:66:b9:9f:8e:94:5b:7f:5e:25:bd:e3:5e:16: 7b:cc:7e:5a:0d:4f:bb:45:e5:3e:d9:4a:01:ba:ea: 09:71:fa:b4:80:cf:54:c3:34:f1:5b:e8:23:d8:89: 86:30:40:05:b9:fe:d8:27:1b:2b:b3:ee:8d:63:b7: fc:16:2a:60:fb:73:82:18:a4:ef:7f:a8:70:71:c3: 46:4d:8f:7c:f3:c0:eb:37:14:ea:12:91:c3:fb:7d: a0:30:e3:53:32:01:8d:f4:be:a9:65:b8:74:2e:e1: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:C1:B0:4D:6F:A3:6F:F6:79:FA:DA:8A:49:41:68:90:20:F5:F4 X509v3 Authority Key Identifier: keyid:94:C9:D4:3B:53:B5:D8:50:D9:8E:0D:A2:D5:EF:3C:4E:1C:31:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMnUO1O12FDZjg2i1e88ThwxIEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120E21/A5E950D4427311E9BAC00065C4F9AE02/lMnUO1O12FDZjg2i1e88ThwxIEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:77:6f:78:96:52:bf:ca:16:5f:0d:55:63:a1:fe:66:42:f6: e5:53:ec:08:c4:2e:ac:40:e7:75:c7:59:56:19:95:1a:99:08: 69:53:af:3f:91:a2:e0:55:11:71:c9:f0:8d:2e:f4:ff:f2:97: 1a:e2:e9:5c:37:f0:91:fb:60:f4:4b:58:49:09:69:fe:0a:a9: ae:77:0b:9b:20:12:6a:f6:56:ea:36:e6:ae:05:d3:d5:82:2a: 9b:c9:ef:d5:cb:eb:0a:42:87:71:f5:cd:9a:e9:d0:c4:ca:ea: 6d:cb:0c:ff:10:8b:37:73:76:52:bd:b4:b4:b9:ca:0a:d6:6d: 3c:bb:0c:13:fa:18:1c:ae:1e:da:66:bf:09:ba:11:36:41:a0: 9d:e9:0d:89:dc:f6:67:6f:f4:a6:02:08:d5:60:fe:33:d7:c7: d6:8d:4d:5e:45:0e:a5:df:bb:1d:ee:99:aa:ac:38:22:89:c7: d7:02:1f:c3:94:11:ce:af:52:e1:fb:98:ed:58:2b:f8:02:60: 23:24:5c:e5:c8:40:42:d4:97:a8:5e:39:e1:3d:4c:e4:97:26: c5:fc:8c:f8:0f:c3:3e:bd:58:9f:09:f5:32:76:f8:1f:14:59: 90:a7:b2:18:c3:39:ce:00:93:11:c2:8b:4c:85:18:7d:3c:a5: 84:b1:0a:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBFMjExMTAvBgNVBAUTKDk0QzlENDNCNTNCNUQ4NTBEOThFMERBMkQ1RUYzQzRF MUMzMTIwNDUwHhcNMjUwNzI4MTc0MTIzWhcNMjUwODA0MTc0MTIzWjAYMRYwFAYD VQQDEw02ODg3YjY0My01MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwPUwfR+DwSnDnXa002MMVzw8BBAhmZrce2OWngzQFR1/K+cbvtsmqTIuZC4 kpXCBdOP0sURemyqz0S4Viq0IBnhhzxsPYT+ybHF9gE79iMNByKACon0j1o9uITJ htZdPDQI382VGfvNi20Ik073WRSoFZRf143KZLfwVHEnJAQ7kbkqRup/dnobFfmI njIbzB/KkB+DIma5n46UW39eJb3jXhZ7zH5aDU+7ReU+2UoBuuoJcfq0gM9UwzTx W+gj2ImGMEAFuf7YJxsrs+6NY7f8Fipg+3OCGKTvf6hwccNGTY9888DrNxTqEpHD +32gMONTMgGN9L6pZbh0LuEr8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6uwbBN b6Nv9nn62opJQWiQIPX0MB8GA1UdIwQYMBaAFJTJ1DtTtdhQ2Y4NotXvPE4cMSBF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEUyMS9BNUU5NTBENDQy NzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJGRFpqZzJpMWU4OFRod3hJ RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNblVPMU8xMkZEWmpnMmkxZTg4VGh3eElFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEUyMS9BNUU5NTBENDQyNzMxMUU5QkFDMDAwNjVDNEY5QUUwMi9sTW5VTzFPMTJG RFpqZzJpMWU4OFRod3hJRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDd294llK/yhZfDVVjof5mQvblU+wIxC6sQOd1x1lWGZUamQhpU68/ kaLgVRFxyfCNLvT/8pca4ulcN/CR+2D0S1hJCWn+CqmudwubIBJq9lbqNuauBdPV giqbye/Vy+sKQodx9c2a6dDEyuptywz/EIs3c3ZSvbS0ucoK1m08uwwT+hgcrh7a Zr8JuhE2QaCd6Q2J3PZnb/SmAgjVYP4z18fWjU1eRQ6l37sd7pmqrDgiicfXAh/D lBHOr1Lh+5jtWCv4AmAjJFzlyEBC1JeoXjnhPUzklybF/Iz4D8M+vVifCfUydvgf FFmQp7IYwznOAJMRwotMhRh9PKWEsQrs -----END CERTIFICATE-----Generated at Wed Jul 30 12:24:55 2025 by rpki-client