$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: NJ4DRzjmiEls4EIciufKXuhuNaFOSasp/jZn2xI6FmA= Subject key identifier: 5E:F1:E1:9A:DE:54:E6:CA:D4:6E:2E:22:9E:35:5A:4B:61:0B:1B:1B Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:57:42 +0000 Manifest this update: Sat 19 Jul 2025 07:57:42 +0000 Manifest next update: Sat 26 Jul 2025 07:57:42 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: JQFRKR+oP34C9lcX8kmvJVwFZZ4WXbM+tifhl2TN6Dk=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Jul 19 07:57:42 2025 GMT Not After : Jul 26 07:57:42 2025 GMT Subject: CN=687b4ff6-ffb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:cc:06:7e:b0:6c:44:b2:f7:4d:15:3b:22: 06:48:56:51:f8:55:58:4c:a8:ef:37:76:bf:12:d8: dc:df:48:3c:47:aa:8a:fe:0b:7e:c3:ba:89:30:2c: 64:22:f1:34:4a:31:3c:d5:1f:1d:40:1f:fb:80:36: c7:23:51:f0:aa:f7:2d:ff:d5:e7:a0:9f:71:34:19: 50:bd:fb:4a:b4:77:ea:e7:66:a7:ed:a3:c0:c1:83: aa:34:db:30:11:72:42:03:02:5a:f0:40:0e:2d:f7: 7c:98:a2:24:7a:6f:cb:3a:98:55:f1:f8:50:22:28: 9c:b6:4f:5b:15:a5:31:71:d5:d5:f4:95:cc:1e:fc: 8b:0b:1c:32:6f:b9:03:1f:68:ef:d0:a7:b4:00:5f: 6a:c0:6e:a7:87:6f:8a:cf:f1:03:7d:6d:a0:0c:ca: 32:d8:fc:3d:84:f2:61:7b:70:06:f8:1c:5b:e8:a7: c9:a9:15:4e:a2:58:e7:9b:d2:1a:a4:35:5a:c0:28: 5c:b8:60:e7:99:97:13:6b:7c:a1:89:17:9b:9d:6f: e0:16:32:30:3a:03:8c:19:78:27:92:ec:23:08:a6: 50:01:bb:dc:ef:dc:3a:9d:1f:3e:dc:13:19:17:2f: af:21:f6:a7:a1:e5:70:a0:7d:48:6d:f3:7c:bf:35: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:E1:9A:DE:54:E6:CA:D4:6E:2E:22:9E:35:5A:4B:61:0B:1B:1B X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:31:3d:8b:be:60:b1:07:db:84:94:c1:2d:24:2b:9e:8c:1d: bb:dc:3c:c9:b4:ab:5f:9f:03:9f:4c:da:69:eb:1c:a9:6c:04: 49:83:13:98:88:f9:74:e5:91:d1:f5:dd:92:d8:74:91:0f:87: 21:35:54:40:59:97:86:30:0a:b7:1d:d1:22:59:d7:15:45:62: 39:16:47:b5:f4:80:45:6c:19:15:2c:24:2d:43:71:3b:2f:45: 5d:a4:f0:99:d3:23:d5:46:4b:ec:13:f7:0e:11:eb:e8:06:91: 44:23:89:3a:48:d9:91:3a:cf:c6:ed:09:99:c4:d8:24:78:2f: 7a:28:4e:82:3c:69:07:89:1e:2b:b5:9d:ce:9a:d7:94:48:a5: 94:fb:f9:46:11:0a:80:b0:12:62:f0:82:ae:15:73:28:8a:3e: 99:ae:78:b3:91:53:65:36:11:70:8d:7e:85:a0:be:07:52:7d: fb:2d:f9:dd:3e:18:b9:60:fe:f6:04:9d:4a:27:ab:05:b4:20: 00:a6:75:66:23:3a:24:4f:02:c7:33:72:f2:60:42:80:f4:79: fb:37:fd:e1:3e:09:fc:06:69:4a:0c:ad:03:e3:ab:84:d2:40: aa:6f:86:88:d1:5b:8d:98:54:3e:5d:8a:f9:58:64:37:a1:b4: 00:f2:1c:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA3MTkwNzU3NDJaFw0yNTA3MjYwNzU3NDJaMBgxFjAUBgNV BAMTDTY4N2I0ZmY2LWZmYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcC8wGfrBsRLL3TRU7IgZIVlH4VVhMqO83dr8S2NzfSDxHqor+C37DuokwLGQi 8TRKMTzVHx1AH/uANscjUfCq9y3/1eegn3E0GVC9+0q0d+rnZqfto8DBg6o02zAR ckIDAlrwQA4t93yYoiR6b8s6mFXx+FAiKJy2T1sVpTFx1dX0lcwe/IsLHDJvuQMf aO/Qp7QAX2rAbqeHb4rP8QN9baAMyjLY/D2E8mF7cAb4HFvop8mpFU6iWOeb0hqk NVrAKFy4YOeZlxNrfKGJF5udb+AWMjA6A4wZeCeS7CMIplABu9zv3DqdHz7cExkX L68h9qeh5XCgfUht83y/NedBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXvHhmt5U 5srUbi4injVaS2ELGxswHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEoxPYu+YLEH24SUwS0kK56MHbvcPMm0q1+fA59M2mnrHKlsBEmDE5iI +XTlkdH13ZLYdJEPhyE1VEBZl4YwCrcd0SJZ1xVFYjkWR7X0gEVsGRUsJC1DcTsv RV2k8JnTI9VGS+wT9w4R6+gGkUQjiTpI2ZE6z8btCZnE2CR4L3ooToI8aQeJHiu1 nc6a15RIpZT7+UYRCoCwEmLwgq4VcyiKPpmueLORU2U2EXCNfoWgvgdSffst+d0+ GLlg/vYEnUonqwW0IACmdWYjOiRPAsczcvJgQoD0efs3/eE+CfwGaUoMrQPjq4TS QKpvhojRW42YVD5divlYZDehtADyHFo= -----END CERTIFICATE-----Generated at Sun Jul 20 16:35:59 2025 by rpki-client