$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: AwTw4tgJM1jM+aCXTcVJJsc/EouVqnEW3er391kaAHg= Subject key identifier: 14:F0:7C:D7:8C:5E:0E:AB:E1:33:36:37:BC:83:D0:36:4C:ED:B5:71 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 079D Signing time: Sat 26 Jul 2025 21:35:51 +0000 Manifest this update: Sat 26 Jul 2025 21:35:50 +0000 Manifest next update: Sat 02 Aug 2025 21:35:50 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: WH94Tx5U7gTRq923456AdLKgBN5tIu++NIT/bVq1D9M=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 21:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Jul 26 21:35:50 2025 GMT Not After : Aug 2 21:35:50 2025 GMT Subject: CN=68854a36-2002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:ed:ee:ea:46:2e:0c:51:82:84:47:9d:ac: 81:1e:6d:5d:ca:b4:c4:82:93:e7:17:f3:d9:cd:8a: 36:18:6e:75:85:73:ef:d8:06:d7:a7:66:b8:74:0b: c5:92:9c:74:7b:49:4a:64:52:ed:97:a3:c2:95:93: 1d:c5:da:36:27:bb:50:a7:23:ba:f3:32:15:d0:73: ac:92:1d:08:bb:da:b4:38:08:da:35:6a:71:38:69: 2a:ff:09:43:16:00:a5:a8:8d:a5:d5:03:6c:59:df: 2d:53:e3:e3:54:66:1e:37:ef:6f:5e:a9:76:98:f8: ea:7e:e0:1d:5f:22:4b:13:21:d7:e2:4b:75:a7:5d: c7:17:dc:74:6b:9a:02:1d:fb:c9:01:43:e1:23:96: ea:d5:c7:48:8a:bd:f3:2a:3b:8d:a9:4c:28:52:47: 8b:17:a6:58:6c:45:b3:b5:81:9d:02:38:b5:a4:3a: e5:27:58:a3:e2:f5:cd:3a:24:05:67:1c:39:0e:ba: 5c:6b:0d:63:a8:36:71:a2:d0:4b:a1:93:ed:c4:55: d5:1d:e6:d9:96:fb:f6:00:23:2b:10:0b:20:be:3d: 34:7d:62:c2:cd:1f:5d:eb:25:37:15:0f:52:b5:34: 8b:13:cc:d3:de:eb:db:22:13:3b:91:30:d5:4b:46: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:7C:D7:8C:5E:0E:AB:E1:33:36:37:BC:83:D0:36:4C:ED:B5:71 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e0:05:ac:3e:46:c2:dc:76:3b:14:38:f4:c8:df:cf:34:c6: 43:53:bf:67:98:50:7e:7c:2f:5a:62:c3:b6:48:02:f7:6e:15: f4:19:1c:52:33:b2:c2:d8:99:0b:56:d8:4a:25:63:16:7f:96: b4:a0:a7:6a:1e:dc:49:4b:62:77:3b:0d:0d:f3:f8:f4:fb:f5: 8d:79:cd:8e:30:cb:b6:20:c5:dc:13:89:77:db:e9:36:07:35: ee:d3:31:0d:81:b0:de:69:66:2c:ae:82:90:82:6e:2b:06:bb: cc:81:b1:f4:7f:1a:47:a9:7f:1b:e3:a0:5f:4b:b5:d5:67:48: 13:f6:ee:ba:5a:29:f7:9c:d3:45:6b:8e:ec:b7:96:91:c2:78: 60:f0:26:39:bc:19:30:e5:bf:6d:7f:a0:2f:fe:45:f4:ab:ee: b4:d6:5b:0a:f0:92:a8:2f:95:03:38:7c:38:92:6f:c3:51:0c: 3e:80:32:3a:77:9a:cf:84:c6:a2:56:d8:c4:60:6c:29:f7:91: 45:aa:79:d2:36:b7:84:5f:34:b0:4f:b9:2b:a7:16:b1:8f:8a: 64:bd:3e:13:3c:ac:c1:8f:02:43:41:d6:3f:64:2f:b5:1e:39: 43:47:b6:18:4e:2e:b7:2d:9f:4e:c3:e9:e2:66:b7:2c:4c:6f: a5:6d:58:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNzI2MjEzNTUwWhcNMjUwODAyMjEzNTUwWjAYMRYwFAYD VQQDEw02ODg1NGEzNi0yMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPrt7upGLgxRgoRHnayBHm1dyrTEgpPnF/PZzYo2GG51hXPv2AbXp2a4dAvF kpx0e0lKZFLtl6PClZMdxdo2J7tQpyO68zIV0HOskh0Iu9q0OAjaNWpxOGkq/wlD FgClqI2l1QNsWd8tU+PjVGYeN+9vXql2mPjqfuAdXyJLEyHX4kt1p13HF9x0a5oC HfvJAUPhI5bq1cdIir3zKjuNqUwoUkeLF6ZYbEWztYGdAji1pDrlJ1ij4vXNOiQF Zxw5Drpcaw1jqDZxotBLoZPtxFXVHebZlvv2ACMrEAsgvj00fWLCzR9d6yU3FQ9S tTSLE8zT3uvbIhM7kTDVS0ZqbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTwfNeM Xg6r4TM2N7yD0DZM7bVxMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW4AWsPkbC3HY7FDj0yN/PNMZDU79nmFB+fC9aYsO2SAL3bhX0GRxS M7LC2JkLVthKJWMWf5a0oKdqHtxJS2J3Ow0N8/j0+/WNec2OMMu2IMXcE4l32+k2 BzXu0zENgbDeaWYsroKQgm4rBrvMgbH0fxpHqX8b46BfS7XVZ0gT9u66Win3nNNF a47st5aRwnhg8CY5vBkw5b9tf6Av/kX0q+601lsK8JKoL5UDOHw4km/DUQw+gDI6 d5rPhMaiVtjEYGwp95FFqnnSNreEXzSwT7krpxaxj4pkvT4TPKzBjwJDQdY/ZC+1 HjlDR7YYTi63LZ9Ow+niZrcsTG+lbViJ -----END CERTIFICATE-----Generated at Sun Jul 27 20:08:10 2025 by rpki-client