$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: 0wDDztkH6NV0TCTenOd8Mf/LZOOXFUw0GPplwt2QOcs= Subject key identifier: 2D:A9:13:B4:44:31:97:2E:D3:08:39:9C:8A:55:A1:30:7B:41:CE:AE Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 06B4 Signing time: Tue 22 Jul 2025 23:48:38 +0000 Manifest this update: Tue 22 Jul 2025 23:48:37 +0000 Manifest next update: Tue 29 Jul 2025 23:48:37 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 4/QM8Q6/DI0ILIUwzr4KDACIx/X13dCVksD/LlElrEE=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: zmENuILHmN18AUGwPcqkBbA0GZjdGWwt2+ySfMUc/Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Jul 22 23:48:37 2025 GMT Not After : Jul 29 23:48:37 2025 GMT Subject: CN=68802355-d3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:dd:a8:9c:be:25:4e:f5:92:c9:8d:11:fa: 03:3f:35:9b:6d:5b:e2:0a:83:9a:0d:9b:f4:f7:7f: 5c:7b:84:0c:d5:c0:ec:b9:56:b1:06:6f:86:22:3b: 8f:9a:0b:37:bc:ed:8e:95:0a:44:7d:21:9b:49:3e: a9:c2:6a:94:e9:29:89:1e:e1:e2:db:bb:cf:0e:9f: 70:f3:d1:f7:bd:39:1e:da:3f:65:ef:4e:c0:28:b5: 51:f0:55:6d:b3:f6:fc:5f:fc:a2:50:15:36:a8:28: 48:0f:a9:d7:2a:4c:09:1e:51:a9:12:c8:5c:10:27: b6:76:e3:b5:86:a9:2a:b1:ea:66:8f:8a:a8:c7:50: df:6c:f9:60:c2:78:41:db:f3:e5:73:5e:69:56:05: 62:42:e4:7c:dc:6c:12:bd:ca:ec:ef:fe:9c:fe:db: 71:5d:9e:1d:74:5e:24:00:7e:d3:06:36:63:a6:8e: c7:00:ff:07:45:75:93:7a:e1:9e:d5:88:9a:0c:94: 08:3d:16:e7:e9:7e:21:81:3d:24:54:68:18:2b:83: 80:2f:41:62:f9:85:9b:38:c3:bd:93:9a:aa:5f:2f: 6d:13:3f:6b:09:d4:13:7c:03:0d:01:b6:9e:c2:17: 37:c6:58:cf:b6:c8:54:86:87:4b:5c:a1:8d:1d:19: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:13:B4:44:31:97:2E:D3:08:39:9C:8A:55:A1:30:7B:41:CE:AE X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c6:b1:cf:c0:39:7c:6b:0a:81:67:69:3e:cb:22:fb:47:a5: b1:90:36:0a:83:2c:b9:b7:69:0a:82:3a:96:89:03:49:e1:0a: 80:a5:46:08:9a:f1:c7:53:b0:06:e2:45:dc:22:87:8b:45:b5: 60:07:13:ba:28:83:81:d8:10:fd:c9:37:fa:b2:34:7f:a4:df: 53:e9:75:0d:01:fb:26:08:51:f7:64:d9:4b:2b:4b:96:af:b6: 5b:96:3f:a2:e4:60:28:51:b0:32:c0:70:c0:e1:2b:78:14:7b: 0d:89:04:66:75:e9:65:6b:bf:ab:d4:4d:f3:04:93:06:75:69: df:5e:10:ae:27:d0:64:e1:5e:11:82:18:02:06:05:ca:23:a7: da:c8:21:0d:c9:79:2c:b6:68:e9:e4:08:fb:bd:c6:88:48:79: 40:3a:9e:02:85:4c:91:ba:61:c6:82:56:2f:0c:5f:64:57:43: 8b:70:c3:55:ce:c1:ce:c5:49:82:f2:c7:86:04:c4:95:f6:96: 5d:26:84:99:1e:e3:70:92:e9:a7:56:3d:eb:81:0f:94:e3:92: 5a:61:fd:47:4c:19:d8:5d:a0:54:46:51:c1:50:e1:43:cd:73: e9:d8:96:36:39:a2:f4:29:b8:31:b5:51:29:5f:62:55:8a:35: 75:63:46:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUwNzIyMjM0ODM3WhcNMjUwNzI5MjM0ODM3WjAYMRYwFAYD VQQDEw02ODgwMjM1NS1kM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy37dqJy+JU71ksmNEfoDPzWbbVviCoOaDZv0939ce4QM1cDsuVaxBm+GIjuP mgs3vO2OlQpEfSGbST6pwmqU6SmJHuHi27vPDp9w89H3vTke2j9l707AKLVR8FVt s/b8X/yiUBU2qChID6nXKkwJHlGpEshcECe2duO1hqkqsepmj4qox1DfbPlgwnhB 2/Plc15pVgViQuR83GwSvcrs7/6c/ttxXZ4ddF4kAH7TBjZjpo7HAP8HRXWTeuGe 1YiaDJQIPRbn6X4hgT0kVGgYK4OAL0Fi+YWbOMO9k5qqXy9tEz9rCdQTfAMNAbae whc3xljPtshUhodLXKGNHRlZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2pE7RE MZcu0wg5nIpVoTB7Qc6uMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATxrHPwDl8awqBZ2k+yyL7R6WxkDYKgyy5t2kKgjqWiQNJ4QqApUYI mvHHU7AG4kXcIoeLRbVgBxO6KIOB2BD9yTf6sjR/pN9T6XUNAfsmCFH3ZNlLK0uW r7Zblj+i5GAoUbAywHDA4St4FHsNiQRmdella7+r1E3zBJMGdWnfXhCuJ9Bk4V4R ghgCBgXKI6fayCENyXkstmjp5Aj7vcaISHlAOp4ChUyRumHGglYvDF9kV0OLcMNV zsHOxUmC8seGBMSV9pZdJoSZHuNwkumnVj3rgQ+U45JaYf1HTBnYXaBURlHBUOFD zXPp2JY2OaL0KbgxtVEpX2JVijV1Y0bx -----END CERTIFICATE-----Generated at Wed Jul 23 12:51:48 2025 by rpki-client