$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: 0aDZiHP7Xvf/yFviX9iTKDpZ5GtKuuH3yIyY3VX6bYQ= Subject key identifier: DE:78:8D:74:51:57:47:FB:E4:F2:4F:C0:CA:B1:75:B5:0E:E4:D5:A8 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 08F1 Signing time: Sun 20 Jul 2025 20:30:16 +0000 Manifest this update: Sun 20 Jul 2025 20:30:16 +0000 Manifest next update: Sun 27 Jul 2025 20:30:16 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: 9Sh4JssRXt7vrd1qCxqaz/YOIiVmSpGRRInfPtpRRSw=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: CznDNzibfuN72mTm1dEEU/9+8bTnV0dxmZQmYKqdCoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: Jul 20 20:30:16 2025 GMT Not After : Jul 27 20:30:16 2025 GMT Subject: CN=687d51d8-32df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:74:fb:a7:16:4e:f9:10:49:2f:ad:66:83: 75:ff:ef:4e:e9:63:bd:46:f1:92:7e:59:ea:ee:ee: be:6a:b2:57:f1:b1:3b:1e:02:45:4b:be:d5:7c:dc: f2:5d:fa:38:56:86:be:16:76:22:6a:51:1c:67:f4: 6a:70:91:36:2b:63:f5:ec:6b:16:c9:d8:38:dc:2d: 2f:9f:b2:e3:51:42:6c:2e:65:a7:a5:79:a4:a4:e0: 5b:18:17:90:39:18:9c:98:79:52:c4:43:4b:3c:f7: bb:44:db:9f:2d:fa:b2:ab:4f:7d:31:8b:68:a7:43: 96:14:a4:00:de:44:5f:51:12:c5:4b:4f:44:f5:63: 5c:59:1e:33:dd:2a:9e:11:28:b9:8d:77:f9:f9:74: 81:57:cb:9e:6c:92:8c:93:92:5a:53:af:9d:c5:25: 7c:50:35:80:2d:29:cd:44:6d:d6:f0:c0:f5:70:ef: 83:5f:31:ff:85:b4:54:83:04:ea:52:ef:8a:23:8e: 7b:60:18:b9:0a:d3:fd:37:3a:55:41:60:9c:43:3d: 59:cc:44:d6:11:6b:21:0c:db:cf:d7:19:f0:00:3a: 9d:50:8a:26:72:9b:b1:7f:95:9f:91:7b:d8:d7:68: 39:1b:6d:c7:88:03:c2:79:94:72:ec:d9:62:c2:4d: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:8D:74:51:57:47:FB:E4:F2:4F:C0:CA:B1:75:B5:0E:E4:D5:A8 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0f:ad:b4:ce:4b:28:e9:57:c2:06:b3:46:5b:a7:d0:73:df: 35:c2:37:79:9f:72:00:13:fc:9f:8e:a5:a7:fb:0c:34:48:5d: 3b:7a:3e:60:c2:9c:87:83:dd:3e:74:bd:2e:06:f8:87:4d:20: ce:58:6f:b6:21:dc:83:76:c0:72:2b:42:af:df:fc:1f:f8:93: 02:a9:6f:70:f9:33:05:df:dc:f2:f7:d5:5d:88:ec:67:d9:05: a0:cb:20:75:83:dd:47:e5:1c:aa:c7:d6:54:78:62:94:70:ee: 8a:4a:15:dc:bf:b9:c8:e4:76:27:d9:ed:41:bd:6c:7f:39:04: aa:ea:01:b7:21:c0:db:64:a8:f5:28:cc:15:cb:22:6c:de:cf: 0f:80:59:74:eb:d0:21:2f:be:54:a5:a6:0d:af:6f:0f:6d:68: a0:6a:5b:4b:d3:3c:b1:81:5c:b6:fd:f8:35:bf:ef:cc:9a:5e: 47:9f:0f:f3:5e:b9:dc:52:8c:8a:42:82:a6:80:ce:02:88:bd: a2:2a:56:15:f3:c5:cb:d2:84:02:b4:07:d1:c2:ac:07:de:e1: 3a:dc:0f:40:29:74:6e:ba:8e:34:bb:d9:e6:1c:d2:25:40:52: fe:1a:f7:81:8e:e7:c5:28:5b:4d:fa:9a:7a:24:3a:ea:8c:35: 31:51:53:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwNzIwMjAzMDE2WhcNMjUwNzI3MjAzMDE2WjAYMRYwFAYD VQQDEw02ODdkNTFkOC0zMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzR0+6cWTvkQSS+tZoN1/+9O6WO9RvGSflnq7u6+arJX8bE7HgJFS77VfNzy Xfo4Voa+FnYialEcZ/RqcJE2K2P17GsWydg43C0vn7LjUUJsLmWnpXmkpOBbGBeQ ORicmHlSxENLPPe7RNufLfqyq099MYtop0OWFKQA3kRfURLFS09E9WNcWR4z3Sqe ESi5jXf5+XSBV8uebJKMk5JaU6+dxSV8UDWALSnNRG3W8MD1cO+DXzH/hbRUgwTq Uu+KI457YBi5CtP9NzpVQWCcQz1ZzETWEWshDNvP1xnwADqdUIomcpuxf5WfkXvY 12g5G23HiAPCeZRy7Nliwk019QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN54jXRR V0f75PJPwMqxdbUO5NWoMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdD620zkso6VfCBrNGW6fQc981wjd5n3IAE/yfjqWn+ww0SF07ej5g wpyHg90+dL0uBviHTSDOWG+2IdyDdsByK0Kv3/wf+JMCqW9w+TMF39zy99VdiOxn 2QWgyyB1g91H5Ryqx9ZUeGKUcO6KShXcv7nI5HYn2e1BvWx/OQSq6gG3IcDbZKj1 KMwVyyJs3s8PgFl069AhL75UpaYNr28PbWigaltL0zyxgVy2/fg1v+/Mml5Hnw/z XrncUoyKQoKmgM4CiL2iKlYV88XL0oQCtAfRwqwH3uE63A9AKXRuuo40u9nmHNIl QFL+GveBjufFKFtN+pp6JDrqjDUxUVNG -----END CERTIFICATE-----Generated at Tue Jul 22 05:01:15 2025 by rpki-client