$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: 3k+q2jkSO+nq3gtUtXprWn8NuXVBHxEbfYlENgqPKnw= Subject key identifier: 49:EC:EE:E8:2D:B4:F1:76:34:B7:0D:F1:74:E6:B5:97:FF:3D:A6:E2 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 012E Signing time: Sat 19 Jul 2025 04:46:47 +0000 Manifest this update: Sat 19 Jul 2025 04:46:46 +0000 Manifest next update: Sat 26 Jul 2025 04:46:46 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: X6Vt9nQuyRfH9gKNSCTgokqVtgIQMesdjPrL2Bdab3U=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Jul 19 04:46:46 2025 GMT Not After : Jul 26 04:46:46 2025 GMT Subject: CN=687b2336-cc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:07:ce:95:77:d7:48:ae:20:66:a5:02:e9: ec:b1:e7:96:fa:b2:fe:23:85:9f:58:ea:c9:cd:e7: 99:04:d1:a6:a5:8f:07:41:a9:ea:88:30:bd:ea:df: e5:c6:c4:2a:ba:55:af:c2:de:45:69:ea:3f:49:78: 9f:2c:4d:a0:ba:88:a3:36:2c:6b:cb:4b:37:75:ab: cc:61:d0:b2:a5:b1:c9:28:08:a4:9e:aa:09:6b:bc: 9e:1e:b5:1b:be:02:5c:7e:8d:66:fe:4e:ff:63:9b: 2d:16:8e:54:5b:06:c2:18:ea:96:38:1c:4e:d7:af: df:2b:a3:31:d0:ef:9d:49:42:36:5f:4a:b8:65:27: 0e:5e:8c:40:ca:ca:19:00:36:58:4e:a9:cf:59:87: 6c:97:ae:f7:d6:84:d0:2b:18:d6:98:5c:d2:af:a9: 31:5a:18:fb:7d:d5:7f:59:20:e1:d4:b1:3e:96:03: 92:05:ab:57:5a:3b:91:fe:13:25:26:d3:85:0a:da: 96:5d:a5:81:77:58:3a:75:c2:f9:cc:cd:1c:fc:03: 59:4e:a8:b1:5e:5b:1d:11:b1:39:d2:ad:ca:da:99: 87:f9:83:a8:48:9e:74:37:e8:85:20:77:96:bd:96: e5:e8:27:46:a7:00:3a:f6:f9:f0:84:c9:e8:2c:4d: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EC:EE:E8:2D:B4:F1:76:34:B7:0D:F1:74:E6:B5:97:FF:3D:A6:E2 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:7a:79:a5:33:3f:b2:3d:2a:42:79:b0:8b:94:ff:c3:66: 86:7e:4e:34:0a:8e:4f:3a:d1:37:80:eb:85:e4:bd:5b:c8:03: 53:68:15:c4:45:3b:01:ea:65:07:b6:b4:de:62:98:4d:78:81: 82:dc:78:5a:92:5a:fb:08:ac:27:ef:83:f1:4b:bb:d7:86:7d: 1b:aa:58:ab:78:6f:34:65:3a:f7:dd:66:2b:3a:5b:b4:68:f6: 66:53:3a:91:a9:7e:54:90:fb:e3:5f:f7:02:3f:58:3d:33:57: 03:99:8f:55:0d:8f:c5:ff:64:7b:ee:eb:7e:40:12:e3:2b:ae: e9:4b:38:a7:49:be:a4:b4:66:30:29:74:78:b7:14:17:43:ad: 57:bd:ad:62:3b:6e:60:3e:63:b5:f2:6c:48:3f:81:85:83:33: 16:34:13:a5:01:19:e6:72:2c:79:59:94:68:a9:39:2a:1f:be: 82:35:dc:6b:5f:02:18:09:85:a6:d7:b8:07:d7:57:20:11:67: 63:4f:de:9a:3c:ab:d4:c2:a9:0a:a7:17:8d:7e:fe:40:6e:46: 0f:67:ea:16:49:a0:f3:75:d2:7e:f9:b5:61:60:1f:8c:31:9d: 41:9f:aa:24:55:65:fc:c9:91:b0:2a:86:9d:ee:71:d4:ac:5f: 0a:d9:49:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwNzE5MDQ0NjQ2WhcNMjUwNzI2MDQ0NjQ2WjAYMRYwFAYD VQQDEw02ODdiMjMzNi1jYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp4HzpV310iuIGalAunsseeW+rL+I4WfWOrJzeeZBNGmpY8HQanqiDC96t/l xsQqulWvwt5Faeo/SXifLE2guoijNixry0s3davMYdCypbHJKAiknqoJa7yeHrUb vgJcfo1m/k7/Y5stFo5UWwbCGOqWOBxO16/fK6Mx0O+dSUI2X0q4ZScOXoxAysoZ ADZYTqnPWYdsl6731oTQKxjWmFzSr6kxWhj7fdV/WSDh1LE+lgOSBatXWjuR/hMl JtOFCtqWXaWBd1g6dcL5zM0c/ANZTqixXlsdEbE50q3K2pmH+YOoSJ50N+iFIHeW vZbl6CdGpwA69vnwhMnoLE3o+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEns7ugt tPF2NLcN8XTmtZf/PabiMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIEnp5pTM/sj0qQnmwi5T/w2aGfk40Co5POtE3gOuF5L1byANTaBXE RTsB6mUHtrTeYphNeIGC3Hhaklr7CKwn74PxS7vXhn0bqlireG80ZTr33WYrOlu0 aPZmUzqRqX5UkPvjX/cCP1g9M1cDmY9VDY/F/2R77ut+QBLjK67pSzinSb6ktGYw KXR4txQXQ61Xva1iO25gPmO18mxIP4GFgzMWNBOlARnmcix5WZRoqTkqH76CNdxr XwIYCYWm17gH11cgEWdjT96aPKvUwqkKpxeNfv5AbkYPZ+oWSaDzddJ++bVhYB+M MZ1Bn6okVWX8yZGwKoad7nHUrF8K2UmJ -----END CERTIFICATE-----Generated at Sun Jul 20 12:21:24 2025 by rpki-client