$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: zRAxOEhcYlPhsaZvxvrszb4GJqdfqByV02e07UCxQjA= Subject key identifier: 8D:98:49:ED:6F:7A:C0:82:46:88:71:B0:7E:91:8E:B0:60:BE:95:98 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0C86 Signing time: Tue 16 Sep 2025 18:27:13 +0000 Manifest this update: Tue 16 Sep 2025 18:27:12 +0000 Manifest next update: Tue 23 Sep 2025 18:27:12 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: VlX9QeAOSjvTpE66DAwsAdfUatJWWJV68Cv6pOWpf40=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: dRoQPSF6KT1Zue8dq53bmaroAkFylgM4n0LR39Z/E84=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: 14kB3SfK8FO3TDcXjwd2x1V5vnXFwADnDTKaZlPfI5E=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: /7EkCVyzyWdgaZFFu1ty8sDFh13rW+8i+NvNFe/0Rfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 18:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Sep 16 18:27:12 2025 GMT Not After : Sep 23 18:27:12 2025 GMT Subject: CN=68c9ac00-5e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:6f:80:0f:49:d0:b2:b7:4c:5e:11:95:f2: 17:29:66:0b:51:48:77:e4:2e:3d:96:93:b8:1f:05: 27:f4:11:9f:1f:ea:2c:01:cd:ef:ae:88:43:e8:cf: 78:c3:2a:a9:0c:b5:1b:d9:35:de:5d:20:a1:22:04: 3d:ff:01:ac:c5:7d:89:e5:00:19:56:b2:47:ad:51: 56:dc:5c:7c:8f:5c:d5:96:0f:52:48:7b:f3:5b:c9: fa:12:71:a6:77:9b:af:42:cf:85:8d:6f:81:91:f4: 34:16:57:7e:2c:af:31:70:4f:0e:f5:41:e7:37:ca: e1:e3:3c:d4:f8:f3:be:af:d3:7c:52:01:10:e7:73: 83:b9:f9:06:ef:10:7d:02:9d:28:10:4e:53:8b:6d: 27:d6:52:d2:d2:bd:2c:8f:76:a4:88:99:9a:1b:59: 2b:b7:73:43:61:45:21:9f:08:43:18:2e:3a:08:48: 07:fd:04:49:84:b5:89:4d:ad:d8:27:cb:46:b2:a3: a0:5d:8e:63:32:3e:ed:1e:0e:fd:58:82:4f:4f:73: ac:9c:97:e9:06:1b:4a:24:63:35:30:47:5e:a1:5e: 66:61:31:41:94:c7:8a:f3:da:1b:a1:54:2e:6b:c2: 3c:1e:94:57:64:45:09:be:d7:2b:51:b6:47:9e:b4: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:49:ED:6F:7A:C0:82:46:88:71:B0:7E:91:8E:B0:60:BE:95:98 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:f9:a5:1d:23:59:45:38:b1:d6:00:ec:0e:0f:ea:25:cd: 69:5b:b8:3d:83:b9:68:96:4d:99:6e:43:2f:fa:5f:17:8a:ac: 15:3f:cb:c2:d9:b6:f5:94:c3:66:80:76:1d:4c:92:dd:69:28: 60:59:1a:bc:7a:28:b5:b5:79:e0:e2:cf:fe:3c:d1:ff:ef:e8: 6f:7c:de:f9:11:d5:a3:86:de:fb:63:1f:c6:a6:22:b9:ad:a5: d1:a1:63:d1:e8:08:6f:6c:0e:50:75:0f:a6:0c:ad:ac:5b:62: fc:4f:72:cc:5a:65:36:41:f4:55:2c:81:3d:b0:2a:90:4e:90: 29:58:2f:c1:2c:6c:0e:af:09:a3:5c:63:d9:82:2a:4d:8b:5b: ea:29:a3:71:f0:fa:e3:72:9e:3d:18:81:d0:49:3a:69:81:09: 92:98:1a:fd:d0:79:99:4f:7f:c1:5d:cd:66:e8:42:d0:82:7e: 29:16:c3:46:3a:a4:e6:d6:a8:41:4f:b7:a6:e4:c0:24:6a:a2: 71:57:d0:b1:00:ec:05:cd:0f:b5:7b:ab:0f:6e:70:92:36:b7: 35:6e:20:ec:3e:d8:32:d5:d5:43:3e:9b:5c:d1:f0:0e:9a:c5: 48:59:e0:33:54:53:e0:d4:af:b6:78:d3:4c:a5:31:ce:fb:b2: 91:2b:07:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjUwOTE2MTgyNzEyWhcNMjUwOTIzMTgyNzEyWjAYMRYwFAYD VQQDEw02OGM5YWMwMC01ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZdvgA9J0LK3TF4RlfIXKWYLUUh35C49lpO4HwUn9BGfH+osAc3vrohD6M94 wyqpDLUb2TXeXSChIgQ9/wGsxX2J5QAZVrJHrVFW3Fx8j1zVlg9SSHvzW8n6EnGm d5uvQs+FjW+BkfQ0Fld+LK8xcE8O9UHnN8rh4zzU+PO+r9N8UgEQ53ODufkG7xB9 Ap0oEE5Ti20n1lLS0r0sj3akiJmaG1krt3NDYUUhnwhDGC46CEgH/QRJhLWJTa3Y J8tGsqOgXY5jMj7tHg79WIJPT3OsnJfpBhtKJGM1MEdeoV5mYTFBlMeK89oboVQu a8I8HpRXZEUJvtcrUbZHnrSoUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2YSe1v esCCRohxsH6RjrBgvpWYMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1V/mlHSNZRTix1gDsDg/qJc1pW7g9g7lolk2ZbkMv+l8XiqwVP8vC 2bb1lMNmgHYdTJLdaShgWRq8eii1tXng4s/+PNH/7+hvfN75EdWjht77Yx/GpiK5 raXRoWPR6AhvbA5QdQ+mDK2sW2L8T3LMWmU2QfRVLIE9sCqQTpApWC/BLGwOrwmj XGPZgipNi1vqKaNx8Prjcp49GIHQSTppgQmSmBr90HmZT3/BXc1m6ELQgn4pFsNG OqTm1qhBT7em5MAkaqJxV9CxAOwFzQ+1e6sPbnCSNrc1biDsPtgy1dVDPptc0fAO msVIWeAzVFPg1K+2eNNMpTHO+7KRKwd3 -----END CERTIFICATE-----Generated at Wed Sep 17 19:17:42 2025 by rpki-client