$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json) Hash identifier: OfKrk1V2fsOsOy60IIJqaXW1cFuJRcY6KR3HU6xArEE= Subject key identifier: AC:83:2C:40:9C:63:4A:23:54:C5:B8:15:44:9D:E3:BA:F8:74:DF:EC Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft Manifest number: 2A Signing time: Sat 19 Jul 2025 08:03:19 +0000 Manifest this update: Sat 19 Jul 2025 08:03:18 +0000 Manifest next update: Sat 26 Jul 2025 08:03:18 +0000 Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: TfudXR+nkPqAZwkd3efNhnYYoTEpvjifkMRgM23OeTM=) 2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: boAAaQY0nzMtC8MdALGWU7uiMFPgsCoPJLOiVmNOgmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Validity Not Before: Jul 19 08:03:18 2025 GMT Not After : Jul 26 08:03:18 2025 GMT Subject: CN=687b5147-4210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:f9:10:72:cb:40:75:28:75:d6:20:4e:3a: 82:bd:30:f7:b3:36:57:80:c0:e9:d3:e4:bc:f4:81: 7b:af:b1:d3:2e:6c:90:76:49:66:9b:21:93:58:57: 37:56:69:e2:5f:0a:7f:a4:eb:52:d9:fd:88:7b:c6: 51:dd:03:b9:e8:b6:de:8e:49:62:49:7b:a7:88:3b: 88:d9:32:27:76:05:1e:1d:54:52:9e:f2:d5:2e:39: b2:31:03:76:af:ce:d2:07:a2:b0:6a:bc:64:07:61: b5:2e:24:22:d9:b8:05:b0:58:3d:04:c8:77:f4:0f: 7e:74:69:a8:f9:76:e3:90:00:e1:36:a1:eb:c6:d6: 88:80:df:9d:24:c5:4e:d0:11:08:92:d5:48:a9:0f: 1e:42:46:2c:df:f2:86:bf:75:4b:b9:61:8b:f8:fd: 48:53:65:f4:9f:70:53:95:cc:97:db:31:17:6a:87: 54:72:d5:b6:38:ce:c2:28:f1:fd:91:73:0d:ae:c4: b1:3e:bf:90:2b:25:43:e9:62:c9:d9:74:f2:6b:fe: f8:2c:6f:84:f9:3e:cd:c3:6d:19:41:c7:d9:1c:a3: c6:78:54:59:08:49:8c:dc:cd:49:05:6e:50:46:91: fd:d2:b7:ff:16:7b:14:be:18:0a:f2:72:e7:a4:92: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:83:2C:40:9C:63:4A:23:54:C5:B8:15:44:9D:E3:BA:F8:74:DF:EC X509v3 Authority Key Identifier: keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ad:e5:aa:e7:4e:ad:5f:12:8a:a5:30:e5:95:78:a6:62:dc: de:41:04:6b:00:90:de:c7:93:0e:91:78:7c:33:f9:0b:3b:50: 0f:52:ce:95:14:3f:b2:02:53:06:d6:09:51:21:4a:e8:9c:06: cd:f1:5b:7e:47:dd:e7:a4:2b:d4:f4:f1:79:40:3f:96:84:5b: da:65:f1:08:4a:49:a5:00:42:55:de:8f:ec:f4:89:00:bf:f6: 3e:bb:7c:99:bd:85:e4:82:de:81:86:21:06:20:56:6c:04:75: 3e:3b:86:fc:55:b6:73:8e:81:92:c1:90:e5:f1:95:21:c3:41: 12:93:33:aa:e6:1c:ed:64:11:c9:e3:12:f9:65:15:c2:61:8e: 31:0c:35:1f:86:81:49:b3:aa:22:bc:3a:81:08:a7:13:1e:26: b1:70:29:47:44:f6:cb:59:dd:b2:87:a3:ed:f6:fa:91:75:58: ff:62:4c:12:4c:dd:0d:ab:24:84:2f:83:c2:60:c1:3d:6f:de: 45:db:72:9f:be:90:e3:80:fa:ba:c6:7d:76:bf:66:b9:0d:a1: 4f:a9:2e:86:c0:7b:ab:af:36:20:1a:06:95:fa:62:1e:bc:a1: 56:43:5a:6e:0c:5e:77:78:c9:6e:ec:d6:11:4c:9d:d6:03:f4: c1:03:95:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkZEOTExMC8GA1UEBRMoOTcyQjkwRDlDNTE5MjI1NkFEOTY0NzVCMzkyQkFCMUE3 QTc5Q0MyRDAeFw0yNTA3MTkwODAzMThaFw0yNTA3MjYwODAzMThaMBgxFjAUBgNV BAMTDTY4N2I1MTQ3LTQyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgJ/kQcstAdSh11iBOOoK9MPezNleAwOnT5Lz0gXuvsdMubJB2SWabIZNYVzdW aeJfCn+k61LZ/Yh7xlHdA7nott6OSWJJe6eIO4jZMid2BR4dVFKe8tUuObIxA3av ztIHorBqvGQHYbUuJCLZuAWwWD0EyHf0D350aaj5duOQAOE2oevG1oiA350kxU7Q EQiS1UipDx5CRizf8oa/dUu5YYv4/UhTZfSfcFOVzJfbMRdqh1Ry1bY4zsIo8f2R cw2uxLE+v5ArJUPpYsnZdPJr/vgsb4T5Ps3DbRlBx9kco8Z4VFkISYzczUkFblBG kf3St/8WexS+GArycuekki4TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrIMsQJxj SiNUxbgVRJ3juvh03+wwHwYDVR0jBBgwFoAUlyuQ2cUZIlatlkdbOSurGnp5zC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyRkQ5LzdGOUE3MDM0MkJC NTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHl1UTJjVVpJbGF0bGtkYk9TdXJHbnA1ekMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy RkQ5LzdGOUE3MDM0MkJCNTExRjA5REU1QkE0RUM0RjlBRTAyL2x5dVEyY1VaSWxh dGxrZGJPU3VyR25wNXpDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWt5arnTq1fEoqlMOWVeKZi3N5BBGsAkN7Hkw6ReHwz+Qs7UA9SzpUU P7ICUwbWCVEhSuicBs3xW35H3eekK9T08XlAP5aEW9pl8QhKSaUAQlXej+z0iQC/ 9j67fJm9heSC3oGGIQYgVmwEdT47hvxVtnOOgZLBkOXxlSHDQRKTM6rmHO1kEcnj EvllFcJhjjEMNR+GgUmzqiK8OoEIpxMeJrFwKUdE9stZ3bKHo+32+pF1WP9iTBJM 3Q2rJIQvg8JgwT1v3kXbcp++kOOA+rrGfXa/ZrkNoU+pLobAe6uvNiAaBpX6Yh68 oVZDWm4MXnd4yW7s1hFMndYD9MEDlYk= -----END CERTIFICATE-----Generated at Sun Jul 20 06:12:33 2025 by rpki-client