$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: bFIwDEGMlO/AN04819OXADYpm2R4qNVtGtrN5QSRqfM= Subject key identifier: CC:E7:88:EA:7B:58:E0:DD:76:22:12:92:0D:E9:79:82:CA:60:41:A6 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0828 Signing time: Fri 18 Jul 2025 21:01:32 +0000 Manifest this update: Fri 18 Jul 2025 21:01:32 +0000 Manifest next update: Fri 25 Jul 2025 21:01:32 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: 00Jgk00hWdyZemuHnXfFEM+7C9LHSleKyAjZj2MGo1A=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Jul 18 21:01:32 2025 GMT Not After : Jul 25 21:01:32 2025 GMT Subject: CN=687ab62c-5ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:78:99:21:1c:f6:55:74:6f:63:af:ec:50: ac:e3:9c:fa:6d:6f:20:49:58:be:9f:a2:21:2f:8d: a1:f8:e1:0c:98:55:1b:a5:cd:7e:51:44:4b:78:7a: a1:e4:09:5e:b8:d2:91:a8:b8:99:b3:ed:57:ff:2a: 1d:ae:b2:03:dc:a5:a1:9b:b6:66:16:fb:53:77:13: ff:eb:86:1a:55:2a:80:2a:d5:47:33:d7:d9:c4:6c: 3c:fe:6c:fe:a9:b8:f4:15:96:d8:93:ee:c3:f4:c8: d9:08:56:db:9d:b8:c3:84:3b:7f:7d:05:13:d4:1f: b9:85:76:5a:e9:6c:07:0b:ec:cc:12:45:25:84:08: 3e:6d:0e:2e:f8:1b:f8:bb:46:76:51:b3:de:c9:f9: 03:9a:fd:50:e5:4b:48:e2:93:f3:5d:e1:ce:0a:a4: 6b:de:bb:78:52:89:e9:13:27:64:66:e0:f8:7e:99: 04:d3:a2:c9:06:a8:81:9b:2e:bf:45:03:23:f1:d6: cc:d7:9d:a7:76:53:62:c8:1e:46:1c:87:a1:7a:85: 95:a8:93:10:82:4b:ad:eb:0c:e3:de:24:ad:df:e7: 50:bd:60:e2:d0:1d:76:b6:94:bb:d8:f2:c6:42:76: ff:91:55:6d:17:43:55:c9:90:5f:a9:0a:88:0f:f5: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E7:88:EA:7B:58:E0:DD:76:22:12:92:0D:E9:79:82:CA:60:41:A6 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5a:a1:eb:ad:07:b0:7d:4a:7d:ab:13:5b:16:75:91:8a:6e: fa:93:dd:c6:4b:59:ac:94:c4:15:a7:c1:6b:34:bf:e6:cf:80: 80:48:c1:4b:3a:5d:68:2e:9b:d7:94:31:e9:83:70:ce:80:57: 91:af:55:7c:ed:b5:e3:ae:bb:8b:de:03:bd:46:bc:74:ae:b7: dd:b9:7d:0e:47:da:b6:6a:a9:3e:49:99:3b:cb:00:17:9d:e8: a7:40:3d:e7:ae:9d:3a:c8:4c:db:8a:4e:11:f5:d0:1d:d4:76: c5:57:6d:e5:90:be:99:9e:fc:18:85:df:70:bb:a9:c7:8b:9c: 0f:b9:90:f2:58:9d:37:92:d3:07:20:76:15:09:24:ad:c5:df: 26:4d:38:b3:90:df:c9:60:79:df:8c:be:04:16:70:d6:7d:67: c4:3d:a8:4d:f1:1f:f5:e9:f4:9b:5f:56:58:71:2d:9f:bd:b5: 5c:dc:a8:c4:14:92:b5:00:dd:91:e2:53:c7:42:81:e3:01:75: 9c:2d:2b:ed:65:90:be:ea:8b:90:03:f2:58:0f:23:d8:a4:85: 01:fc:c8:1c:72:a5:53:f2:ce:14:8a:3d:b8:84:c6:a0:d2:22: 39:ca:1e:8e:f6:e2:df:96:41:4c:06:9e:5d:7b:fe:93:82:70: d5:64:e3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNzE4MjEwMTMyWhcNMjUwNzI1MjEwMTMyWjAYMRYwFAYD VQQDEw02ODdhYjYyYy01ZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf54mSEc9lV0b2Ov7FCs45z6bW8gSVi+n6IhL42h+OEMmFUbpc1+UURLeHqh 5AleuNKRqLiZs+1X/yodrrID3KWhm7ZmFvtTdxP/64YaVSqAKtVHM9fZxGw8/mz+ qbj0FZbYk+7D9MjZCFbbnbjDhDt/fQUT1B+5hXZa6WwHC+zMEkUlhAg+bQ4u+Bv4 u0Z2UbPeyfkDmv1Q5UtI4pPzXeHOCqRr3rt4UonpEydkZuD4fpkE06LJBqiBmy6/ RQMj8dbM152ndlNiyB5GHIeheoWVqJMQgkut6wzj3iSt3+dQvWDi0B12tpS72PLG Qnb/kVVtF0NVyZBfqQqID/XNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzniOp7 WODddiISkg3peYLKYEGmMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9WqHrrQewfUp9qxNbFnWRim76k93GS1mslMQVp8FrNL/mz4CASMFL Ol1oLpvXlDHpg3DOgFeRr1V87bXjrruL3gO9Rrx0rrfduX0OR9q2aqk+SZk7ywAX neinQD3nrp06yEzbik4R9dAd1HbFV23lkL6ZnvwYhd9wu6nHi5wPuZDyWJ03ktMH IHYVCSStxd8mTTizkN/JYHnfjL4EFnDWfWfEPahN8R/16fSbX1ZYcS2fvbVc3KjE FJK1AN2R4lPHQoHjAXWcLSvtZZC+6ouQA/JYDyPYpIUB/MgccqVT8s4Uij24hMag 0iI5yh6O9uLflkFMBp5de/6TgnDVZOMn -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:29 2025 by rpki-client