$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: Dq7dusum2r4WAgSmbzuW1++Kx8HJtVIPjGjtVOlyTpQ= Subject key identifier: 43:7E:B6:27:A6:22:EC:8D:F4:D8:2E:66:B8:34:78:C6:3F:61:DA:D7 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 72 Signing time: Sat 19 Jul 2025 07:21:24 +0000 Manifest this update: Sat 19 Jul 2025 07:21:24 +0000 Manifest next update: Sat 26 Jul 2025 07:21:24 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: heYjXPXl5ocSnNFh4eUOuEJns27eMkXgJL4zgepkkxU=) 2: 519D1CA8564011F0A9940527C4F9AE02.roa (hash: 2Xg6JEl78Uj3jqoj0Urk3McIDQ4jcsDQ9onugoqGtpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Jul 19 07:21:24 2025 GMT Not After : Jul 26 07:21:24 2025 GMT Subject: CN=687b4774-834f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:84:36:d8:aa:9b:ef:6d:05:5f:59:d7:dd: ba:db:1b:4a:24:ee:70:c6:d1:57:82:98:67:4c:00: 7a:a3:d5:be:6e:4c:6a:dc:2c:0d:8d:f1:60:96:76: c8:48:d1:da:d0:9b:e7:0b:3e:8f:b9:22:79:ec:b9: 26:fa:fc:c8:b5:4c:d3:93:97:27:26:d4:79:3b:9f: 74:4e:87:72:cc:50:8e:fa:80:d1:36:b3:f1:48:ab: 4b:41:69:67:af:88:6f:3b:81:fd:e3:0f:15:5b:10: 1b:96:7a:15:61:84:99:f4:fe:b0:a5:61:76:d4:4d: b0:00:59:0f:82:9e:7f:5f:bf:6b:11:9b:30:65:8e: 19:a1:64:fa:1e:a4:f6:10:a9:19:c7:1e:55:c3:df: ae:07:97:d5:51:da:a9:de:f3:a3:68:29:27:8a:45: 09:3d:81:b4:f5:1a:2d:ce:2c:18:28:93:3f:e5:52: 94:cf:34:e1:3e:93:4a:10:5f:76:96:2d:ec:26:69: 71:73:f0:d6:a1:d4:74:e0:77:55:50:d5:2e:27:99: e0:c7:e3:b6:4c:87:85:d1:f0:b9:06:45:07:da:f1: 45:2e:04:41:60:2f:5a:ee:22:00:c3:f6:98:4e:84: fb:0d:b2:6e:b2:6d:a2:7d:48:f1:2b:2e:91:64:10: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:B6:27:A6:22:EC:8D:F4:D8:2E:66:B8:34:78:C6:3F:61:DA:D7 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9f:b0:70:fe:8e:09:33:c6:04:59:be:10:2f:a7:a1:7a:59: 1a:02:4d:99:17:cc:93:88:85:96:0c:9a:ac:5d:54:e5:49:e2: 2c:9a:7c:d7:d1:e6:83:ff:75:3b:fe:84:c2:11:6c:4e:c6:23: b8:8c:d4:75:9f:f9:a4:cb:48:86:4a:d7:be:0a:e1:76:08:1d: fe:d7:04:e0:9b:59:bc:ff:0a:39:eb:b6:9d:82:76:26:8b:3e: 75:4c:ca:cf:31:48:81:f5:b3:71:5d:36:5a:76:35:c0:62:22: 53:be:f9:e6:d0:d7:6f:b5:4b:05:d4:c6:93:01:3a:8f:12:72: 79:bc:52:42:5f:39:0c:68:d0:cc:a7:d2:fd:15:5d:82:37:98: c6:99:3c:d8:cd:51:d5:e2:cb:dc:62:30:5f:28:dc:79:fc:c7: 33:0c:10:87:18:c9:87:c2:8c:be:60:36:2d:04:95:b9:e2:9c: eb:3d:07:13:b7:d8:7e:ac:88:03:c5:ce:48:4d:04:0b:10:04: 74:7d:9d:32:7b:b4:46:b1:bc:d7:bb:76:ac:f2:c4:c9:1f:d7: d3:21:8e:ab:2e:3f:ed:fc:cd:94:bd:4b:d6:01:f7:eb:45:4b: 51:a9:b0:65:34:9d:75:de:0c:fa:2e:5d:15:cf:28:25:8e:94: 0b:74:7c:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3RTRDNUY5MEQ5 ODEzODA1ODAeFw0yNTA3MTkwNzIxMjRaFw0yNTA3MjYwNzIxMjRaMBgxFjAUBgNV BAMTDTY4N2I0Nzc0LTgzNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDdYQ22Kqb720FX1nX3brbG0ok7nDG0VeCmGdMAHqj1b5uTGrcLA2N8WCWdshI 0drQm+cLPo+5InnsuSb6/Mi1TNOTlycm1Hk7n3ROh3LMUI76gNE2s/FIq0tBaWev iG87gf3jDxVbEBuWehVhhJn0/rClYXbUTbAAWQ+Cnn9fv2sRmzBljhmhZPoepPYQ qRnHHlXD364Hl9VR2qne86NoKSeKRQk9gbT1Gi3OLBgokz/lUpTPNOE+k0oQX3aW LewmaXFz8Nah1HTgd1VQ1S4nmeDH47ZMh4XR8LkGRQfa8UUuBEFgL1ruIgDD9phO hPsNsm6ybaJ9SPErLpFkEPCnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ362J6Yi 7I302C5muDR4xj9h2tcwHwYDVR0jBBgwFoAUlnuX2eMRJQ2ClC0n5MX5DZgTgFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0I2MjJGQThBRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG51WDJlTVJKUTJDbEMwbjVNWDVEWmdUZ0ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0I2MjJGQThBRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEy Q2xDMG41TVg1RFpnVGdGZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+fsHD+jgkzxgRZvhAvp6F6WRoCTZkXzJOIhZYMmqxdVOVJ4iyafNfR 5oP/dTv+hMIRbE7GI7iM1HWf+aTLSIZK174K4XYIHf7XBOCbWbz/Cjnrtp2CdiaL PnVMys8xSIH1s3FdNlp2NcBiIlO++ebQ12+1SwXUxpMBOo8Scnm8UkJfOQxo0Myn 0v0VXYI3mMaZPNjNUdXiy9xiMF8o3Hn8xzMMEIcYyYfCjL5gNi0ElbninOs9BxO3 2H6siAPFzkhNBAsQBHR9nTJ7tEaxvNe7dqzyxMkf19MhjqsuP+38zZS9S9YB9+tF S1GpsGU0nXXeDPouXRXPKCWOlAt0fDQ= -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:19 2025 by rpki-client