$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: SwHHL42MqOzBh87r/DXpuPrZx+vZ2XJFtYhXq7IXycA= Subject key identifier: 26:D8:C9:A0:6C:80:DC:C9:B1:7C:A3:40:34:C8:BF:C4:89:10:37:1A Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 061A Signing time: Tue 22 Jul 2025 23:10:18 +0000 Manifest this update: Tue 22 Jul 2025 23:10:18 +0000 Manifest next update: Tue 29 Jul 2025 23:10:17 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: TrgkcsL1xRsR+zkcGQcwHhyHU5BQ7V3HhLNhz4J5d6w=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: OFrwiJWAkGGk5FsDremtK39rCrSaFqlUshUtXmOJ9aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Jul 22 23:10:18 2025 GMT Not After : Jul 29 23:10:17 2025 GMT Subject: CN=68801a5a-a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:20:be:ab:8a:85:0c:cf:1f:17:71:e5:a6: be:ac:cd:72:49:97:98:dd:9e:06:67:06:83:e1:93: d4:8b:8c:12:04:19:77:33:f7:c2:d9:1f:fe:ad:b3: 91:e1:59:16:d6:40:f9:53:84:44:b2:fa:57:41:7c: 36:b3:9d:8b:9e:8c:04:d3:4d:79:2f:5e:22:84:86: 77:08:f3:31:4c:0d:18:3e:dd:1b:e7:08:9a:8b:1c: bb:52:6a:49:08:75:87:bb:7f:1c:2b:54:b9:63:0c: bd:c0:72:c1:06:ce:4b:78:95:a0:7e:65:e8:ee:b5: 60:2a:a3:e8:bf:0d:38:13:a3:f6:c3:a0:e0:e3:3b: 02:57:90:82:01:ec:cf:cd:98:9f:24:8e:4e:f7:92: c1:65:3b:b1:a6:89:aa:a2:a7:f3:03:14:0d:c9:5b: 1b:74:92:c8:84:3b:81:b1:50:8e:a0:bd:77:ae:40: 0f:f0:27:16:06:b7:14:e9:44:8b:0d:e4:34:a0:37: ff:b9:27:e7:91:93:2d:e7:5c:50:54:79:ea:ad:80: 58:ad:93:8d:d9:97:5e:27:b3:52:9d:17:bd:a5:02: 73:ef:2d:4c:ec:45:fc:6f:7a:83:05:26:fe:fc:9c: e3:13:c3:c9:d2:d1:d4:a0:4b:59:bc:ae:93:ba:30: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:C9:A0:6C:80:DC:C9:B1:7C:A3:40:34:C8:BF:C4:89:10:37:1A X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c4:04:53:0b:ef:17:6f:8a:ba:0c:35:70:61:69:d2:ba:27: ba:8c:24:85:65:2f:4c:fa:6f:03:83:ba:cf:8a:49:bd:e4:dd: a8:c2:39:d8:47:1f:dc:d3:1e:a6:97:fd:4a:6f:0a:93:a4:8a: 01:9b:59:d6:ae:7e:09:b5:63:f0:9f:2a:2d:d4:c9:0d:7b:46: b9:2a:4a:77:bd:1d:fc:83:48:38:22:96:67:d9:dd:74:f6:3d: 53:42:b8:3e:b7:8d:97:6f:95:e4:65:fc:53:ee:4a:06:3a:35: b9:d7:e8:aa:78:c7:a1:ce:34:00:4b:57:be:f4:9d:d4:87:a9: 85:4e:3e:86:4e:15:59:d4:fe:a4:74:8b:13:ab:39:18:91:a3: c0:26:29:6a:00:4c:83:10:6c:07:dc:f9:fc:42:92:0a:89:5a: 5d:71:34:e8:63:b2:c6:5f:6c:72:29:93:58:f7:b6:e1:44:e9: da:1c:da:27:f9:54:e3:5f:39:b9:40:29:7c:31:f2:2e:3b:54: c3:39:ca:90:fd:64:94:c4:6d:b3:2a:8d:a3:07:ee:5e:8f:2e: 27:f1:29:5f:a8:d6:4a:6b:e2:92:b4:c9:bc:8b:09:f5:d3:8d: c9:3c:48:ed:d7:24:16:20:57:7a:b5:39:a3:6e:07:fd:cc:8c: 1f:83:19:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwNzIyMjMxMDE4WhcNMjUwNzI5MjMxMDE3WjAYMRYwFAYD VQQDEw02ODgwMWE1YS1hOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+4gvquKhQzPHxdx5aa+rM1ySZeY3Z4GZwaD4ZPUi4wSBBl3M/fC2R/+rbOR 4VkW1kD5U4REsvpXQXw2s52LnowE0015L14ihIZ3CPMxTA0YPt0b5wiaixy7UmpJ CHWHu38cK1S5Ywy9wHLBBs5LeJWgfmXo7rVgKqPovw04E6P2w6Dg4zsCV5CCAezP zZifJI5O95LBZTuxpomqoqfzAxQNyVsbdJLIhDuBsVCOoL13rkAP8CcWBrcU6USL DeQ0oDf/uSfnkZMt51xQVHnqrYBYrZON2ZdeJ7NSnRe9pQJz7y1M7EX8b3qDBSb+ /JzjE8PJ0tHUoEtZvK6TujAonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbYyaBs gNzJsXyjQDTIv8SJEDcaMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNxARTC+8Xb4q6DDVwYWnSuie6jCSFZS9M+m8Dg7rPikm95N2owjnY Rx/c0x6ml/1KbwqTpIoBm1nWrn4JtWPwnyot1MkNe0a5Kkp3vR38g0g4IpZn2d10 9j1TQrg+t42Xb5XkZfxT7koGOjW51+iqeMehzjQAS1e+9J3Uh6mFTj6GThVZ1P6k dIsTqzkYkaPAJilqAEyDEGwH3Pn8QpIKiVpdcTToY7LGX2xyKZNY97bhROnaHNon +VTjXzm5QCl8MfIuO1TDOcqQ/WSUxG2zKo2jB+5ejy4n8SlfqNZKa+KStMm8iwn1 043JPEjt1yQWIFd6tTmjbgf9zIwfgxm8 -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:25 2025 by rpki-client