$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: TkongzLE2+wQr7MKT2RVYg5qVYoSGEQQsDsno3BMJFA= Subject key identifier: 6B:0F:81:5B:E4:52:F4:83:6D:9B:E3:80:A0:59:43:DB:74:A9:15:C9 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B49 Signing time: Fri 18 Jul 2025 19:24:31 +0000 Manifest this update: Fri 18 Jul 2025 19:24:31 +0000 Manifest next update: Fri 25 Jul 2025 19:24:31 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: gqx8ZGcWieTifUI4k1ZPzI5z1Musu1XajN/m7bu3hgo=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Jul 18 19:24:31 2025 GMT Not After : Jul 25 19:24:31 2025 GMT Subject: CN=687a9f6f-5308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:1e:ff:dc:81:7a:96:6e:52:ae:a9:9d:ff: 50:df:ac:c8:f3:51:41:18:bf:23:09:c8:0d:97:f2: e3:ae:3b:54:43:b4:f3:af:0b:66:13:da:9f:b1:94: 9e:ba:45:40:40:d3:c3:2e:f9:d5:15:b0:18:3d:16: 01:be:3c:2a:c7:f3:ef:d1:32:44:5c:6e:70:2c:b2: e4:47:6c:eb:77:4c:87:ac:b5:4c:44:29:28:d0:d9: f9:aa:0c:27:0b:88:ea:73:b6:4d:02:f0:aa:dd:8b: 37:01:ee:1f:60:e0:46:a1:e7:bc:94:eb:e2:d2:90: 5c:39:ac:ac:33:ff:21:31:a8:47:6c:c4:40:a9:49: 62:1b:4a:f8:8d:4c:dc:20:dd:29:a2:a2:8e:94:1b: 7f:a0:49:8c:fe:13:0a:00:f0:b2:3c:48:14:e8:b5: 0c:05:8f:72:d2:cc:2f:c5:28:17:00:d7:08:1f:c1: e9:a4:71:3e:77:c4:32:23:80:fa:5f:3d:ce:d4:54: b2:fd:04:f8:4b:e1:f3:0d:04:67:9c:89:3f:55:2d: 9d:45:da:5f:6f:43:28:14:7b:b0:87:b1:f5:c2:a7: 8c:9a:00:26:5f:b8:15:50:dc:69:d8:96:19:e8:29: 5c:22:ae:ef:98:b3:0b:ee:27:4c:4d:88:c0:81:e4: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:81:5B:E4:52:F4:83:6D:9B:E3:80:A0:59:43:DB:74:A9:15:C9 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:a5:8a:50:7f:84:9d:7f:a7:d3:e1:3e:ae:ab:de:17:92: ac:ad:fb:76:57:b9:c1:0b:b6:84:ea:c5:d3:cb:56:24:00:5d: 5b:9c:25:ce:8c:29:e6:ec:1b:d8:e3:0c:e0:90:15:3d:4c:53: fa:e0:3b:59:d0:a8:5b:0f:50:9e:03:73:9a:c7:6b:7b:8b:f7: ce:44:07:ff:fb:34:f9:8c:b1:f9:97:68:a2:ed:ae:42:06:09: ae:df:a2:c9:fb:e2:c4:cc:6c:cc:ae:a2:f9:8e:9a:db:55:d1: 59:59:5b:0c:05:67:f7:b4:b4:c0:57:fe:33:05:8c:05:54:0c: f2:a6:4d:b9:93:0e:bb:be:ec:b3:2b:48:f8:8e:03:a4:97:75: a2:86:2e:df:0b:76:ac:19:55:d0:3f:e4:6c:f9:10:10:0e:b8: b2:c0:47:0f:0a:d8:8c:51:6f:4d:0c:62:0d:79:c3:79:dc:a5: 4b:e8:af:3b:6e:88:86:ec:46:5a:7a:2b:d1:dd:a1:c4:dd:f5: 31:db:fb:04:18:40:5b:b4:dc:3d:0c:7e:35:6b:b2:43:04:21: e5:89:7f:ed:f0:b9:f8:dc:2c:dc:33:d8:7b:ed:26:aa:37:ae: 9b:84:4a:59:9f:d0:c9:b3:00:33:b9:48:1b:30:4e:83:3f:b6: 0d:23:c0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwNzE4MTkyNDMxWhcNMjUwNzI1MTkyNDMxWjAYMRYwFAYD VQQDEw02ODdhOWY2Zi01MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ake/9yBepZuUq6pnf9Q36zI81FBGL8jCcgNl/LjrjtUQ7TzrwtmE9qfsZSe ukVAQNPDLvnVFbAYPRYBvjwqx/Pv0TJEXG5wLLLkR2zrd0yHrLVMRCko0Nn5qgwn C4jqc7ZNAvCq3Ys3Ae4fYOBGoee8lOvi0pBcOaysM/8hMahHbMRAqUliG0r4jUzc IN0poqKOlBt/oEmM/hMKAPCyPEgU6LUMBY9y0swvxSgXANcIH8HppHE+d8QyI4D6 Xz3O1FSy/QT4S+HzDQRnnIk/VS2dRdpfb0MoFHuwh7H1wqeMmgAmX7gVUNxp2JYZ 6ClcIq7vmLML7idMTYjAgeQPBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsPgVvk UvSDbZvjgKBZQ9t0qRXJMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBClKWKUH+EnX+n0+E+rqveF5Ksrft2V7nBC7aE6sXTy1YkAF1bnCXO jCnm7BvY4wzgkBU9TFP64DtZ0KhbD1CeA3Oax2t7i/fORAf/+zT5jLH5l2ii7a5C Bgmu36LJ++LEzGzMrqL5jprbVdFZWVsMBWf3tLTAV/4zBYwFVAzypk25kw67vuyz K0j4jgOkl3Wihi7fC3asGVXQP+Rs+RAQDriywEcPCtiMUW9NDGINecN53KVL6K87 boiG7EZaeivR3aHE3fUx2/sEGEBbtNw9DH41a7JDBCHliX/t8Ln43CzcM9h77Saq N66bhEpZn9DJswAzuUgbME6DP7YNI8BL -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:32 2025 by rpki-client