$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: oGrPxdL6ti1RmQlic46iWJOEw2VLeb7TS1WZy/moKZ0= Subject key identifier: 4B:44:54:C5:6A:83:03:3F:5D:49:6C:15:8C:15:7A:62:37:A3:F0:E5 Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 42 Signing time: Wed 23 Jul 2025 07:48:47 +0000 Manifest this update: Wed 23 Jul 2025 07:48:46 +0000 Manifest next update: Wed 30 Jul 2025 07:48:46 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: dEkbDMbC8wkp375+BTS7ykHLJiEGD6g3fwltKxXtYb4=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: riovgsjK6T9Xk/OVypXbdv81H28kZxqc1J6kqB+epyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: Jul 23 07:48:46 2025 GMT Not After : Jul 30 07:48:46 2025 GMT Subject: CN=688093de-e9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:20:f9:88:a7:19:bd:c6:06:d9:9d:4d:c3: aa:6d:b9:39:d7:88:78:ae:c9:5f:3a:8f:59:65:18: 41:0e:99:40:9c:8b:9e:46:73:77:da:2c:16:79:90: f3:61:47:3b:47:2c:fc:5d:96:88:1f:5e:13:e8:7a: 5e:06:36:ff:a9:96:1b:ea:80:39:a4:52:69:72:a1: 8f:46:42:c6:3c:b5:f5:2f:64:97:76:29:87:7f:75: 4d:a1:27:29:0c:1b:5b:3f:28:de:3f:3b:ff:b2:59: 77:a6:5b:e8:a0:75:a6:8c:af:ba:a6:03:1b:84:64: 8a:d7:43:c8:e1:33:02:2b:63:ad:0e:6a:17:dd:80: 87:16:b1:b7:e6:82:38:c0:4e:78:91:a4:3d:df:14: f1:a8:fd:3c:9d:a1:54:7b:05:47:5c:07:76:48:6e: de:c1:e5:61:fb:7b:3e:59:f8:95:c2:ac:3e:36:4f: c5:50:19:8b:4a:22:ba:b2:51:ed:81:e4:3c:1f:ba: 97:d8:cb:1c:be:44:66:f2:35:6e:d6:98:1b:07:14: bc:23:ea:cc:8c:5f:c8:1d:09:05:65:52:96:c0:04: a9:1a:a4:09:4c:4a:b1:11:3d:93:23:56:0b:3d:96: bf:56:28:92:49:5c:f5:2d:63:cf:ed:0c:f9:2c:9a: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:54:C5:6A:83:03:3F:5D:49:6C:15:8C:15:7A:62:37:A3:F0:E5 X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:10:59:a6:3b:82:fd:0d:9c:e5:cc:b4:ef:a6:4b:1a:b1:fd: ee:61:f8:84:10:c7:bb:fc:b9:cd:8c:49:62:37:5b:a5:30:df: 15:ab:63:35:15:ee:41:b8:66:24:a9:97:15:c9:ca:3d:a2:37: 78:4a:c1:39:f6:0e:10:50:78:1f:67:0d:d5:bb:2a:f8:38:9e: 32:a8:cb:e2:2b:42:7d:e7:31:e6:4c:bf:25:53:30:b9:fd:1a: e7:00:92:e2:e0:b8:af:ba:4c:32:f2:6d:6c:f8:aa:61:c6:d4: 0f:b8:d7:a8:97:28:c8:ef:02:78:38:11:df:54:8d:d4:9c:d1: eb:d0:8d:76:4f:bb:c9:58:6d:03:23:28:53:71:63:42:9f:d1: a2:f9:ff:62:bc:81:ee:f3:43:61:69:cf:a3:e6:78:93:00:64: 89:3b:08:b7:30:08:85:e0:b5:9a:15:4b:b3:e0:ec:c3:c0:35: 57:ea:c7:05:81:fc:9b:40:8c:60:65:45:05:1b:d0:7e:38:66: 7f:5a:88:74:f4:96:b1:c2:70:1d:67:a8:79:d1:2e:90:81:2c: 2d:61:2f:b7:32:66:dd:7f:ee:d7:ef:f5:c6:72:16:32:d8:a7: 1d:2d:03:9c:92:19:64:06:54:4b:06:23:83:9d:ea:34:43:8b: 0a:bb:52:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTA3MjMwNzQ4NDZaFw0yNTA3MzAwNzQ4NDZaMBgxFjAUBgNV BAMTDTY4ODA5M2RlLWU5YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwVyD5iKcZvcYG2Z1Nw6ptuTnXiHiuyV86j1llGEEOmUCci55Gc3faLBZ5kPNh RztHLPxdlogfXhPoel4GNv+plhvqgDmkUmlyoY9GQsY8tfUvZJd2KYd/dU2hJykM G1s/KN4/O/+yWXemW+igdaaMr7qmAxuEZIrXQ8jhMwIrY60OahfdgIcWsbfmgjjA TniRpD3fFPGo/TydoVR7BUdcB3ZIbt7B5WH7ez5Z+JXCrD42T8VQGYtKIrqyUe2B 5DwfupfYyxy+RGbyNW7WmBsHFLwj6syMX8gdCQVlUpbABKkapAlMSrERPZMjVgs9 lr9WKJJJXPUtY8/tDPksmpZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS0RUxWqD Az9dSWwVjBV6Yjej8OUwHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAsQWaY7gv0NnOXMtO+mSxqx/e5h+IQQx7v8uc2MSWI3W6Uw3xWrYzUV 7kG4ZiSplxXJyj2iN3hKwTn2DhBQeB9nDdW7Kvg4njKoy+IrQn3nMeZMvyVTMLn9 GucAkuLguK+6TDLybWz4qmHG1A+416iXKMjvAng4Ed9UjdSc0evQjXZPu8lYbQMj KFNxY0Kf0aL5/2K8ge7zQ2Fpz6PmeJMAZIk7CLcwCIXgtZoVS7Pg7MPANVfqxwWB /JtAjGBlRQUb0H44Zn9aiHT0lrHCcB1nqHnRLpCBLC1hL7cyZt1/7tfv9cZyFjLY px0tA5ySGWQGVEsGI4Od6jRDiwq7Uqs= -----END CERTIFICATE-----Generated at Thu Jul 24 05:02:54 2025 by rpki-client