$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft File: leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json) Hash identifier: g9w7QdnEzVak6FWFzkKEAC7fPQCMi4TIqzyUG4NkDWw= Subject key identifier: A7:BC:69:31:7C:8A:25:68:31:02:A7:34:3F:A4:D6:7D:FB:B6:C2:8B Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Certificate serial: 1130 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft Manifest number: 1126 Signing time: Fri 18 Jul 2025 17:25:27 +0000 Manifest this update: Fri 18 Jul 2025 17:25:26 +0000 Manifest next update: Fri 25 Jul 2025 17:25:26 +0000 Files and hashes: 1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: qSAu/kZvE3E62+MSBW35wlwlg+71tH87WjqFxNkVm2s=) 2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: y9Ue7Mqnzr2Y9oHbpxdCKjDeFirsk0PRqFHYUCwvvtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4400 (0x1130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Validity Not Before: Jul 18 17:25:26 2025 GMT Not After : Jul 25 17:25:26 2025 GMT Subject: CN=687a8386-71a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:2c:65:8f:16:6d:02:95:3f:8a:dc:3e:b4: c2:33:97:4a:68:45:de:61:d9:11:e5:28:b3:cb:88: a6:eb:3b:14:ce:df:d8:3c:b7:02:b7:89:c2:ac:c6: 4f:34:2b:54:48:01:86:46:aa:4f:42:11:40:a7:a9: ac:db:98:95:df:41:e2:d4:9b:04:50:d0:bc:ef:ec: ab:47:fe:4f:88:96:6a:38:1f:7b:92:ee:25:8f:fd: de:43:4a:eb:f5:ea:bb:45:88:09:4d:f8:42:05:b9: 87:44:e1:cb:b3:7c:2a:fa:fe:34:f2:9e:12:42:dc: d8:40:a0:b4:e3:a4:26:02:56:9d:c7:29:20:ba:89: 40:3a:b4:48:78:fe:0e:24:7a:4b:c0:50:0c:1d:bf: 03:de:29:8c:4f:ec:ef:3c:bb:0b:70:57:71:9f:46: 4f:08:36:af:84:fd:23:0d:b3:62:fb:82:f7:53:1e: 24:ed:9e:75:1f:f3:b1:1a:7a:fe:36:94:5e:bf:22: c2:30:22:eb:db:3a:74:89:48:ee:10:e7:4b:4b:80: d4:8f:31:1f:f9:64:21:c0:6f:92:bc:0b:72:7f:ab: a6:b0:c8:fb:7a:cf:35:c9:2f:fc:cb:22:65:a6:1d: 2f:26:09:19:05:98:4a:f2:b7:de:4e:80:e2:16:39: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:69:31:7C:8A:25:68:31:02:A7:34:3F:A4:D6:7D:FB:B6:C2:8B X509v3 Authority Key Identifier: keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:bb:09:d8:28:33:34:a8:c3:e3:94:3b:94:f5:2a:15:cb:ab: 24:0b:f4:1e:6e:65:60:48:c2:26:11:2b:6f:7b:33:76:05:21: f6:43:35:6e:45:43:60:8b:18:a0:47:0c:0f:bb:d9:34:d0:8f: f3:5a:01:da:69:33:a4:8a:6e:a3:fe:ca:ec:0e:81:e9:1f:46: 00:7b:68:e4:b0:1b:a5:8b:55:7e:12:30:86:88:ab:d7:d2:e4: a4:11:6f:96:a6:25:90:f9:f5:57:db:75:86:81:45:af:b3:86: 56:e5:7a:40:cb:41:fe:ac:ee:b8:7b:87:55:4f:3b:35:f9:19: 13:2a:0c:4d:c1:48:fe:91:bb:49:70:68:bc:e2:98:34:34:46: a6:fa:3a:e9:87:aa:c0:f2:c9:cf:a3:7a:95:de:5f:e1:e5:bd: ca:ac:78:75:83:ab:86:30:31:57:a3:2a:a4:dd:57:77:b0:d6: 34:55:0f:43:33:b7:6a:92:a5:56:90:d6:00:e4:d6:1f:08:d7: 99:32:bf:dd:37:f2:4b:7d:c3:1f:63:ac:60:da:85:b6:c7:2c: 03:32:62:26:2e:56:10:06:b4:a5:c8:08:3f:5f:a8:53:48:40: 83:17:2a:ae:bd:2b:44:b0:f4:bf:3e:77:11:8f:05:10:63:ed: 87:e4:e2:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDk1RUFBRkMyNEI1QUY0QjE3MkI1OEJCMDFBNzAxQ0ZF MTk2REExOTkwHhcNMjUwNzE4MTcyNTI2WhcNMjUwNzI1MTcyNTI2WjAYMRYwFAYD VQQDEw02ODdhODM4Ni03MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4csZY8WbQKVP4rcPrTCM5dKaEXeYdkR5Sizy4im6zsUzt/YPLcCt4nCrMZP NCtUSAGGRqpPQhFAp6ms25iV30Hi1JsEUNC87+yrR/5PiJZqOB97ku4lj/3eQ0rr 9eq7RYgJTfhCBbmHROHLs3wq+v408p4SQtzYQKC046QmAladxykguolAOrRIeP4O JHpLwFAMHb8D3imMT+zvPLsLcFdxn0ZPCDavhP0jDbNi+4L3Ux4k7Z51H/OxGnr+ NpRevyLCMCLr2zp0iUjuEOdLS4DUjzEf+WQhwG+SvAtyf6umsMj7es81yS/8yyJl ph0vJgkZBZhK8rfeToDiFjnZxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe8aTF8 iiVoMQKnND+k1n37tsKLMB8GA1UdIwQYMBaAFJXqr8JLWvSxcrWLsBpwHP4ZbaGZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi8wODI0M0M4QzEz MkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlMRnl0WXV3R25BY19obHRv WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xlcXZ3a3RhOUxGeXRZdXdHbkFjX2hsdG9aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi8wODI0M0M4QzEzMkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlM Rnl0WXV3R25BY19obHRvWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnuwnYKDM0qMPjlDuU9SoVy6skC/QebmVgSMImEStvezN2BSH2QzVu RUNgixigRwwPu9k00I/zWgHaaTOkim6j/srsDoHpH0YAe2jksBuli1V+EjCGiKvX 0uSkEW+WpiWQ+fVX23WGgUWvs4ZW5XpAy0H+rO64e4dVTzs1+RkTKgxNwUj+kbtJ cGi84pg0NEam+jrph6rA8snPo3qV3l/h5b3KrHh1g6uGMDFXoyqk3Vd3sNY0VQ9D M7dqkqVWkNYA5NYfCNeZMr/dN/JLfcMfY6xg2oW2xywDMmImLlYQBrSlyAg/X6hT SECDFyquvStEsPS/PncRjwUQY+2H5OLf -----END CERTIFICATE-----Generated at Sun Jul 20 10:17:46 2025 by rpki-client