$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: YbCmKBQyTjcKyTYhqDrPp6JzdNzhd8iEgQ4GczLF2mc= Subject key identifier: BE:39:58:10:6A:9E:74:6F:AF:4E:8C:88:1D:FF:42:03:B8:D8:90:C3 Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02C5 Signing time: Sat 19 Jul 2025 01:49:35 +0000 Manifest this update: Sat 19 Jul 2025 01:49:34 +0000 Manifest next update: Sat 26 Jul 2025 01:49:34 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: +ASNwPur8FtXpvMsfYo6ZbdYf1HTkbqFDzCHBW0eXtc=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Jul 19 01:49:34 2025 GMT Not After : Jul 26 01:49:34 2025 GMT Subject: CN=687af9af-f02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:d6:ae:a5:b9:b4:60:d3:f7:d0:37:56:e9: b3:7d:a9:3f:19:f6:60:20:53:cd:2e:b6:48:ae:88: be:e1:80:68:41:39:00:83:0c:82:fd:4e:e8:3e:b6: 32:03:d8:35:4e:95:8a:5c:8f:0b:57:85:ac:e6:46: fa:64:42:6f:4b:01:a0:df:7e:c3:32:62:d4:b5:93: 9c:e1:7c:9d:be:1f:e8:59:3c:de:73:c1:a7:f3:de: 0e:da:38:e6:47:10:27:26:c0:18:75:8a:90:c7:ce: e1:06:f7:7e:a4:a4:aa:02:26:2d:f6:3c:63:06:58: be:a4:b1:95:fe:37:6a:9f:48:6f:fa:40:48:ab:76: b8:74:d9:b7:f8:b9:4d:46:56:2f:81:27:8c:e3:f4: 3f:a5:b9:30:e4:df:04:cc:75:f5:ac:d5:d2:70:ef: d1:a2:3d:54:87:88:5b:d3:41:8d:bb:96:12:1b:2e: 14:ba:7a:7b:1a:99:96:23:3a:6c:a1:85:53:5e:5b: 4d:c3:94:ff:76:65:5c:b7:67:7c:64:8a:e3:42:b1: ef:4d:84:77:0c:a7:bc:5d:a7:5f:1d:8e:fd:ca:0a: 3b:6a:02:a2:a8:67:5a:1d:bd:1a:9d:2b:d8:26:b9: ad:36:25:81:a6:60:e6:09:5f:52:d0:e9:3c:e5:8a: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:39:58:10:6A:9E:74:6F:AF:4E:8C:88:1D:FF:42:03:B8:D8:90:C3 X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:39:ad:89:aa:e8:b0:68:d0:23:43:43:eb:2a:7d:62:fd:84: 46:bf:3c:3b:55:46:dc:d1:db:5a:e4:cd:13:f0:59:bf:01:11: 80:84:40:db:3e:64:99:e4:fd:df:2b:f0:48:8e:67:8c:9b:b9: f9:21:59:3c:c5:bd:40:e9:37:aa:64:4c:c0:61:62:8f:6d:e5: 57:99:d2:ca:fe:01:c9:5e:08:a6:6c:86:c4:ee:0e:84:89:7f: b4:db:10:8f:5c:35:91:2e:d6:61:55:b2:35:87:1e:d4:84:ee: 8e:ca:f1:ab:24:ce:ff:12:60:75:fb:b6:15:20:29:6a:f0:7b: d3:17:c3:be:6e:0d:66:b6:bb:c2:39:da:d4:d2:0b:0d:a9:d8: 18:e1:f4:a9:7a:f8:9b:c2:aa:fd:8b:01:46:5a:9a:bb:9e:e5: 49:40:60:e2:00:4f:1d:e1:47:5f:33:b6:bf:0a:11:aa:77:07: 29:45:1a:db:72:8f:7b:66:9a:4f:01:8e:ed:2d:6a:7c:fa:70: 0e:0d:ac:f8:30:e2:20:b0:5c:6b:4b:e7:49:20:46:ff:21:1b: 71:5a:9f:a1:d0:e8:f2:c9:0d:39:7c:15:7f:9a:54:4e:a1:91: 96:cf:c2:b3:ff:6e:04:cc:a0:ad:13:ef:e0:73:9f:b2:2a:db: 8e:e4:a6:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwNzE5MDE0OTM0WhcNMjUwNzI2MDE0OTM0WjAYMRYwFAYD VQQDEw02ODdhZjlhZi1mMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtirWrqW5tGDT99A3Vumzfak/GfZgIFPNLrZIroi+4YBoQTkAgwyC/U7oPrYy A9g1TpWKXI8LV4Ws5kb6ZEJvSwGg337DMmLUtZOc4Xydvh/oWTzec8Gn894O2jjm RxAnJsAYdYqQx87hBvd+pKSqAiYt9jxjBli+pLGV/jdqn0hv+kBIq3a4dNm3+LlN RlYvgSeM4/Q/pbkw5N8EzHX1rNXScO/Roj1Uh4hb00GNu5YSGy4Uunp7GpmWIzps oYVTXltNw5T/dmVct2d8ZIrjQrHvTYR3DKe8XadfHY79ygo7agKiqGdaHb0anSvY JrmtNiWBpmDmCV9S0Ok85Yoz0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL45WBBq nnRvr06MiB3/QgO42JDDMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjOa2JquiwaNAjQ0PrKn1i/YRGvzw7VUbc0dta5M0T8Fm/ARGAhEDb PmSZ5P3fK/BIjmeMm7n5IVk8xb1A6TeqZEzAYWKPbeVXmdLK/gHJXgimbIbE7g6E iX+02xCPXDWRLtZhVbI1hx7UhO6OyvGrJM7/EmB1+7YVIClq8HvTF8O+bg1mtrvC OdrU0gsNqdgY4fSpevibwqr9iwFGWpq7nuVJQGDiAE8d4UdfM7a/ChGqdwcpRRrb co97ZppPAY7tLWp8+nAODaz4MOIgsFxrS+dJIEb/IRtxWp+h0OjyyQ05fBV/mlRO oZGWz8Kz/24EzKCtE+/gc5+yKtuO5KZ5 -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:37 2025 by rpki-client