$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: ehgnJD1iftMQnUdRJVb93wVEBgs2qRT+TQK4iIbkSj0= Subject key identifier: 57:80:92:16:C8:05:91:67:06:C3:B0:01:40:DE:B6:50:0D:F9:02:78 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1E8C Signing time: Sun 20 Jul 2025 16:04:53 +0000 Manifest this update: Sun 20 Jul 2025 16:04:53 +0000 Manifest next update: Sun 27 Jul 2025 16:04:53 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: KJtyBirMu8LK58xndruWk6kyqhbLipTA4kdac1HCPbg=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7836 (0x1e9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Jul 20 16:04:53 2025 GMT Not After : Jul 27 16:04:53 2025 GMT Subject: CN=687d13a5-7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:d0:54:ef:7f:01:74:f1:84:5d:4d:8c:77: 41:7e:e5:41:be:30:2e:b3:ef:16:71:d7:41:f9:8c: da:e7:fe:89:c5:36:49:84:af:e3:d3:64:62:a2:67: 94:5e:9e:8f:be:4c:d7:eb:c1:9c:3f:71:9b:79:48: 90:35:a3:eb:de:a0:e1:0e:db:d7:80:7c:f3:d5:01: dd:6d:70:ee:2f:c7:8f:ae:fb:a7:d3:22:3b:0d:5e: 37:20:5d:1c:ab:4b:71:d1:de:53:a4:be:de:a7:a8: 0b:50:38:34:9d:f9:d5:8e:ca:69:88:4b:de:ec:28: a7:48:fa:37:9a:9f:6d:f6:a0:74:1b:b2:22:cf:b3: 44:df:34:93:a1:68:9d:c2:c8:6c:6e:23:75:1c:43: ec:8e:17:92:78:90:fa:b4:7e:54:df:fe:37:66:1c: ce:aa:0a:69:5b:35:16:e9:9d:9a:e8:a2:a7:ca:89: c4:aa:e1:73:2a:1f:9c:69:f5:aa:65:98:ce:25:32: 28:5b:56:b5:0f:a4:db:7c:48:a0:ce:27:fa:44:0e: 55:fe:3c:7a:3b:21:54:b5:1d:b1:84:10:9b:58:2b: 84:b8:8c:3b:f8:48:0d:3b:33:95:e0:69:03:43:21: f3:13:10:a1:b8:67:63:17:84:17:93:f8:b6:93:c2: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:92:16:C8:05:91:67:06:C3:B0:01:40:DE:B6:50:0D:F9:02:78 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:04:ab:65:26:55:c1:fe:38:8c:d2:4e:b2:ee:5b:0d:3f:f2: 38:73:cc:8b:07:8a:a5:08:72:69:6c:58:33:1e:79:2c:91:a4: 99:96:0e:7f:e1:59:a3:be:e3:5c:38:5a:06:12:67:d8:37:0e: ca:46:26:3b:77:57:06:bc:f9:8b:34:85:a4:14:db:17:3e:45: 88:9a:24:32:e0:f2:85:06:f6:9b:40:84:ed:a5:0b:af:33:dc: 57:b0:5e:ac:c0:08:fe:32:8f:97:38:94:7d:c0:02:f7:de:e8: 92:a7:14:5d:b7:b7:54:37:6e:8d:46:04:03:65:45:ec:a6:36: 5d:7a:15:1c:01:e9:70:65:cb:60:95:16:08:db:6f:a8:a3:45: 8c:93:17:9f:e7:a0:76:d6:76:07:d1:8e:fe:b8:79:15:5b:87: 83:14:ed:ae:bd:15:6d:a7:55:78:95:c1:10:f1:7d:e6:7e:eb: 46:c9:4e:5d:83:ec:63:12:ff:fc:61:dd:d2:3d:f1:2c:b9:7d: 73:16:2f:87:ed:1d:a6:d8:43:cf:44:77:4f:00:cf:6f:6e:7d: 33:d3:1e:67:c7:c5:1a:51:f6:81:e4:dc:b6:6f:0c:43:ce:4b: 55:37:e0:4b:f9:0e:61:4e:4a:35:b0:3b:13:f4:24:0a:f4:3e: 59:6c:05:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNzIwMTYwNDUzWhcNMjUwNzI3MTYwNDUzWjAYMRYwFAYD VQQDEw02ODdkMTNhNS03YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQXQVO9/AXTxhF1NjHdBfuVBvjAus+8WcddB+Yza5/6JxTZJhK/j02RiomeU Xp6PvkzX68GcP3GbeUiQNaPr3qDhDtvXgHzz1QHdbXDuL8ePrvun0yI7DV43IF0c q0tx0d5TpL7ep6gLUDg0nfnVjsppiEve7CinSPo3mp9t9qB0G7Iiz7NE3zSToWid wshsbiN1HEPsjheSeJD6tH5U3/43ZhzOqgppWzUW6Z2a6KKnyonEquFzKh+cafWq ZZjOJTIoW1a1D6TbfEigzif6RA5V/jx6OyFUtR2xhBCbWCuEuIw7+EgNOzOV4GkD QyHzExChuGdjF4QXk/i2k8LaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeAkhbI BZFnBsOwAUDetlAN+QJ4MB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoBKtlJlXB/jiM0k6y7lsNP/I4c8yLB4qlCHJpbFgzHnkskaSZlg5/ 4VmjvuNcOFoGEmfYNw7KRiY7d1cGvPmLNIWkFNsXPkWImiQy4PKFBvabQITtpQuv M9xXsF6swAj+Mo+XOJR9wAL33uiSpxRdt7dUN26NRgQDZUXspjZdehUcAelwZctg lRYI22+oo0WMkxef56B21nYH0Y7+uHkVW4eDFO2uvRVtp1V4lcEQ8X3mfutGyU5d g+xjEv/8Yd3SPfEsuX1zFi+H7R2m2EPPRHdPAM9vbn0z0x5nx8UaUfaB5Ny2bwxD zktVN+BL+Q5hTko1sDsT9CQK9D5ZbAXD -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:58 2025 by rpki-client