$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: AgOgEqJBu51WHDfSluRmNv9yPaMVi2ArfrHKX340aOs= Subject key identifier: 8E:07:25:E0:45:D7:85:6A:E8:BC:71:FC:33:94:C8:F4:69:86:DA:B6 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 352F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34CF Signing time: Fri 18 Jul 2025 14:25:05 +0000 Manifest this update: Fri 18 Jul 2025 14:25:05 +0000 Manifest next update: Fri 25 Jul 2025 14:25:05 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: VUFG45EviscmOwl780Rjhn2sJ0Sq0yswDN64Q61SUUk=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13615 (0x352f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Jul 18 14:25:05 2025 GMT Not After : Jul 25 14:25:05 2025 GMT Subject: CN=687a5941-5e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:62:fc:46:9f:8d:3d:56:bd:67:db:1e:2b: a1:fe:bb:0b:ed:4d:d2:00:1f:00:3f:aa:dd:0b:4b: e9:98:e4:dd:0e:68:1e:95:b8:a6:b2:0c:f8:77:26: 43:9b:2c:64:fb:c2:f5:df:c2:f9:c2:dd:04:7b:e9: b4:56:45:6b:21:e5:d6:07:bd:11:b0:5a:80:d8:2b: 6e:87:7c:13:da:b7:84:a7:19:fa:74:b2:11:60:6c: 32:9a:50:d2:2b:24:f0:61:d2:a2:f8:db:9f:7b:80: b8:29:43:7a:36:a2:50:fb:39:58:c2:0d:48:9a:ce: 87:42:70:59:a7:49:2f:30:f2:b6:e0:5b:6d:00:fd: e5:d9:b9:37:20:6d:d0:2d:8f:e5:fa:f7:c5:69:66: 37:d9:55:09:b0:cb:a5:72:d4:44:86:ea:69:fd:65: f3:94:10:91:c1:b5:72:1c:18:95:fc:8d:59:fd:e6: 83:5e:fd:16:84:a2:5a:f8:39:5d:33:af:1e:c5:53: 74:eb:bd:10:73:e7:0f:0a:85:11:53:4b:f2:2b:44: 47:df:7d:1f:97:5d:71:2f:4c:85:9c:c6:df:0b:11: 1b:11:9b:0a:a0:8f:b5:da:b7:22:4b:91:d3:c7:34: 37:7b:49:91:7f:59:bb:53:71:26:f7:48:0e:3b:1a: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:25:E0:45:D7:85:6A:E8:BC:71:FC:33:94:C8:F4:69:86:DA:B6 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:3a:84:de:3b:ba:94:fe:9f:e5:41:18:49:75:9c:36:56:03: e7:53:90:d0:e8:67:38:ab:c8:ea:4b:d2:05:cb:fb:d5:19:40: 4a:f5:18:8c:59:d7:cd:76:58:25:d3:b6:7a:e9:02:81:76:d2: 2d:58:0b:50:60:73:86:b1:d7:96:2a:46:b3:96:f6:02:7a:40: 12:16:5b:cd:fd:a6:f7:39:ba:53:05:f9:89:90:d3:cd:68:e1: 3e:f2:ca:07:19:86:b3:a3:fc:d9:b9:f2:7b:8e:8c:10:a4:ce: 2b:03:ce:67:b1:4f:09:62:f5:41:a0:64:c9:4f:ac:31:c7:44: 8d:59:c4:a5:a1:1d:c6:87:26:3f:3e:d6:fc:9c:a5:74:2c:67: b1:21:91:8c:4c:77:db:38:47:21:7a:00:30:ce:ba:a3:98:59: 1d:65:ec:16:0e:43:da:32:80:ed:2f:de:b1:d8:83:cb:71:75: 14:3e:d2:87:fa:d0:c8:a0:a1:62:cf:b4:b3:90:13:52:9f:23: ae:51:12:0b:16:e4:19:7e:85:49:9d:a5:40:27:36:ea:21:5c: 51:b7:2f:fc:8f:d5:cd:f2:01:b6:09:0e:d2:e7:93:36:0b:cb: a7:63:70:15:66:be:fb:b5:e9:8b:25:e6:21:96:3a:09:e2:8a: bc:ec:4e:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNzE4MTQyNTA1WhcNMjUwNzI1MTQyNTA1WjAYMRYwFAYD VQQDEw02ODdhNTk0MS01ZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgJi/EafjT1WvWfbHiuh/rsL7U3SAB8AP6rdC0vpmOTdDmgelbimsgz4dyZD myxk+8L138L5wt0Ee+m0VkVrIeXWB70RsFqA2Ctuh3wT2reEpxn6dLIRYGwymlDS KyTwYdKi+Nufe4C4KUN6NqJQ+zlYwg1Ims6HQnBZp0kvMPK24FttAP3l2bk3IG3Q LY/l+vfFaWY32VUJsMulctREhupp/WXzlBCRwbVyHBiV/I1Z/eaDXv0WhKJa+Dld M68exVN0670Qc+cPCoURU0vyK0RH330fl11xL0yFnMbfCxEbEZsKoI+12rciS5HT xzQ3e0mRf1m7U3Em90gOOxqu2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4HJeBF 14Vq6Lxx/DOUyPRphtq2MB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3OoTeO7qU/p/lQRhJdZw2VgPnU5DQ6Gc4q8jqS9IFy/vVGUBK9RiM WdfNdlgl07Z66QKBdtItWAtQYHOGsdeWKkazlvYCekASFlvN/ab3ObpTBfmJkNPN aOE+8soHGYazo/zZufJ7jowQpM4rA85nsU8JYvVBoGTJT6wxx0SNWcSloR3GhyY/ Ptb8nKV0LGexIZGMTHfbOEchegAwzrqjmFkdZewWDkPaMoDtL96x2IPLcXUUPtKH +tDIoKFiz7SzkBNSnyOuURILFuQZfoVJnaVAJzbqIVxRty/8j9XN8gG2CQ7S55M2 C8unY3AVZr77temLJeYhljoJ4oq87E4+ -----END CERTIFICATE-----Generated at Sun Jul 20 10:17:44 2025 by rpki-client