$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: glm1YusQAEjkgfzW9N4IlWk0GZooUhM1+Ceke+0R8UY= Subject key identifier: A8:37:C9:9B:76:8E:91:26:E8:1E:95:B2:A2:BD:03:5F:4C:BE:70:46 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: B1 Signing time: Fri 05 Sep 2025 06:35:44 +0000 Manifest this update: Fri 05 Sep 2025 06:35:43 +0000 Manifest next update: Fri 12 Sep 2025 06:35:43 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: M8Ap2i0c9vY+YgIYTLsEZE52t0sM8gbQnqvLQPevVhw=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Sep 5 06:35:43 2025 GMT Not After : Sep 12 06:35:43 2025 GMT Subject: CN=68ba84bf-e02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:20:9e:c6:e0:62:85:28:0d:24:d9:49:e6: 92:8d:01:58:c6:9b:51:c6:9a:41:a8:f8:d3:39:5d: a0:a2:f3:6d:d5:12:e7:07:bb:6b:96:86:ae:65:da: e6:6c:10:a5:77:7f:b6:40:2b:b5:54:94:0e:c1:ff: c3:e4:72:a7:d0:ce:14:a2:1e:95:b6:c6:ea:ba:40: 8e:4b:7b:ef:54:df:d1:51:59:78:56:ca:1b:5b:f3: b2:bf:39:ae:5d:aa:9e:3f:da:ae:65:13:f0:8a:90: 97:b4:06:1a:d9:e5:72:34:13:f9:a1:a1:b4:2e:87: 87:dc:4b:f4:bc:b2:16:6b:84:7a:f1:ea:cb:0d:ff: 87:08:98:5e:96:5c:60:1d:0b:6a:df:7f:08:54:75: 0f:ed:ec:7b:90:78:3c:a3:a7:82:09:a6:8a:2f:b2: c0:e0:e1:67:f7:e2:f2:a8:a8:75:4c:74:8e:b6:c5: ac:e8:71:2f:6f:d0:a2:0f:f0:ac:6b:b7:9c:a9:7e: 89:f0:f4:3a:af:37:14:e6:de:12:23:b5:7c:78:8d: ea:12:51:7e:43:c1:a8:5f:47:3f:70:70:48:76:0b: 56:25:68:6b:dd:31:5a:bc:9b:42:ba:88:cf:5b:99: aa:68:30:53:79:03:da:4c:c9:07:4f:5d:2e:03:c1: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:37:C9:9B:76:8E:91:26:E8:1E:95:B2:A2:BD:03:5F:4C:BE:70:46 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0a:f6:de:aa:3e:94:69:71:e6:fe:47:e5:68:db:f1:7f:11: eb:b4:f6:f3:bb:7b:6c:47:04:8b:8d:f0:17:ae:00:d7:25:87: 1c:6b:9c:36:e6:0d:73:bd:c0:4f:76:22:49:73:bf:23:9b:ae: dd:dd:a8:3b:d2:6f:d6:1d:ba:8a:61:3c:5f:cd:ec:05:1e:41: a6:1f:e2:1d:af:f7:e3:77:11:19:93:92:17:ff:c1:0a:9f:59: f3:b6:43:c0:2f:55:ad:52:dc:c6:17:3e:1f:d3:16:b9:16:c0: b3:fe:87:f4:c2:dc:64:26:cc:e8:b1:ee:b1:6f:f0:57:8c:31: 69:b7:e9:2b:35:30:1d:2b:01:3d:a3:d2:14:e7:a3:2e:ec:dc: 4b:75:8c:1f:13:fa:82:86:c6:e0:a9:28:d5:5a:1a:07:07:21: e5:8c:97:20:20:ee:be:6f:f9:29:31:2f:0f:0a:93:29:6a:8c: 1e:de:3b:f0:af:26:b0:09:91:d9:35:1c:1b:0b:eb:73:34:8b: a7:ef:87:a6:1f:75:42:0e:ee:0c:48:fe:be:f4:27:07:b9:53: 44:30:69:43:d6:c5:d4:e2:a7:34:73:55:23:ce:89:33:7f:be: 6d:7b:73:9b:a3:f3:4a:9b:b9:5a:52:b0:0f:71:70:db:4b:b3: 6b:67:18:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUwOTA1MDYzNTQzWhcNMjUwOTEyMDYzNTQzWjAYMRYwFAYD VQQDEw02OGJhODRiZi1lMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ8gnsbgYoUoDSTZSeaSjQFYxptRxppBqPjTOV2govNt1RLnB7trloauZdrm bBCld3+2QCu1VJQOwf/D5HKn0M4Uoh6VtsbqukCOS3vvVN/RUVl4VsobW/Oyvzmu XaqeP9quZRPwipCXtAYa2eVyNBP5oaG0LoeH3Ev0vLIWa4R68erLDf+HCJhellxg HQtq338IVHUP7ex7kHg8o6eCCaaKL7LA4OFn9+LyqKh1THSOtsWs6HEvb9CiD/Cs a7ecqX6J8PQ6rzcU5t4SI7V8eI3qElF+Q8GoX0c/cHBIdgtWJWhr3TFavJtCuojP W5mqaDBTeQPaTMkHT10uA8FnAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg3yZt2 jpEm6B6VsqK9A19MvnBGMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Cvbeqj6UaXHm/kflaNvxfxHrtPbzu3tsRwSLjfAXrgDXJYcca5w2 5g1zvcBPdiJJc78jm67d3ag70m/WHbqKYTxfzewFHkGmH+Idr/fjdxEZk5IX/8EK n1nztkPAL1WtUtzGFz4f0xa5FsCz/of0wtxkJszose6xb/BXjDFpt+krNTAdKwE9 o9IU56Mu7NxLdYwfE/qChsbgqSjVWhoHByHljJcgIO6+b/kpMS8PCpMpaowe3jvw ryawCZHZNRwbC+tzNIun74emH3VCDu4MSP6+9CcHuVNEMGlD1sXU4qc0c1Ujzokz f75te3Obo/NKm7laUrAPcXDbS7NrZxiA -----END CERTIFICATE-----Generated at Fri Sep 5 11:31:45 2025 by rpki-client