$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: YKQQ1fScAv1J9Yjgl41fnBcgk1at1TpxXejUid1ZfRA= Subject key identifier: 0D:6A:DD:0C:E8:7F:EB:33:2A:B8:B0:E0:09:96:62:2E:DC:3B:BE:EE Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 0204 Signing time: Sun 07 Sep 2025 02:45:33 +0000 Manifest this update: Sun 07 Sep 2025 02:45:33 +0000 Manifest next update: Sun 14 Sep 2025 02:45:33 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: m3l8URzGqmTNUw0ffCkBBr4rOdGu1LuirojCmQVuPEc=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Sep 7 02:45:33 2025 GMT Not After : Sep 14 02:45:33 2025 GMT Subject: CN=68bcf1cd-6ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:b0:5c:40:2d:0a:98:3b:a4:fa:93:83:d9: 6a:c3:e9:60:24:df:7a:bf:29:45:46:96:bf:90:80: fd:10:1a:c4:95:03:10:b6:6b:e8:34:83:4d:88:5f: 86:f3:6f:fd:c0:0f:b8:f3:54:5f:ae:af:06:51:e4: af:d8:a9:8c:47:b2:48:bc:d1:48:c9:a9:e6:b3:d2: 8e:fc:49:61:23:d1:e5:07:32:76:ea:5b:44:54:f7: ed:50:51:b5:c4:fe:bf:0f:a4:09:69:1d:8e:9f:76: e3:03:6f:d2:f3:3b:1c:cf:f8:fd:ad:19:26:27:e1: 03:97:10:b2:14:88:4a:5d:95:a0:06:af:fa:0d:87: 3d:cb:15:9d:c9:32:e8:b9:1e:3f:2b:4f:1d:0b:d5: af:c6:26:ad:c8:b9:7f:b5:a5:e4:50:12:b8:05:03: ac:21:b8:81:f6:37:89:c0:70:72:07:a6:56:1a:45: e9:f7:6c:52:3b:7a:88:20:3b:fe:4c:8a:9a:23:2a: ac:65:8e:a7:85:a2:b2:34:70:99:75:80:6f:db:e7: 54:54:f7:0a:9d:4c:80:f4:ff:f6:1b:8f:64:b1:77: ee:01:14:b1:e8:15:a7:9b:80:ff:62:3f:e9:96:62: ba:73:9d:5c:f3:32:a7:56:4c:03:4b:cc:22:01:fc: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6A:DD:0C:E8:7F:EB:33:2A:B8:B0:E0:09:96:62:2E:DC:3B:BE:EE X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6b:07:3f:31:96:5f:fb:e5:0d:42:76:40:9d:23:a7:1b:c8: c7:89:29:14:86:93:e9:f9:97:3f:7e:0d:15:c7:df:ab:b6:18: ee:cf:86:31:6c:b8:6b:df:ea:46:62:52:28:af:a8:59:76:6e: d9:2e:34:16:9f:e7:c3:4f:b0:6d:07:8c:6e:64:9c:08:db:eb: 9c:d4:2d:27:7b:0b:57:e4:fc:96:88:b1:4f:26:bc:0b:4d:9c: ef:98:2e:d1:30:11:89:46:cc:27:2f:a8:7c:0a:bc:e5:74:51: a3:63:86:e5:c5:6b:fe:28:98:04:ae:5a:fe:97:c4:86:40:24: 01:26:2e:ff:c8:30:55:80:e7:be:2c:6e:51:43:03:40:43:03: 8a:f7:b7:55:d5:4b:96:5b:65:e2:95:8b:b3:e7:0c:5f:5f:6a: 35:75:ab:33:ea:47:52:8c:da:11:59:9f:65:6d:7a:f6:0e:c7: ae:12:c1:3e:5f:53:58:8c:0a:1d:f9:3d:b5:e9:b6:66:6a:5f: bb:76:fa:9a:9e:22:f9:48:20:e7:39:63:66:c0:80:de:14:ee: c0:6e:9c:2d:80:f7:9f:92:00:9d:4a:b4:a6:cc:44:e9:b9:f6: 62:bb:62:9a:8e:bd:13:93:16:9c:79:b0:c0:f3:b9:0a:c9:d1: c2:87:38:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwOTA3MDI0NTMzWhcNMjUwOTE0MDI0NTMzWjAYMRYwFAYD VQQDEw02OGJjZjFjZC02ZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YywXEAtCpg7pPqTg9lqw+lgJN96vylFRpa/kID9EBrElQMQtmvoNINNiF+G 82/9wA+481Rfrq8GUeSv2KmMR7JIvNFIyanms9KO/ElhI9HlBzJ26ltEVPftUFG1 xP6/D6QJaR2On3bjA2/S8zscz/j9rRkmJ+EDlxCyFIhKXZWgBq/6DYc9yxWdyTLo uR4/K08dC9WvxiatyLl/taXkUBK4BQOsIbiB9jeJwHByB6ZWGkXp92xSO3qIIDv+ TIqaIyqsZY6nhaKyNHCZdYBv2+dUVPcKnUyA9P/2G49ksXfuARSx6BWnm4D/Yj/p lmK6c51c8zKnVkwDS8wiAfxCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1q3Qzo f+szKriw4AmWYi7cO77uMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDawc/MZZf++UNQnZAnSOnG8jHiSkUhpPp+Zc/fg0Vx9+rthjuz4Yx bLhr3+pGYlIor6hZdm7ZLjQWn+fDT7BtB4xuZJwI2+uc1C0newtX5PyWiLFPJrwL TZzvmC7RMBGJRswnL6h8CrzldFGjY4blxWv+KJgErlr+l8SGQCQBJi7/yDBVgOe+ LG5RQwNAQwOK97dV1UuWW2XilYuz5wxfX2o1dasz6kdSjNoRWZ9lbXr2DseuEsE+ X1NYjAod+T216bZmal+7dvqaniL5SCDnOWNmwIDeFO7AbpwtgPefkgCdSrSmzETp ufZiu2Kajr0TkxacebDA87kKydHChzg7 -----END CERTIFICATE-----Generated at Sun Sep 7 23:06:41 2025 by rpki-client