$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: a1iCmV0KDK8ZQCelAe92MzC9yxf6XaM17EHt+f+tTRY= Subject key identifier: 0D:4C:40:7B:EE:67:1E:3C:FB:06:D7:25:F9:49:2C:8A:A3:EA:54:88 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01E1 Signing time: Sun 07 Sep 2025 03:00:38 +0000 Manifest this update: Sun 07 Sep 2025 03:00:38 +0000 Manifest next update: Sun 14 Sep 2025 03:00:38 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: 7iiSasHcIFZF0Poiqif6msQamYIDabPCdd51gJ5CrR0=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: r2GEMiOfnscgdpCkR3elgdL+OdlduqhLjKNmAhLGMa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: Sep 7 03:00:38 2025 GMT Not After : Sep 14 03:00:38 2025 GMT Subject: CN=68bcf556-2f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:13:3f:9a:c8:a6:fc:28:82:1e:b8:b9:c5: ff:d3:ad:09:3f:1a:14:12:c5:9d:8a:89:ba:b7:86: df:a2:dc:fc:df:1e:2b:98:77:32:3d:a3:60:d9:7d: 47:62:c2:e4:de:df:7f:d2:23:3f:e4:cc:1a:05:c1: cb:ea:cb:8b:e8:8a:44:13:9a:e1:6b:99:a9:31:f5: 27:60:81:3c:08:82:e3:d0:3d:9f:b8:98:20:1b:ff: 66:10:56:e3:5b:6a:6d:da:13:f6:3b:54:f4:62:89: 09:af:30:fd:ff:60:06:6f:47:84:4e:4d:69:b8:1a: 85:72:4f:0d:8e:31:a8:cf:70:a8:a9:1f:d9:33:6e: d8:7a:ee:14:bf:63:ec:40:7b:7d:73:0c:f6:9a:ab: 91:f2:c6:23:92:ea:3b:73:21:ac:d4:fc:7a:06:61: 15:95:30:e9:16:e1:00:d0:4e:7d:93:a8:bb:ae:64: 43:0e:78:1c:8e:8d:95:37:d2:2e:13:c4:ce:c8:9d: c7:f1:6e:b1:3c:60:69:e6:4e:bc:2c:f3:ad:09:bf: db:41:1b:fa:c5:4c:95:6a:7b:02:ee:a5:e8:5a:e5: df:5a:6c:24:c3:df:5d:b9:fd:e0:31:73:f0:95:ec: 03:c0:73:95:7d:f5:27:03:df:5a:06:a6:cd:64:c3: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:40:7B:EE:67:1E:3C:FB:06:D7:25:F9:49:2C:8A:A3:EA:54:88 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:08:4e:e0:6a:a9:dd:93:06:6f:94:56:05:d3:fa:c0:ba:5b: 9d:12:08:88:37:ff:89:85:5b:c9:cd:e2:16:77:1d:0e:ef:03: 01:54:07:f7:7f:c7:d6:b7:17:7b:e9:7c:14:6e:fd:98:1f:46: d0:3d:3f:1d:0e:23:e9:46:8d:5a:69:22:10:1a:59:8f:b2:7d: a7:8a:49:42:70:bf:c3:c0:e9:23:36:09:75:48:6b:dc:2a:9d: cd:29:51:cd:01:88:41:73:94:fa:34:b5:ce:2d:b0:20:b1:b2: 0e:ca:55:b3:3c:5c:99:fa:28:20:54:de:8f:94:10:ea:c0:fd: 1d:bd:b4:60:27:59:cb:f5:22:fd:98:9b:1d:4b:46:01:97:7a: 67:75:17:a7:45:ec:0f:a4:4b:ef:47:c4:28:0f:3d:a3:89:71: 1c:66:99:c5:7d:8c:d2:70:2f:dc:83:a0:aa:e5:ac:e0:cd:f9: a6:7f:ab:40:40:f1:3b:ad:83:ea:14:59:a0:50:0b:29:86:a5: f9:5d:ca:4c:5f:6a:bd:9a:3f:6b:5f:6e:cd:25:e0:3b:2c:97: 42:4b:ab:89:ca:93:0d:e8:fa:86:46:45:a9:55:7e:77:1d:3e: e0:ac:b9:7d:8c:9d:cc:ac:b7:95:0f:b6:f8:f4:dc:64:c7:c3: 9a:a7:83:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwOTA3MDMwMDM4WhcNMjUwOTE0MDMwMDM4WjAYMRYwFAYD VQQDEw02OGJjZjU1Ni0yZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPcTP5rIpvwogh64ucX/060JPxoUEsWdiom6t4bfotz83x4rmHcyPaNg2X1H YsLk3t9/0iM/5MwaBcHL6suL6IpEE5rha5mpMfUnYIE8CILj0D2fuJggG/9mEFbj W2pt2hP2O1T0YokJrzD9/2AGb0eETk1puBqFck8NjjGoz3CoqR/ZM27Yeu4Uv2Ps QHt9cwz2mquR8sYjkuo7cyGs1Px6BmEVlTDpFuEA0E59k6i7rmRDDngcjo2VN9Iu E8TOyJ3H8W6xPGBp5k68LPOtCb/bQRv6xUyVansC7qXoWuXfWmwkw99duf3gMXPw lewDwHOVffUnA99aBqbNZMOnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1MQHvu Zx48+wbXJflJLIqj6lSIMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDACE7gaqndkwZvlFYF0/rAuludEgiIN/+JhVvJzeIWdx0O7wMBVAf3 f8fWtxd76XwUbv2YH0bQPT8dDiPpRo1aaSIQGlmPsn2niklCcL/DwOkjNgl1SGvc Kp3NKVHNAYhBc5T6NLXOLbAgsbIOylWzPFyZ+iggVN6PlBDqwP0dvbRgJ1nL9SL9 mJsdS0YBl3pndRenRewPpEvvR8QoDz2jiXEcZpnFfYzScC/cg6Cq5azgzfmmf6tA QPE7rYPqFFmgUAsphqX5XcpMX2q9mj9rX27NJeA7LJdCS6uJypMN6PqGRkWpVX53 HT7grLl9jJ3MrLeVD7b49Nxkx8Oap4Nv -----END CERTIFICATE-----Generated at Mon Sep 8 02:25:48 2025 by rpki-client