$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: j/NHyLjARZanG/s/RYYEaEHSoEQoaKWmMdGz0+U8dJ0= Subject key identifier: 2F:DF:8B:8D:C3:0A:D1:EE:CE:71:7D:DF:CB:1C:09:ED:3B:CB:A7:B9 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 07B8 Signing time: Tue 16 Sep 2025 21:36:06 +0000 Manifest this update: Tue 16 Sep 2025 21:36:05 +0000 Manifest next update: Tue 23 Sep 2025 21:36:05 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: Hgy3O3jNnVwuEmkWl3eDkk12syMmIX5t4KDUVu6c8UA=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 21:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Sep 16 21:36:05 2025 GMT Not After : Sep 23 21:36:05 2025 GMT Subject: CN=68c9d846-4fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:cc:13:1c:16:87:a1:13:5f:5c:0f:81:c3: 5c:a2:ec:df:7b:aa:0d:b3:27:71:18:26:47:d5:64: 2f:71:80:f8:2d:44:ad:12:e1:ea:34:2d:c1:3b:75: 38:7a:26:0f:6b:a0:31:13:8b:af:4c:b0:d4:28:39: d7:99:34:9c:ab:85:ca:06:f0:b5:64:30:ad:87:f0: e1:9b:89:a4:9a:da:2f:cd:53:cf:89:15:63:19:8c: 36:70:23:46:3b:fa:8a:bd:84:29:78:ce:12:4f:56: 12:fd:87:7d:d7:37:68:97:1b:bb:3f:d0:ff:02:7a: f9:ac:81:a8:7a:58:a5:0b:e6:15:42:9b:42:a5:de: 6d:4c:dd:f2:a3:42:33:a4:39:a1:ee:31:76:5f:77: 91:60:9e:3d:6b:c0:f7:9e:3b:91:0e:59:6e:7c:44: 63:2c:9d:7e:74:5d:a6:06:d7:e2:ad:3e:6b:4d:f5: 90:1c:4c:39:f4:c7:63:fe:83:28:0f:3d:dd:b1:43: de:21:57:1a:f4:dd:5e:b9:90:52:66:c7:27:89:13: 67:6d:cc:e9:75:be:f4:0a:69:3f:3e:aa:24:7a:7a: 31:58:e6:8f:31:fb:8c:4a:b6:ab:93:5c:3c:0c:38: f2:44:9f:56:d9:9c:e7:39:82:b3:44:b4:4c:94:fa: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:8B:8D:C3:0A:D1:EE:CE:71:7D:DF:CB:1C:09:ED:3B:CB:A7:B9 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:7a:43:f6:4d:7d:74:71:6f:83:31:a7:ee:61:e2:8e:40: 37:3c:c3:9d:c4:e4:02:1f:f0:aa:b8:81:e5:a9:0a:a0:7c:21: 5c:0d:a4:bc:2f:37:05:55:ca:dd:09:5c:31:24:b2:cf:c4:16: a6:3e:6a:9d:af:4f:8b:2e:35:4a:ab:c4:81:96:dd:45:2b:62: cd:c9:68:93:64:30:34:3f:80:d4:60:a8:36:6b:88:62:58:51: ef:3e:90:1b:9a:e4:7c:37:a8:ee:cc:e0:33:0d:c9:ed:89:fa: e4:8e:c1:9a:70:d3:2a:f2:46:ad:98:4f:e9:08:3c:0d:09:c1: 59:27:57:8f:93:19:20:71:f2:e1:24:32:68:83:74:c7:50:ac: 9b:66:18:da:14:81:28:d8:e7:a5:6f:86:a7:3a:00:53:96:51: 75:ce:19:31:da:d6:37:78:83:b6:ed:65:0f:79:c8:f1:0d:63: d3:bc:8a:4a:5f:2a:a3:c9:9b:5f:fc:59:f8:80:3d:24:d3:4d: 51:6a:a0:79:8d:52:76:ad:1d:99:47:1c:0a:fd:50:6f:b1:68: bb:7f:c4:d4:4e:02:15:cd:46:aa:01:c6:df:48:82:66:13:17: a1:cb:51:c9:99:ce:cc:9e:94:ab:65:18:a2:80:c5:cc:98:e5: 50:3f:cc:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwOTE2MjEzNjA1WhcNMjUwOTIzMjEzNjA1WjAYMRYwFAYD VQQDEw02OGM5ZDg0Ni00ZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IPMExwWh6ETX1wPgcNcouzfe6oNsydxGCZH1WQvcYD4LUStEuHqNC3BO3U4 eiYPa6AxE4uvTLDUKDnXmTScq4XKBvC1ZDCth/Dhm4mkmtovzVPPiRVjGYw2cCNG O/qKvYQpeM4ST1YS/Yd91zdolxu7P9D/Anr5rIGoelilC+YVQptCpd5tTN3yo0Iz pDmh7jF2X3eRYJ49a8D3njuRDllufERjLJ1+dF2mBtfirT5rTfWQHEw59Mdj/oMo Dz3dsUPeIVca9N1euZBSZscniRNnbczpdb70Cmk/PqokenoxWOaPMfuMSrark1w8 DDjyRJ9W2ZznOYKzRLRMlPo/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/fi43D CtHuznF938scCe07y6e5MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYyXpD9k19dHFvgzGn7mHijkA3PMOdxOQCH/CquIHlqQqgfCFcDaS8 LzcFVcrdCVwxJLLPxBamPmqdr0+LLjVKq8SBlt1FK2LNyWiTZDA0P4DUYKg2a4hi WFHvPpAbmuR8N6juzOAzDcntifrkjsGacNMq8katmE/pCDwNCcFZJ1ePkxkgcfLh JDJog3THUKybZhjaFIEo2Oelb4anOgBTllF1zhkx2tY3eIO27WUPecjxDWPTvIpK XyqjyZtf/Fn4gD0k001RaqB5jVJ2rR2ZRxwK/VBvsWi7f8TUTgIVzUaqAcbfSIJm Exehy1HJmc7MnpSrZRiigMXMmOVQP8wD -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:20 2025 by rpki-client