$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: 93LTkLs9OrHJa839/We3WHjpPtEMcv6QqjnKOOJLdtE= Subject key identifier: D7:39:BE:D8:F6:30:C2:48:8A:93:2B:E8:D2:2F:48:28:82:ED:65:54 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0C6D Signing time: Wed 30 Jul 2025 18:34:05 +0000 Manifest this update: Wed 30 Jul 2025 18:34:05 +0000 Manifest next update: Wed 06 Aug 2025 18:34:05 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: aYLwBUqrPL4uTZTKhQfztKW9euvik1MdUMyM+19fUjI=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: dRoQPSF6KT1Zue8dq53bmaroAkFylgM4n0LR39Z/E84=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: 14kB3SfK8FO3TDcXjwd2x1V5vnXFwADnDTKaZlPfI5E=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: /7EkCVyzyWdgaZFFu1ty8sDFh13rW+8i+NvNFe/0Rfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 18:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Jul 30 18:34:05 2025 GMT Not After : Aug 6 18:34:05 2025 GMT Subject: CN=688a659d-4cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:9c:51:d3:07:85:0e:21:19:90:5c:2a:1d: 3d:11:da:24:f4:f3:63:05:6b:63:57:df:f5:f7:b0: 87:b6:f2:2b:c8:60:f3:6e:0a:cb:d3:9a:75:ee:39: 5f:04:5e:7e:94:3e:08:f9:18:b9:33:bc:a4:22:a2: ff:80:4c:64:2f:19:95:a3:47:ec:9d:a5:76:b0:07: d1:9c:20:bf:2a:3d:5f:f7:7e:48:f6:6b:ab:c9:97: 8e:62:b3:8d:f9:b0:e1:45:a7:93:4a:fb:46:d2:e4: 86:9f:2e:fd:ef:01:12:7e:e6:6f:68:20:ee:fa:90: a0:ed:55:f5:f5:2a:30:d2:71:33:86:49:ee:3c:aa: 26:9e:75:37:da:83:d5:b5:d6:0d:83:c8:4a:68:8f: aa:a5:10:68:10:09:ee:2d:a0:6c:9e:e8:6e:02:d5: 39:09:e2:e7:a5:46:2e:60:36:4e:61:4d:0c:76:e6: ed:b8:22:8a:30:8d:f9:84:c0:3e:cf:7a:fa:da:a2: 0b:ca:2f:3c:18:65:21:96:ef:5f:2c:aa:51:1f:e1: ab:3e:c1:7d:88:4b:2d:e6:de:51:9d:6d:03:91:47: b6:5b:9e:49:35:8b:ac:cd:78:3b:28:03:85:c2:97: 29:3e:c4:d0:a8:b4:a3:3c:2d:21:ba:96:43:5a:43: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:39:BE:D8:F6:30:C2:48:8A:93:2B:E8:D2:2F:48:28:82:ED:65:54 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c7:89:f6:87:43:61:aa:44:62:7e:62:a4:69:42:4e:4d:78: 77:99:e4:03:a7:ca:55:5a:c9:a2:7d:a3:9a:76:f8:ed:73:7f: bc:b7:44:0c:db:15:ce:de:b1:5d:94:a1:b6:dc:e2:6f:f4:08: 7b:64:95:4c:10:fd:04:0b:20:bb:05:31:1a:29:19:e1:d9:1f: 3b:14:0d:c3:12:35:1f:28:a5:0e:61:48:db:a7:cf:59:0a:05: 3e:4b:f0:ea:8f:e2:f2:77:a3:f1:41:ed:6d:2d:e1:48:b9:0b: d5:33:28:f7:1f:f4:76:58:b7:28:14:4a:3b:56:4c:a6:5c:5b: f9:81:98:81:e4:d2:b0:43:3a:c7:9d:01:a4:4e:2b:1f:10:fb: 7c:04:4c:7d:5e:30:97:e5:3b:d8:4b:d5:86:69:55:6c:5e:8c: 40:30:3b:71:27:2c:ec:0e:b6:5a:82:c2:52:30:a1:8f:11:a1: 8e:20:8e:02:73:5f:67:11:69:e2:18:93:a5:4c:c1:95:d8:1a: 84:a6:53:6d:e3:cf:5c:69:99:ed:7d:2b:ef:a8:96:82:d6:c8: 04:61:0c:2f:cd:a4:42:37:0c:40:21:e1:63:3d:a1:2c:84:81: 1d:7c:f5:7e:7b:68:6c:2e:79:95:36:4f:af:58:90:26:52:ac: fa:75:fe:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjUwNzMwMTgzNDA1WhcNMjUwODA2MTgzNDA1WjAYMRYwFAYD VQQDEw02ODhhNjU5ZC00Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB2cUdMHhQ4hGZBcKh09Edok9PNjBWtjV9/197CHtvIryGDzbgrL05p17jlf BF5+lD4I+Ri5M7ykIqL/gExkLxmVo0fsnaV2sAfRnCC/Kj1f935I9muryZeOYrON +bDhRaeTSvtG0uSGny797wESfuZvaCDu+pCg7VX19Sow0nEzhknuPKomnnU32oPV tdYNg8hKaI+qpRBoEAnuLaBsnuhuAtU5CeLnpUYuYDZOYU0MdubtuCKKMI35hMA+ z3r62qILyi88GGUhlu9fLKpRH+GrPsF9iEst5t5RnW0DkUe2W55JNYuszXg7KAOF wpcpPsTQqLSjPC0hupZDWkNiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNc5vtj2 MMJIipMr6NIvSCiC7WVUMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5x4n2h0NhqkRifmKkaUJOTXh3meQDp8pVWsmifaOadvjtc3+8t0QM 2xXO3rFdlKG23OJv9Ah7ZJVMEP0ECyC7BTEaKRnh2R87FA3DEjUfKKUOYUjbp89Z CgU+S/Dqj+Lyd6PxQe1tLeFIuQvVMyj3H/R2WLcoFEo7VkymXFv5gZiB5NKwQzrH nQGkTisfEPt8BEx9XjCX5TvYS9WGaVVsXoxAMDtxJyzsDrZagsJSMKGPEaGOII4C c19nEWniGJOlTMGV2BqEplNt489caZntfSvvqJaC1sgEYQwvzaRCNwxAIeFjPaEs hIEdfPV+e2hsLnmVNk+vWJAmUqz6df6d -----END CERTIFICATE-----Generated at Thu Jul 31 11:16:52 2025 by rpki-client