$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: zNQT3s97bFFmrSKTMj/wABx+cniUHyIH17DebPGw1kQ= Subject key identifier: 84:EE:AE:69:24:1B:79:9F:D8:90:D7:DE:8D:EE:91:D9:2B:80:EF:DB Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 016B Signing time: Thu 21 Aug 2025 04:02:35 +0000 Manifest this update: Thu 21 Aug 2025 04:02:34 +0000 Manifest next update: Thu 28 Aug 2025 04:02:34 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 2DUL/Xbfd0NTKlEDsDkJ+MNN3j6aTBivbbSnBR2i2U8=) 2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: 7mVuQ3E5O7SHzP2lHVSGMO1XS8RjhP+KUyO8u78EdqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: Aug 21 04:02:34 2025 GMT Not After : Aug 28 04:02:34 2025 GMT Subject: CN=68a69a5b-9589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:05:8a:0b:b9:c1:69:d5:d3:b7:bb:84:03: ba:51:32:4a:61:63:9b:9a:db:f7:9f:6a:af:42:87: d0:4a:8c:8b:00:c6:1d:3a:65:cd:60:a6:b1:83:26: b4:cc:27:4f:ab:4e:c2:37:74:5a:1f:9b:f0:74:3e: 40:2a:a9:de:cb:0f:4a:44:0a:78:e7:30:a5:00:38: 07:e1:72:be:3a:5d:a8:e0:ad:0d:b6:5d:71:87:61: 95:48:39:d8:65:22:cb:dc:f9:58:1c:88:76:4e:54: 24:00:2d:4f:3f:b8:9e:59:e1:38:40:50:38:2d:2a: 28:7a:34:f0:07:fe:1c:95:a1:37:be:01:7d:92:6f: 6c:cb:6d:0b:ba:25:b1:2c:16:7a:ff:51:b8:53:46: f8:f2:cd:a4:60:2f:b7:b1:80:22:ca:c1:42:d9:d5: b8:48:db:fd:43:94:3b:a7:bf:d2:3e:dd:c5:fd:80: af:91:9b:f1:08:a2:59:ca:47:78:68:a1:52:d1:ff: 97:ce:5e:b8:58:50:d9:43:dc:86:e1:bd:84:9a:98: 17:b3:3d:8d:60:e3:a2:ff:a9:d4:1d:b5:1a:6f:2d: c9:66:fe:0e:0f:ea:25:0a:05:cc:9f:97:ae:31:c3: ef:ef:82:db:1b:b6:f7:38:b2:66:0e:9b:ac:a6:35: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:AE:69:24:1B:79:9F:D8:90:D7:DE:8D:EE:91:D9:2B:80:EF:DB X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:96:05:30:11:b3:aa:9c:a9:8c:47:05:7e:79:2a:2a:c0:cb: 50:8d:d7:b5:12:dc:1b:9f:57:26:57:0d:19:a3:97:da:41:65: 73:20:06:71:9a:85:ee:12:8b:dd:b8:ec:e4:ee:ca:0c:ba:10: 8f:27:c0:af:61:54:ee:1f:6e:de:ca:b6:2d:42:ba:7a:8e:e4: d6:a7:14:fc:d7:03:00:fe:c0:ec:42:ff:50:6e:48:e2:31:5e: f0:2e:52:7c:44:a1:cf:cc:ef:fc:34:5e:3d:7d:55:2f:d7:a5: 17:58:54:49:de:fd:56:dd:40:cf:64:ef:1f:01:fe:66:5f:ce: 8e:ac:ff:ea:d9:c1:ef:99:7e:c2:3b:75:96:e4:9c:dc:dd:33: 1d:64:71:a7:ae:d3:97:10:23:b7:a7:94:0f:5e:89:e0:8e:16: cc:e8:4e:47:af:7e:26:db:cb:a9:7f:c1:b0:60:2c:3b:ce:54: 1d:12:d2:17:4a:19:97:71:45:39:10:ae:95:2b:47:f4:ef:e7: 6f:4f:51:25:0a:7d:83:93:b7:5a:f8:aa:19:78:57:a1:17:ce: b2:89:e3:35:0b:32:62:93:ab:8b:09:ab:7b:2d:f5:a9:2a:a5: 06:ad:f0:4a:ae:41:7b:aa:30:0c:ab:da:ab:27:d5:20:10:cd: 6f:4d:e7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjUwODIxMDQwMjM0WhcNMjUwODI4MDQwMjM0WjAYMRYwFAYD VQQDEw02OGE2OWE1Yi05NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsIFigu5wWnV07e7hAO6UTJKYWObmtv3n2qvQofQSoyLAMYdOmXNYKaxgya0 zCdPq07CN3RaH5vwdD5AKqneyw9KRAp45zClADgH4XK+Ol2o4K0Ntl1xh2GVSDnY ZSLL3PlYHIh2TlQkAC1PP7ieWeE4QFA4LSooejTwB/4claE3vgF9km9sy20LuiWx LBZ6/1G4U0b48s2kYC+3sYAiysFC2dW4SNv9Q5Q7p7/SPt3F/YCvkZvxCKJZykd4 aKFS0f+Xzl64WFDZQ9yG4b2EmpgXsz2NYOOi/6nUHbUaby3JZv4OD+olCgXMn5eu McPv74LbG7b3OLJmDpuspjVWfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITurmkk G3mf2JDX3o3ukdkrgO/bMB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNlgUwEbOqnKmMRwV+eSoqwMtQjde1Etwbn1cmVw0Zo5faQWVzIAZx moXuEovduOzk7soMuhCPJ8CvYVTuH27eyrYtQrp6juTWpxT81wMA/sDsQv9Qbkji MV7wLlJ8RKHPzO/8NF49fVUv16UXWFRJ3v1W3UDPZO8fAf5mX86OrP/q2cHvmX7C O3WW5Jzc3TMdZHGnrtOXECO3p5QPXongjhbM6E5Hr34m28upf8GwYCw7zlQdEtIX ShmXcUU5EK6VK0f07+dvT1ElCn2Dk7da+KoZeFehF86yieM1CzJik6uLCat7LfWp KqUGrfBKrkF7qjAMq9qrJ9UgEM1vTeem -----END CERTIFICATE-----Generated at Sat Aug 23 03:26:14 2025 by rpki-client