$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: jO0gk2Ktn28iQgiZ0Vg2yCmFZROoZeAtOU+lWIuzOfM= Subject key identifier: 4D:EA:DB:8B:BF:15:3F:F7:EF:66:75:62:EA:C0:E3:6B:0B:70:2F:62 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 021F Signing time: Fri 05 Sep 2025 02:17:38 +0000 Manifest this update: Fri 05 Sep 2025 02:17:37 +0000 Manifest next update: Fri 12 Sep 2025 02:17:37 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: Ii0B6DGn289okFU0y9+kthNaNm0XSA3TFy80eNJqwBA=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Sep 5 02:17:37 2025 GMT Not After : Sep 12 02:17:37 2025 GMT Subject: CN=68ba4842-ef26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:65:c2:81:03:e1:83:ad:9c:0b:5d:fc:34:b8: fd:b5:07:9f:cb:4a:4d:e8:9a:01:4f:83:10:b5:f2: 25:b1:f5:1b:54:e9:cd:02:aa:7a:f6:d8:70:80:b9: 9a:36:20:2c:61:71:ea:c5:35:d9:00:ee:6e:38:ed: 78:2f:a3:0a:57:1c:8c:0a:67:53:c6:44:0e:c3:45: ed:cd:89:df:46:4b:71:9c:7a:19:be:93:98:f7:ad: cd:4d:3f:74:4b:fc:a0:85:cb:e2:5a:a7:13:ff:9d: 5f:61:97:b8:fd:fb:2f:2c:ca:ef:5f:60:c9:6c:82: 05:5f:ee:25:84:e1:7a:c1:61:98:4c:48:07:c7:48: ea:01:02:9e:83:4a:28:2b:c2:8d:f5:53:24:58:c1: 8c:a8:eb:5f:2d:15:f2:5c:88:e8:d1:b3:d1:eb:33: e0:ca:df:db:1b:c7:0b:bc:f0:a2:b2:b4:80:77:54: dc:00:d8:ee:02:c2:95:c5:63:8d:fd:43:bc:95:6b: e1:4b:9d:2a:5f:c1:35:17:19:e5:10:1d:15:44:43: 97:9b:7b:7a:e7:2f:2b:b8:4f:22:9d:21:c3:d1:0a: 42:1a:c5:9f:28:ff:df:d4:23:13:6e:b2:d3:c8:60: b0:72:ca:fe:4a:72:f1:41:cb:19:7e:58:08:5e:4f: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:DB:8B:BF:15:3F:F7:EF:66:75:62:EA:C0:E3:6B:0B:70:2F:62 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:57:4d:b6:47:68:47:15:f9:9b:b2:6e:6e:ce:61:b8:63:c6: 67:40:1a:c1:d5:43:2e:ba:b0:6d:b2:41:10:ac:98:a2:8a:d4: aa:4d:58:2d:01:8d:22:e6:14:d7:71:d2:35:e7:dc:d8:db:54: 2c:c3:c2:70:ab:e8:31:ce:90:7f:f0:11:6e:ca:b7:b2:ca:a2: 5b:b4:81:74:56:12:00:18:da:27:8a:0d:c4:ef:75:97:fd:95: 27:39:16:15:16:f5:3a:f5:7d:bd:48:49:2e:90:2a:01:c6:61: e8:99:88:4f:dc:a4:e3:e3:06:38:a8:4d:47:92:c4:e2:70:54: cf:67:39:1a:cc:b0:c2:37:4f:25:4f:55:04:c7:91:e0:37:91: 7f:0d:e3:0c:5e:6e:a7:2f:39:71:11:bc:24:02:30:8c:30:80: bf:3e:38:36:a0:bc:01:25:49:ff:8c:74:bd:02:e2:81:77:5b: b9:d1:9b:a6:6a:e4:37:5f:c6:a1:ee:67:45:a6:79:71:d8:1e: 09:13:38:b2:d7:33:22:89:08:c1:fd:8b:35:45:74:1c:8f:46: 7f:a1:1c:9d:08:85:68:56:1a:c9:8d:5b:60:95:2c:82:c9:4f: ae:77:39:3c:1b:86:9b:84:9a:56:42:ba:35:f7:09:c9:b9:2b: 2f:e1:c0:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUwOTA1MDIxNzM3WhcNMjUwOTEyMDIxNzM3WjAYMRYwFAYD VQQDEw02OGJhNDg0Mi1lZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22XCgQPhg62cC138NLj9tQefy0pN6JoBT4MQtfIlsfUbVOnNAqp69thwgLma NiAsYXHqxTXZAO5uOO14L6MKVxyMCmdTxkQOw0XtzYnfRktxnHoZvpOY963NTT90 S/yghcviWqcT/51fYZe4/fsvLMrvX2DJbIIFX+4lhOF6wWGYTEgHx0jqAQKeg0oo K8KN9VMkWMGMqOtfLRXyXIjo0bPR6zPgyt/bG8cLvPCisrSAd1TcANjuAsKVxWON /UO8lWvhS50qX8E1FxnlEB0VREOXm3t65y8ruE8inSHD0QpCGsWfKP/f1CMTbrLT yGCwcsr+SnLxQcsZflgIXk9VqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3q24u/ FT/372Z1YurA42sLcC9iMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbV022R2hHFfmbsm5uzmG4Y8ZnQBrB1UMuurBtskEQrJiiitSqTVgt AY0i5hTXcdI159zY21Qsw8Jwq+gxzpB/8BFuyreyyqJbtIF0VhIAGNonig3E73WX /ZUnORYVFvU69X29SEkukCoBxmHomYhP3KTj4wY4qE1HksTicFTPZzkazLDCN08l T1UEx5HgN5F/DeMMXm6nLzlxEbwkAjCMMIC/Pjg2oLwBJUn/jHS9AuKBd1u50Zum auQ3X8ah7mdFpnlx2B4JEziy1zMiiQjB/Ys1RXQcj0Z/oRydCIVoVhrJjVtglSyC yU+udzk8G4abhJpWQro19wnJuSsv4cDO -----END CERTIFICATE-----Generated at Fri Sep 5 11:33:06 2025 by rpki-client