$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: G7yigi5LBUksufpGXzOhFmI++xZezAvK5ZYbs5mc0nY= Subject key identifier: 5F:B0:CB:86:C5:E6:C1:9A:D5:16:35:D8:A9:32:24:F4:38:72:5E:4D Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 040D Signing time: Thu 21 Aug 2025 00:31:00 +0000 Manifest this update: Thu 21 Aug 2025 00:31:00 +0000 Manifest next update: Thu 28 Aug 2025 00:31:00 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: VdOAnZgiexfMwNE/YT+5Dd3B5T+gc9cONmtw+ffzDGM=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: tkOHoIczvR2mvnPtwO2I6CTO8JqQ7Ha6TbdyLv7Jiak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Aug 21 00:31:00 2025 GMT Not After : Aug 28 00:31:00 2025 GMT Subject: CN=68a668c4-eb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:4c:ff:4a:a4:17:56:9f:9d:07:83:e6:ff: b2:c4:bb:e9:b4:8d:14:b3:50:f4:91:c8:21:ac:ba: a3:38:74:93:93:a1:2f:7b:2d:9d:3e:d8:06:3e:97: da:c7:14:73:e8:bf:76:b3:25:c5:ca:40:a0:7b:a1: 53:18:10:77:df:b6:96:ba:3c:c4:f7:1d:1f:d9:36: fe:b4:67:32:7a:ed:28:97:e8:6e:15:d7:41:d6:1f: cb:bc:1d:b2:60:f8:f8:7c:a9:a7:14:5d:1b:4f:66: 49:c9:bd:ec:84:79:e9:3e:14:55:b2:68:8b:63:9d: 08:c0:a3:9a:ff:20:db:28:6f:53:13:b6:a2:26:a7: e0:d5:10:66:23:35:35:68:99:de:83:af:77:6f:a1: 48:35:80:07:16:13:2c:e3:24:95:20:8a:2e:6c:a9: 69:22:c9:07:22:90:36:49:a8:5a:c3:94:a9:35:54: c6:cb:a7:56:32:0a:b6:13:56:45:4e:b5:80:55:0e: 75:31:8b:8f:d8:bb:ba:cf:b5:e2:6d:c4:05:fb:19: 1e:35:50:cb:87:99:08:c5:a4:ee:37:bc:29:47:9e: 71:e5:db:2e:35:b7:9b:7e:fa:9c:c0:70:73:28:e9: 4a:b5:cf:32:fd:7b:b1:67:e6:75:23:a7:65:b1:11: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B0:CB:86:C5:E6:C1:9A:D5:16:35:D8:A9:32:24:F4:38:72:5E:4D X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:76:c0:a7:b7:6f:b0:62:5f:fb:2a:d6:23:4d:29:7e:ed:98: ad:e7:b3:1d:29:0b:8a:2c:02:a4:6a:a8:04:45:93:64:09:c5: 3a:f2:11:0a:b0:ed:85:9c:d0:e6:9d:a5:8c:75:17:e6:c1:25: 79:52:a8:8d:6a:78:dc:8e:59:2c:75:c0:85:54:af:42:31:9a: e9:15:5a:67:2b:e8:50:2c:fe:fe:72:72:16:cc:19:e7:8b:e3: fc:c2:53:98:ad:85:c1:0b:f7:46:f6:d1:4e:84:0f:5f:0a:ea: ce:35:72:20:06:78:c3:64:35:63:35:ae:78:c0:54:6e:34:04: ef:0a:5f:fc:87:40:3d:14:73:48:08:18:4b:13:8e:28:bd:6d: 4c:7f:73:fe:86:40:b0:08:76:5d:bd:fa:11:46:0d:e8:a9:a9: b3:56:27:91:04:fe:a9:fa:7d:ab:e5:ad:78:8f:af:0b:c2:4d: d8:e8:f5:30:f8:4a:5a:f5:95:00:46:ce:fc:e3:cc:d7:58:5f: e4:da:a8:72:e3:c6:0f:e4:ab:ef:c0:94:6c:c0:80:ec:99:ba: ff:ab:ec:2e:7c:ac:d6:27:5f:d5:41:c2:6b:4b:25:6d:34:f1: 5c:cc:d4:eb:65:1f:a5:14:c6:9d:cb:63:73:36:fd:69:a8:a8: 91:15:09:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjUwODIxMDAzMTAwWhcNMjUwODI4MDAzMTAwWjAYMRYwFAYD VQQDEw02OGE2NjhjNC1lYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUpM/0qkF1afnQeD5v+yxLvptI0Us1D0kcghrLqjOHSTk6Evey2dPtgGPpfa xxRz6L92syXFykCge6FTGBB337aWujzE9x0f2Tb+tGcyeu0ol+huFddB1h/LvB2y YPj4fKmnFF0bT2ZJyb3shHnpPhRVsmiLY50IwKOa/yDbKG9TE7aiJqfg1RBmIzU1 aJneg693b6FINYAHFhMs4ySVIIoubKlpIskHIpA2Sahaw5SpNVTGy6dWMgq2E1ZF TrWAVQ51MYuP2Lu6z7XibcQF+xkeNVDLh5kIxaTuN7wpR55x5dsuNbebfvqcwHBz KOlKtc8y/XuxZ+Z1I6dlsRHknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+wy4bF 5sGa1RY12KkyJPQ4cl5NMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3dsCnt2+wYl/7KtYjTSl+7Zit57MdKQuKLAKkaqgERZNkCcU68hEK sO2FnNDmnaWMdRfmwSV5UqiNanjcjlksdcCFVK9CMZrpFVpnK+hQLP7+cnIWzBnn i+P8wlOYrYXBC/dG9tFOhA9fCurONXIgBnjDZDVjNa54wFRuNATvCl/8h0A9FHNI CBhLE44ovW1Mf3P+hkCwCHZdvfoRRg3oqamzVieRBP6p+n2r5a14j68Lwk3Y6PUw +Epa9ZUARs7848zXWF/k2qhy48YP5KvvwJRswIDsmbr/q+wufKzWJ1/VQcJrSyVt NPFczNTrZR+lFMady2NzNv1pqKiRFQnv -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:44 2025 by rpki-client