$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: JPjWIbIAyRVj6FhCEHTx0OoHoEzhN8JXoV9jbfnSzIY= Subject key identifier: 30:CC:DF:27:FE:7A:94:4C:F1:C1:86:7F:69:75:93:63:A3:08:5E:A8 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 013E Signing time: Sun 07 Sep 2025 04:48:06 +0000 Manifest this update: Sun 07 Sep 2025 04:48:05 +0000 Manifest next update: Sun 14 Sep 2025 04:48:05 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: ypbwWjLV83VV2RhFuZ0Dg7zfq/bMM3DkzVBdIr0Ld4o=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Sep 7 04:48:05 2025 GMT Not After : Sep 14 04:48:05 2025 GMT Subject: CN=68bd0e86-269a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:bf:88:dc:99:77:97:82:10:22:55:aa:1b: 49:69:0e:61:44:5a:ec:22:57:2e:0f:ae:c5:95:5a: a4:01:e1:bc:f4:ae:b9:e8:a8:26:75:67:94:43:1d: 2d:9b:45:24:67:05:a4:0f:64:49:04:6e:60:e3:00: da:98:f4:13:8c:ae:3e:75:f2:15:26:82:1e:e0:12: 5a:67:41:b2:d7:e0:b2:6c:b5:d4:4c:46:8a:69:c9: d4:bf:86:d5:d2:74:4f:14:f9:cd:fa:91:d4:40:a9: 21:d6:e1:cb:e4:d1:74:0f:98:b0:69:d5:ec:cb:2d: ed:13:69:b7:52:8f:7c:6c:58:f0:58:3a:e9:c4:2e: f2:87:2c:c7:e6:0f:58:b0:35:1d:96:08:90:6e:f9: dd:9b:c3:92:1c:7d:09:e3:34:c1:60:07:06:29:e1: a2:5c:72:f6:65:65:94:18:c3:2b:f2:e8:cc:7b:cc: 13:a1:70:3b:53:75:76:75:f7:be:12:cd:84:49:0e: cf:92:f6:05:29:ce:5a:40:86:82:83:43:b9:83:4f: 3c:26:b0:fe:51:2a:0e:de:f4:c3:9b:28:1f:8f:b5: 4a:09:3c:a9:b9:8c:fe:44:1f:8e:a6:77:ea:b6:bf: 09:6f:23:32:b9:cf:29:18:3a:1b:bf:e6:65:30:c7: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:DF:27:FE:7A:94:4C:F1:C1:86:7F:69:75:93:63:A3:08:5E:A8 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:77:35:40:8b:5a:16:51:29:e8:90:37:ce:7c:00:f1:cd:0b: fc:ca:ff:cd:c9:da:9f:b2:ab:69:c7:8e:fa:49:4c:e6:81:8d: 46:b7:ff:ca:63:d2:33:26:4a:5d:29:03:15:2f:06:b5:a3:fc: 35:f4:0f:01:d4:ac:2a:be:62:08:92:54:40:cf:1e:65:64:09: 82:74:5d:4a:3f:ed:20:a7:8c:f2:e6:1c:c5:7b:0f:d3:b6:4c: 17:3a:c1:31:f1:90:f1:51:55:9f:7c:3f:c5:a9:6d:93:a1:1c: b8:ef:fd:f9:1b:c7:c2:c2:5c:0e:90:b5:83:11:ca:ec:1d:c3: 95:dc:ab:1b:8a:75:54:84:b9:d2:c9:8d:e1:19:12:79:b5:9a: 8e:93:db:44:af:b7:d0:3c:92:60:1c:4c:85:d3:66:73:e4:a4: 12:1e:8c:3c:d8:01:ad:87:84:50:f5:8e:74:b6:d2:dc:98:7e: 93:b6:2e:97:7e:af:f6:56:c1:18:33:b3:81:30:1f:06:31:3a: d9:4b:9c:90:6c:2d:bb:27:de:df:96:0b:2f:52:02:9e:c6:43: 4f:0b:fa:c0:55:b9:a6:a0:e9:ed:71:6c:d4:d5:99:2f:7f:d0: c0:ac:2d:39:ec:e4:d6:a9:af:91:19:ff:47:af:39:af:26:1a: f6:63:55:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwOTA3MDQ0ODA1WhcNMjUwOTE0MDQ0ODA1WjAYMRYwFAYD VQQDEw02OGJkMGU4Ni0yNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLS/iNyZd5eCECJVqhtJaQ5hRFrsIlcuD67FlVqkAeG89K656KgmdWeUQx0t m0UkZwWkD2RJBG5g4wDamPQTjK4+dfIVJoIe4BJaZ0Gy1+CybLXUTEaKacnUv4bV 0nRPFPnN+pHUQKkh1uHL5NF0D5iwadXsyy3tE2m3Uo98bFjwWDrpxC7yhyzH5g9Y sDUdlgiQbvndm8OSHH0J4zTBYAcGKeGiXHL2ZWWUGMMr8ujMe8wToXA7U3V2dfe+ Es2ESQ7PkvYFKc5aQIaCg0O5g088JrD+USoO3vTDmygfj7VKCTypuYz+RB+Opnfq tr8JbyMyuc8pGDobv+ZlMMe+JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDM3yf+ epRM8cGGf2l1k2OjCF6oMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGdzVAi1oWUSnokDfOfADxzQv8yv/Nydqfsqtpx476SUzmgY1Gt//K Y9IzJkpdKQMVLwa1o/w19A8B1KwqvmIIklRAzx5lZAmCdF1KP+0gp4zy5hzFew/T tkwXOsEx8ZDxUVWffD/FqW2ToRy47/35G8fCwlwOkLWDEcrsHcOV3KsbinVUhLnS yY3hGRJ5tZqOk9tEr7fQPJJgHEyF02Zz5KQSHow82AGth4RQ9Y50ttLcmH6Tti6X fq/2VsEYM7OBMB8GMTrZS5yQbC27J97flgsvUgKexkNPC/rAVbmmoOntcWzU1Zkv f9DArC057OTWqa+RGf9HrzmvJhr2Y1WA -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:26 2025 by rpki-client