$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: XLiw8qaD/ZI6ctD1wBpLu/GEnid5Vf0cT6xIp06ycx8= Subject key identifier: 33:AB:65:44:93:F3:91:E8:12:C6:F1:F5:DB:EA:5E:9E:20:F7:EB:CB Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 0125 Signing time: Mon 21 Jul 2025 04:45:32 +0000 Manifest this update: Mon 21 Jul 2025 04:45:31 +0000 Manifest next update: Mon 28 Jul 2025 04:45:31 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: y7x7UbBtvL8tdneX+NKHrjhyfoKtFH/hJHbPseB2PoU=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Jul 21 04:45:31 2025 GMT Not After : Jul 28 04:45:31 2025 GMT Subject: CN=687dc5ec-25e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:54:6e:f9:68:d0:18:c5:bc:ea:ac:ea:99: a6:5c:e2:03:7a:2d:7c:b3:ee:c1:1f:0f:e9:f6:ee: e8:7b:70:cf:e0:aa:e5:b6:81:50:bc:72:3b:46:11: 0d:73:f3:d2:d1:7b:1c:6e:9e:e0:27:8f:74:57:3b: ef:38:40:a9:1c:18:28:85:47:8e:4a:7d:91:be:65: 0a:8c:9d:43:b6:d6:17:5b:83:33:a8:38:de:86:e8: cf:82:89:77:87:ae:66:bd:8a:95:39:18:a1:4e:d1: 69:e9:80:b4:3a:b7:b7:6b:4b:01:62:f2:e3:08:d5: 06:4c:8a:c6:75:ff:05:ad:fa:48:16:df:62:d8:61: ee:89:e9:35:06:b0:74:a6:55:99:8e:06:cf:56:42: 57:f4:1f:d0:f8:f2:21:f7:4b:34:27:ae:2a:3c:d3: 36:4d:01:f3:0f:00:4b:3e:ca:23:dd:ec:47:a5:70: e6:29:60:5b:d7:32:e1:72:4f:7c:dc:f3:65:4b:13: fd:ca:88:67:b9:ed:01:50:aa:59:38:e4:3a:0e:b8: c3:97:bf:f9:cc:14:f4:ad:6f:5c:c2:60:93:16:c9: 32:bf:0e:ed:3e:fd:c4:94:bb:9a:97:56:ea:b6:aa: 08:0e:63:95:94:a7:08:3d:c7:a9:3f:c5:02:cc:8b: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:65:44:93:F3:91:E8:12:C6:F1:F5:DB:EA:5E:9E:20:F7:EB:CB X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:04:da:6e:0a:5c:36:82:a2:56:bc:3c:fb:f0:d5:3f:5a: 11:69:ea:40:d4:86:3b:c1:3b:e5:b2:09:da:73:39:e3:b1:ce: 51:7f:d6:3b:c2:dd:51:e4:e1:64:14:cd:75:96:b6:b1:5c:68: ba:81:9f:a7:b4:2d:e2:b5:c3:66:05:89:97:0b:72:e2:42:53: 0a:2a:1d:91:65:57:75:9b:ae:4b:18:76:cf:1d:3c:43:38:c5: bc:52:c4:ce:0b:c9:59:34:bf:cb:83:c1:d5:ee:85:af:e9:77: 7e:4c:25:8f:37:fd:be:4b:b6:9f:e6:d3:ab:e9:1a:f9:bd:f8: 3d:56:82:e2:bf:fd:cf:60:f9:31:80:cb:57:c6:a4:9b:87:3b: ad:54:d3:12:73:d8:27:5d:63:af:57:9c:4e:2d:f3:3e:ae:12: ba:9f:06:70:90:4e:4c:81:5c:41:b3:9f:81:fa:e5:de:7f:16: 1d:6b:f7:a7:b0:d5:70:a5:47:36:42:1c:23:19:92:28:9b:fb: f3:17:e6:3b:8d:43:d2:0c:cd:67:0d:7a:6e:76:c2:47:6f:db: fd:44:ec:cc:58:dc:0c:fd:08:73:d6:b5:00:26:32:57:3e:4a: 2b:b9:9d:b7:84:0b:fe:c9:b9:cd:5f:d9:3a:21:08:12:39:71: f5:b9:b2:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwNzIxMDQ0NTMxWhcNMjUwNzI4MDQ0NTMxWjAYMRYwFAYD VQQDEw02ODdkYzVlYy0yNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyopUbvlo0BjFvOqs6pmmXOIDei18s+7BHw/p9u7oe3DP4KrltoFQvHI7RhEN c/PS0Xscbp7gJ490VzvvOECpHBgohUeOSn2RvmUKjJ1DttYXW4MzqDjehujPgol3 h65mvYqVORihTtFp6YC0Ore3a0sBYvLjCNUGTIrGdf8FrfpIFt9i2GHuiek1BrB0 plWZjgbPVkJX9B/Q+PIh90s0J64qPNM2TQHzDwBLPsoj3exHpXDmKWBb1zLhck98 3PNlSxP9yohnue0BUKpZOOQ6DrjDl7/5zBT0rW9cwmCTFskyvw7tPv3ElLual1bq tqoIDmOVlKcIPcepP8UCzItY4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOrZUST 85HoEsbx9dvqXp4g9+vLMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmiQTabgpcNoKiVrw8+/DVP1oRaepA1IY7wTvlsgnacznjsc5Rf9Y7 wt1R5OFkFM11lraxXGi6gZ+ntC3itcNmBYmXC3LiQlMKKh2RZVd1m65LGHbPHTxD OMW8UsTOC8lZNL/Lg8HV7oWv6Xd+TCWPN/2+S7af5tOr6Rr5vfg9VoLiv/3PYPkx gMtXxqSbhzutVNMSc9gnXWOvV5xOLfM+rhK6nwZwkE5MgVxBs5+B+uXefxYda/en sNVwpUc2QhwjGZIom/vzF+Y7jUPSDM1nDXpudsJHb9v9ROzMWNwM/Qhz1rUAJjJX PkoruZ23hAv+ybnNX9k6IQgSOXH1ubKA -----END CERTIFICATE-----Generated at Mon Jul 21 07:59:34 2025 by rpki-client