$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: z3lvgCYVQyfPwKtH56qQrgRyhd/YkPnrXAVKTy696Is= Subject key identifier: 5C:CF:58:F7:4E:B2:14:58:49:82:8A:A4:22:43:96:00:5A:B8:9A:11 Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 014D Signing time: Thu 21 Aug 2025 04:24:14 +0000 Manifest this update: Thu 21 Aug 2025 04:24:14 +0000 Manifest next update: Thu 28 Aug 2025 04:24:14 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: EjtOGeKfmqRHXk3dsR54G5EJNMQMFMRuCGuvrQygHGU=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: Aug 21 04:24:14 2025 GMT Not After : Aug 28 04:24:14 2025 GMT Subject: CN=68a69f6e-cfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:f5:dd:84:6c:1a:8b:43:ad:50:1a:06:f0: 39:7c:48:44:da:9b:14:13:81:0d:8a:6b:19:2f:64: eb:08:81:1f:6e:f8:3c:5d:52:20:1a:1c:46:76:c4: fe:a1:3e:c2:66:5a:6c:cf:cb:1a:a1:d6:15:a6:7d: 6b:6e:2a:2c:2a:5e:eb:65:43:81:71:7e:d5:13:73: 4d:c5:74:94:9e:a5:a3:6f:d2:17:c9:ac:de:29:72: 29:d2:e5:7f:b2:23:6f:bd:9b:cb:1e:00:2f:db:c4: 90:20:4d:aa:81:22:3b:66:f0:81:ba:28:1f:0a:f8: 41:b4:fa:2a:28:61:46:20:9c:ef:7e:9c:cf:13:8f: 5a:5f:d1:37:76:df:c1:89:79:1f:7d:a6:1b:c0:2d: b9:bd:ec:ac:0a:41:e3:2b:e0:b0:5e:4a:b3:f7:1d: 43:45:e6:62:0b:11:22:61:f2:b5:35:51:5a:19:b6: 93:02:62:f8:5c:62:5a:88:46:b2:19:64:0e:43:ed: 22:80:a8:6a:af:b1:0d:6d:40:fa:7c:48:82:61:4b: b9:1a:bc:e8:77:05:6e:a4:d0:05:a5:db:08:d0:aa: 96:81:2e:32:1e:66:d6:42:db:57:46:be:7d:64:97: 2e:fb:56:56:c7:e5:71:c3:79:90:60:51:9a:f3:3b: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:58:F7:4E:B2:14:58:49:82:8A:A4:22:43:96:00:5A:B8:9A:11 X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d6:aa:0e:31:2b:72:de:36:60:90:4f:03:a5:f0:f2:d3:b6: 4b:94:b4:41:70:53:ba:69:38:97:2e:e9:79:97:1f:96:f7:60: 3d:c7:cb:7a:0b:f6:67:06:f5:38:16:0a:60:ba:a5:ae:34:9e: 8b:a3:1e:6d:46:89:53:7b:be:e8:4f:e3:ff:f3:cc:90:4b:a1: 67:80:76:7f:32:18:a6:fc:9b:06:fd:5a:e1:a7:8a:2b:6c:69: 93:52:a2:2a:cc:03:bc:2a:df:e5:e3:7e:de:fa:c4:92:bc:5c: 16:78:c4:b0:ca:2d:79:9f:ed:1a:6a:48:84:ad:5e:4c:85:fe: f3:56:db:73:90:56:c3:b2:dd:77:dd:1f:50:f9:9b:f0:05:f5: 50:06:15:8c:45:a6:31:89:53:bf:75:f9:54:8a:04:81:70:66: 5c:8a:51:88:e0:86:31:10:6d:eb:d3:71:bc:b7:a9:3d:56:fa: a5:d3:c7:cf:92:e6:4d:92:10:50:3f:c6:9c:dc:35:b4:b0:2a: 26:e5:b2:e6:76:1e:c0:50:0e:d9:5b:93:73:76:a1:94:f3:b0: ba:a3:ea:be:bc:37:ac:1f:e9:a6:1f:a0:bf:d2:e9:32:d3:75: 4d:85:98:f3:8a:fc:3d:48:f2:9d:41:97:7d:44:be:a4:1e:58: 38:a3:27:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF MDJBOUE3QTQwHhcNMjUwODIxMDQyNDE0WhcNMjUwODI4MDQyNDE0WjAYMRYwFAYD VQQDEw02OGE2OWY2ZS1jZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Fr13YRsGotDrVAaBvA5fEhE2psUE4ENimsZL2TrCIEfbvg8XVIgGhxGdsT+ oT7CZlpsz8saodYVpn1rbiosKl7rZUOBcX7VE3NNxXSUnqWjb9IXyazeKXIp0uV/ siNvvZvLHgAv28SQIE2qgSI7ZvCBuigfCvhBtPoqKGFGIJzvfpzPE49aX9E3dt/B iXkffaYbwC25veysCkHjK+CwXkqz9x1DReZiCxEiYfK1NVFaGbaTAmL4XGJaiEay GWQOQ+0igKhqr7ENbUD6fEiCYUu5GrzodwVupNAFpdsI0KqWgS4yHmbWQttXRr59 ZJcu+1ZWx+Vxw3mQYFGa8zuemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzPWPdO shRYSYKKpCJDlgBauJoRMB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2 QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm YmFTdU50bmdERVRnS3BwNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1qoOMSty3jZgkE8DpfDy07ZLlLRBcFO6aTiXLul5lx+W92A9x8t6 C/ZnBvU4FgpguqWuNJ6Lox5tRolTe77oT+P/88yQS6FngHZ/Mhim/JsG/Vrhp4or bGmTUqIqzAO8Kt/l437e+sSSvFwWeMSwyi15n+0aakiErV5Mhf7zVttzkFbDst13 3R9Q+ZvwBfVQBhWMRaYxiVO/dflUigSBcGZcilGI4IYxEG3r03G8t6k9Vvql08fP kuZNkhBQP8ac3DW0sCom5bLmdh7AUA7ZW5NzdqGU87C6o+q+vDesH+mmH6C/0uky 03VNhZjzivw9SPKdQZd9RL6kHlg4oycR -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:39 2025 by rpki-client