$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: r8h5/c+oJG07CK7yvLJ5IMD2H4dCLZpdgaVfcmWyQFU= Subject key identifier: 22:01:A0:21:49:D9:83:64:FD:0D:A8:FE:51:22:DA:BA:4E:30:70:8F Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: F4 Signing time: Sat 23 Aug 2025 05:25:52 +0000 Manifest this update: Sat 23 Aug 2025 05:25:51 +0000 Manifest next update: Sat 30 Aug 2025 05:25:51 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: Eg9ohyRCMCqsm4nIkwutcqSdPO56DWKb/EaQ6CTtzJU=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: Aug 23 05:25:51 2025 GMT Not After : Aug 30 05:25:51 2025 GMT Subject: CN=68a950df-8e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:8a:13:f6:8d:a2:5c:7e:0b:b2:85:db:45: 8d:fe:df:2a:9d:2f:c3:2a:f5:26:df:cd:9b:6b:f7: a9:0e:8f:fb:85:42:43:a9:a7:46:fe:85:6a:53:6a: 3f:16:1f:30:4c:bf:c7:27:09:bd:25:e2:8f:29:1b: 63:4e:f3:e0:04:2c:ad:40:a5:fb:fd:ee:50:df:72: 14:89:23:a2:ba:63:af:89:f6:0a:22:11:e1:02:fc: 11:d2:f7:f7:f6:f8:ed:a0:35:16:77:f6:b0:94:77: 4d:d3:c6:74:0f:a5:27:6c:7e:aa:a3:1e:9f:25:36: 7c:74:db:54:cc:cb:77:b3:42:3d:5b:0d:b2:4f:fb: 83:7f:6b:9c:9d:23:cf:f4:fd:bc:fe:60:d4:ee:b3: eb:52:50:6d:cf:b7:2b:56:a3:8d:7b:65:cf:56:d2: af:6e:7a:59:85:a8:89:a1:2d:ec:b1:04:4b:1f:83: 0c:ea:49:3b:c1:87:e2:89:36:1c:95:9e:84:ec:f6: a9:6e:9c:3b:e8:27:b4:b9:29:10:4a:d9:0c:af:dd: 39:60:35:b1:a5:8e:48:e5:5e:3c:e0:65:5c:b7:8e: eb:c3:63:b1:1d:da:30:35:2b:b7:a0:0a:79:9b:3f: 34:2a:d3:b7:4f:33:d9:1d:ea:8c:46:a9:bb:1f:e8: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:01:A0:21:49:D9:83:64:FD:0D:A8:FE:51:22:DA:BA:4E:30:70:8F X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:0d:7c:19:1a:32:58:4b:50:51:87:c6:6e:d5:8b:e9:7d:a5: d2:58:c4:d1:40:b0:a6:fb:05:59:ec:c4:7a:81:a1:70:41:3d: 4e:47:c9:c0:b3:96:ae:d0:db:92:25:95:ac:ad:69:3f:28:36: 1b:ce:97:85:1f:7b:9a:88:f5:f9:1a:4f:12:95:c6:39:94:78: 0d:9b:d1:c6:79:ef:d1:55:11:7d:40:c0:92:07:b1:77:31:c3: 3d:3b:42:92:72:b8:97:ab:a8:0c:59:b8:b8:ad:42:25:02:0f: 06:f7:33:4f:34:86:e5:e1:b8:88:d4:5a:51:fc:ad:81:03:be: 26:35:62:32:b8:d2:54:96:49:ff:5a:fe:6f:2d:97:a2:dc:43: 49:4a:25:bc:e7:d5:6d:db:c3:78:e1:4a:92:1d:ef:d5:6e:ac: 0d:9a:a1:f5:10:f2:2b:f7:cd:80:28:40:75:6c:b9:56:f8:96: 71:e4:ca:44:97:f9:18:ca:32:90:c3:3f:cc:3b:a0:09:96:b9: 4c:c4:b8:86:d0:75:bd:5d:ad:35:48:b5:63:c5:d8:59:35:c1: 70:dd:ee:8e:f4:cd:d7:e5:05:e2:05:27:e7:e4:f0:0d:62:33: 46:1d:da:eb:41:cd:07:de:66:16:ad:93:f6:e4:e9:fa:ca:bc: 61:44:a3:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwODIzMDUyNTUxWhcNMjUwODMwMDUyNTUxWjAYMRYwFAYD VQQDEw02OGE5NTBkZi04ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NeKE/aNolx+C7KF20WN/t8qnS/DKvUm382ba/epDo/7hUJDqadG/oVqU2o/ Fh8wTL/HJwm9JeKPKRtjTvPgBCytQKX7/e5Q33IUiSOiumOvifYKIhHhAvwR0vf3 9vjtoDUWd/awlHdN08Z0D6UnbH6qox6fJTZ8dNtUzMt3s0I9Ww2yT/uDf2ucnSPP 9P28/mDU7rPrUlBtz7crVqONe2XPVtKvbnpZhaiJoS3ssQRLH4MM6kk7wYfiiTYc lZ6E7Papbpw76Ce0uSkQStkMr905YDWxpY5I5V484GVct47rw2OxHdowNSu3oAp5 mz80KtO3TzPZHeqMRqm7H+h0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIBoCFJ 2YNk/Q2o/lEi2rpOMHCPMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiDXwZGjJYS1BRh8Zu1YvpfaXSWMTRQLCm+wVZ7MR6gaFwQT1OR8nA s5au0NuSJZWsrWk/KDYbzpeFH3uaiPX5Gk8SlcY5lHgNm9HGee/RVRF9QMCSB7F3 McM9O0KScriXq6gMWbi4rUIlAg8G9zNPNIbl4biI1FpR/K2BA74mNWIyuNJUlkn/ Wv5vLZei3ENJSiW859Vt28N44UqSHe/VbqwNmqH1EPIr982AKEB1bLlW+JZx5MpE l/kYyjKQwz/MO6AJlrlMxLiG0HW9Xa01SLVjxdhZNcFw3e6O9M3X5QXiBSfn5PAN YjNGHdrrQc0H3mYWrZP25On6yrxhRKPH -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:11 2025 by rpki-client