$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: Lx75LVMT5Vtv9ZZ2/sjgwMvhR6vH7QRD1LOeqmUFobE= Subject key identifier: B7:21:CD:E2:C7:BD:A4:2B:98:27:92:4E:3D:8E:4F:60:3C:E5:DE:0F Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02E4 Signing time: Wed 17 Sep 2025 01:47:24 +0000 Manifest this update: Wed 17 Sep 2025 01:47:23 +0000 Manifest next update: Wed 24 Sep 2025 01:47:23 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: 0XFDNdiYLjMIQO7LMy+IKPvSdue7e2l6vT81TwCFQic=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Sep 17 01:47:23 2025 GMT Not After : Sep 24 01:47:23 2025 GMT Subject: CN=68ca132b-41da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:d0:7d:26:56:a8:f6:fc:d4:89:2b:94:50: dd:2a:fe:7f:55:0b:7a:b0:90:71:cb:58:43:06:41: 8c:e1:56:86:db:42:e2:2a:80:69:af:44:d9:40:fa: 06:ab:4d:73:43:dc:95:63:8f:74:e0:d3:97:96:6a: 09:b2:8f:05:52:f1:f9:4b:06:cd:88:71:2a:e8:25: 81:2f:06:6c:18:a2:91:51:79:65:ba:27:46:10:8f: ba:b2:4d:d8:7a:50:df:a7:36:bd:91:69:f9:ee:80: ff:60:09:16:ea:1a:c2:1d:79:ef:cd:83:77:7e:b0: 28:74:63:58:7c:d1:ee:b8:e8:52:75:28:a5:06:92: 3a:a3:63:0a:b1:ac:f5:28:7a:10:39:ff:1a:ef:56: da:d6:cc:62:64:87:10:79:9c:41:c2:97:7b:a7:9b: 84:d8:15:e6:97:a3:54:25:79:0f:e9:2c:86:1d:7c: 28:12:cb:90:b7:34:1f:a0:61:a6:94:b7:8f:a4:10: 81:f0:f4:fe:1e:1a:96:1d:9c:9b:d9:c5:69:8c:64: 17:76:c6:f1:dc:e0:01:29:54:36:65:04:33:a5:e5: 40:78:d5:ea:09:c8:92:58:23:97:e0:55:65:cf:44: e1:24:e0:06:7a:1a:2f:06:46:ad:86:d1:d3:d3:9d: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:CD:E2:C7:BD:A4:2B:98:27:92:4E:3D:8E:4F:60:3C:E5:DE:0F X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:3b:7a:9d:8e:6c:88:42:c8:f3:8f:fd:b0:45:72:87:14:db: 1e:ac:ca:56:2e:a8:72:62:bd:3e:16:53:50:1e:61:3a:ff:7f: f8:11:f3:4d:d0:5f:2b:44:b3:a0:a7:ba:af:38:04:98:0e:1b: 8a:0f:c4:a2:3b:d1:f9:22:6f:0f:95:5d:7d:d4:0b:8d:c8:3a: 69:60:08:de:74:d5:ff:fe:19:dd:3c:21:97:e8:e9:fc:be:8b: f1:f6:a5:c3:b0:5a:e2:dc:d2:57:f5:35:d4:d6:8c:69:06:15: 9b:e4:13:82:78:91:ef:01:b9:b9:65:2b:f9:1a:b4:2e:3d:56: c6:0b:a7:9d:91:13:f1:41:1f:d8:40:b1:15:2b:53:7d:7e:36: 54:13:5f:01:1a:9d:c5:e5:ed:6c:ef:8f:cb:ae:79:59:17:55: 28:31:c5:6c:12:fd:7e:3d:07:0c:38:30:ee:14:ce:27:bd:d6: b1:89:fd:2b:e8:4b:67:8e:3f:cf:07:7e:f7:2b:32:4d:57:00: d3:45:f0:76:f5:3e:91:ed:76:ae:21:69:8f:bc:cb:79:67:54: 0a:80:6d:6c:83:5a:fb:ff:f1:9b:14:a4:46:0a:f8:8b:83:c2: c1:69:aa:b7:79:2b:0f:b5:67:4f:76:65:32:32:29:43:6f:a0: 85:d8:9f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwOTE3MDE0NzIzWhcNMjUwOTI0MDE0NzIzWjAYMRYwFAYD VQQDEw02OGNhMTMyYi00MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPbQfSZWqPb81IkrlFDdKv5/VQt6sJBxy1hDBkGM4VaG20LiKoBpr0TZQPoG q01zQ9yVY4904NOXlmoJso8FUvH5SwbNiHEq6CWBLwZsGKKRUXlluidGEI+6sk3Y elDfpza9kWn57oD/YAkW6hrCHXnvzYN3frAodGNYfNHuuOhSdSilBpI6o2MKsaz1 KHoQOf8a71ba1sxiZIcQeZxBwpd7p5uE2BXml6NUJXkP6SyGHXwoEsuQtzQfoGGm lLePpBCB8PT+HhqWHZyb2cVpjGQXdsbx3OABKVQ2ZQQzpeVAeNXqCciSWCOX4FVl z0ThJOAGehovBkathtHT052LgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLchzeLH vaQrmCeSTj2OT2A85d4PMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqO3qdjmyIQsjzj/2wRXKHFNserMpWLqhyYr0+FlNQHmE6/3/4EfNN 0F8rRLOgp7qvOASYDhuKD8SiO9H5Im8PlV191AuNyDppYAjedNX//hndPCGX6On8 vovx9qXDsFri3NJX9TXU1oxpBhWb5BOCeJHvAbm5ZSv5GrQuPVbGC6edkRPxQR/Y QLEVK1N9fjZUE18BGp3F5e1s74/LrnlZF1UoMcVsEv1+PQcMODDuFM4nvdaxif0r 6Etnjj/PB373KzJNVwDTRfB29T6R7XauIWmPvMt5Z1QKgG1sg1r7//GbFKRGCviL g8LBaaq3eSsPtWdPdmUyMilDb6CF2J// -----END CERTIFICATE-----Generated at Thu Sep 18 23:09:10 2025 by rpki-client