$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: T7dSNkXBpPtpkKeZv+Flxpv4amL/B0zMbrFWkn0HJz4= Subject key identifier: 95:83:4B:14:95:D4:7B:50:BC:AC:AF:FB:BB:B5:A6:64:E6:7C:37:AE Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02AA Signing time: Sat 31 May 2025 01:40:23 +0000 Manifest this update: Sat 31 May 2025 01:40:23 +0000 Manifest next update: Sat 07 Jun 2025 01:40:23 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: s3Po1N44X8JQiOqmMcKegT84Dn2KiQj15hFq8eJ5bRA=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: QEMOAgpk78T4cfgnhZBQcgORRh937yPLAJRwPHTKv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: May 31 01:40:23 2025 GMT Not After : Jun 7 01:40:23 2025 GMT Subject: CN=683a5e07-6af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:f8:9a:70:89:bb:9b:2e:f4:1e:da:b9:77: c2:27:13:d4:50:68:93:33:d7:65:18:0a:43:95:3b: 72:51:17:08:a6:f9:bd:73:47:85:8d:be:c8:dc:ca: 4f:af:37:20:62:be:80:c0:b8:eb:66:45:be:28:28: 46:88:70:08:c5:5d:2b:28:ab:b1:3d:b4:51:90:ca: ea:90:77:35:6e:50:ac:c7:9d:83:a8:3d:9d:73:e0: 4f:65:ac:8d:40:9f:27:16:f2:45:fa:a0:61:e7:2c: 2c:3e:8b:be:25:e8:52:a1:77:fb:53:ed:b2:b8:3f: 13:41:f5:9c:2a:01:57:cf:3a:8e:be:36:d4:86:b2: 89:bb:4d:ec:7e:13:f8:8b:24:b8:3f:b3:ff:f9:4f: b1:6e:a3:73:7b:38:97:3e:a1:7a:0f:85:3c:d4:e3: 8f:7d:a6:d4:af:11:1c:9a:80:77:e7:8e:2f:53:69: 55:9b:aa:1e:48:29:a8:10:b8:8c:81:ed:1e:3a:c5: d9:ae:cf:03:77:8c:85:75:02:2d:1b:ab:fe:0e:0f: 24:a3:60:6a:63:36:af:25:cb:88:ef:cb:77:f7:25: 8e:04:e8:78:24:7a:46:4c:2b:ca:9a:b4:24:5b:6d: 11:a9:90:80:89:3e:2e:d2:da:d1:87:20:62:f6:af: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:4B:14:95:D4:7B:50:BC:AC:AF:FB:BB:B5:A6:64:E6:7C:37:AE X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:84:1d:6a:ec:cb:36:2c:1f:0c:4b:9c:fd:4e:62:2a:2e:ec: 46:36:74:46:5a:ad:83:20:3d:8c:b2:f5:94:bf:c6:e1:91:72: 00:50:42:7d:6c:b3:3c:8e:d0:cb:5f:c8:c6:76:f9:2b:0a:39: bf:8b:73:75:0e:98:c6:5f:c1:ee:15:10:da:13:71:68:10:a8: f7:8f:86:e4:07:61:01:45:ca:d7:84:e9:2a:04:58:22:c0:91: cb:f3:f2:a9:2c:a0:f4:d2:8c:d2:d3:3f:6b:92:02:ea:99:69: 31:4d:ed:e9:7c:ba:32:69:88:09:99:b4:26:9f:74:5c:ca:f2: 3b:fd:85:58:bb:41:bc:bc:39:04:f2:7b:29:08:a8:e1:5d:eb: a1:ea:5b:a9:37:21:50:2a:42:c5:ca:3c:23:7c:10:2c:49:f3: 4c:66:f5:3b:cd:e6:87:4c:c2:10:0d:b2:76:01:8c:17:6a:e9: 22:1b:b0:1b:9c:1b:0c:ce:35:06:49:b0:c9:2d:31:cc:7f:b5: 6c:1b:9b:1e:e8:5c:96:df:23:d4:3b:18:54:77:c4:02:df:8b: f7:0f:f1:38:8e:3b:ca:f8:98:e5:9e:d2:3c:b9:e2:9f:c5:6f: 9e:9f:f4:43:de:e3:c0:8d:8f:23:3d:bd:d7:78:3a:ce:2e:d1: 93:2e:2d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwNTMxMDE0MDIzWhcNMjUwNjA3MDE0MDIzWjAYMRYwFAYD VQQDEw02ODNhNWUwNy02YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZz4mnCJu5su9B7auXfCJxPUUGiTM9dlGApDlTtyURcIpvm9c0eFjb7I3MpP rzcgYr6AwLjrZkW+KChGiHAIxV0rKKuxPbRRkMrqkHc1blCsx52DqD2dc+BPZayN QJ8nFvJF+qBh5ywsPou+JehSoXf7U+2yuD8TQfWcKgFXzzqOvjbUhrKJu03sfhP4 iyS4P7P/+U+xbqNzeziXPqF6D4U81OOPfabUrxEcmoB3544vU2lVm6oeSCmoELiM ge0eOsXZrs8Dd4yFdQItG6v+Dg8ko2BqYzavJcuI78t39yWOBOh4JHpGTCvKmrQk W20RqZCAiT4u0trRhyBi9q/FWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWDSxSV 1HtQvKyv+7u1pmTmfDeuMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9hB1q7Ms2LB8MS5z9TmIqLuxGNnRGWq2DID2MsvWUv8bhkXIAUEJ9 bLM8jtDLX8jGdvkrCjm/i3N1DpjGX8HuFRDaE3FoEKj3j4bkB2EBRcrXhOkqBFgi wJHL8/KpLKD00ozS0z9rkgLqmWkxTe3pfLoyaYgJmbQmn3RcyvI7/YVYu0G8vDkE 8nspCKjhXeuh6lupNyFQKkLFyjwjfBAsSfNMZvU7zeaHTMIQDbJ2AYwXaukiG7Ab nBsMzjUGSbDJLTHMf7VsG5se6FyW3yPUOxhUd8QC34v3D/E4jjvK+JjlntI8ueKf xW+en/RD3uPAjY8jPb3XeDrOLtGTLi2O -----END CERTIFICATE-----Generated at Sat May 31 16:38:52 2025 by rpki-client