$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: mouOdP+2nYrf+eLg6qw6Xl3F1sVvnQ5/3aC7QFf+idU= Subject key identifier: A7:AA:0A:63:9C:2B:E7:04:78:88:7E:C8:C8:54:70:14:C4:02:C5:59 Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 0203 Signing time: Sat 23 Aug 2025 02:26:22 +0000 Manifest this update: Sat 23 Aug 2025 02:26:21 +0000 Manifest next update: Sat 30 Aug 2025 02:26:21 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: /WkI+vtFy6BuMg4gNPtNk5IW/dRkO4wBCjqh3n6pkYQ=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Aug 23 02:26:21 2025 GMT Not After : Aug 30 02:26:21 2025 GMT Subject: CN=68a926ce-6818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:4f:a9:69:9e:50:e2:5f:17:fc:1b:e1:a2: ee:5c:75:94:ef:d8:0f:8c:d2:63:8a:75:6b:7e:72: 40:4b:49:12:7f:00:a1:c4:9f:f5:6b:73:e1:a0:c8: 97:25:f7:77:7e:a7:3e:17:79:49:f3:c9:a6:fe:71: 42:84:a4:a2:34:01:32:fd:18:7a:ad:a4:d9:4a:f4: 65:c8:42:51:73:ed:0b:bb:71:55:ff:12:46:01:95: 7e:12:bf:d4:ff:2b:ad:01:40:ed:b1:15:9e:0e:5d: 5e:b4:cd:00:b2:ae:7d:4a:42:c6:b4:3b:23:0d:ca: a4:50:ba:a5:b2:70:6f:5c:cd:94:55:ca:ae:03:64: 8e:3d:60:d7:56:44:85:93:91:d3:c7:e5:9d:c5:9c: 5f:de:4e:8c:6d:b3:a3:75:92:ac:dc:ef:d0:4e:2e: 53:06:3f:9d:18:7f:36:1b:dc:cd:d2:af:56:f7:4b: de:af:7d:8b:f7:b0:83:d2:1d:8a:d0:c1:1b:21:8b: 67:10:fb:1a:87:7b:22:c2:04:4b:2a:9a:e6:6d:74: 2e:c5:bd:c8:04:cd:76:01:36:ec:90:4e:da:05:a9: 0a:c6:75:ee:5d:a4:d6:38:90:64:39:0a:d3:9d:e9: 76:3b:13:ed:45:f3:82:a9:e8:23:d8:5a:68:2b:3b: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:0A:63:9C:2B:E7:04:78:88:7E:C8:C8:54:70:14:C4:02:C5:59 X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:73:99:d0:4b:b5:cc:90:cc:01:92:32:a3:91:b9:e2:4b:66: 88:3b:34:28:fc:05:e9:24:51:fb:2a:db:6c:0f:f1:a8:f4:8c: 80:46:7e:12:c4:f4:83:9a:18:93:ae:1a:ed:0b:dd:ff:8c:54: 89:98:0f:e5:49:cd:5c:44:3c:94:0a:b9:ff:bb:4a:1e:be:84: cc:42:1c:66:94:a4:91:20:3e:f4:b0:83:14:5e:ab:2e:72:2a: 18:a0:a9:3d:84:ec:9f:52:b5:d5:d9:b6:b0:aa:9e:b7:6f:fd: 71:9b:28:53:1b:0b:ed:3c:25:58:6c:65:80:f1:50:1d:71:37: d3:35:97:c3:7f:a8:d3:bf:91:36:25:46:a6:d5:23:43:86:34: 2e:30:20:eb:ca:6e:71:da:23:6b:b1:84:32:aa:29:72:d1:c0: d2:6d:25:24:33:8c:d7:0c:69:8f:79:53:fc:e8:65:96:42:88: 58:26:66:1d:05:fd:cf:d6:85:ad:7a:1d:15:cf:ac:f2:b2:a3: 58:c9:6c:b6:26:54:31:ec:c3:a5:38:b4:8c:6d:08:33:de:01: 4c:8e:f3:20:3d:12:0a:df:02:5d:d1:ad:08:95:e7:cf:44:7b: d0:5c:2d:4e:e2:cc:c2:2b:9e:a1:6f:f7:1c:1b:d5:cc:10:67: 15:f1:b8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUwODIzMDIyNjIxWhcNMjUwODMwMDIyNjIxWjAYMRYwFAYD VQQDEw02OGE5MjZjZS02ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1dPqWmeUOJfF/wb4aLuXHWU79gPjNJjinVrfnJAS0kSfwChxJ/1a3PhoMiX Jfd3fqc+F3lJ88mm/nFChKSiNAEy/Rh6raTZSvRlyEJRc+0Lu3FV/xJGAZV+Er/U /yutAUDtsRWeDl1etM0Asq59SkLGtDsjDcqkULqlsnBvXM2UVcquA2SOPWDXVkSF k5HTx+WdxZxf3k6MbbOjdZKs3O/QTi5TBj+dGH82G9zN0q9W90ver32L97CD0h2K 0MEbIYtnEPsah3siwgRLKprmbXQuxb3IBM12ATbskE7aBakKxnXuXaTWOJBkOQrT nel2OxPtRfOCqegj2FpoKzuLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeqCmOc K+cEeIh+yMhUcBTEAsVZMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXc5nQS7XMkMwBkjKjkbniS2aIOzQo/AXpJFH7KttsD/Go9IyARn4S xPSDmhiTrhrtC93/jFSJmA/lSc1cRDyUCrn/u0oevoTMQhxmlKSRID70sIMUXqsu cioYoKk9hOyfUrXV2bawqp63b/1xmyhTGwvtPCVYbGWA8VAdcTfTNZfDf6jTv5E2 JUam1SNDhjQuMCDrym5x2iNrsYQyqily0cDSbSUkM4zXDGmPeVP86GWWQohYJmYd Bf3P1oWteh0Vz6zysqNYyWy2JlQx7MOlOLSMbQgz3gFMjvMgPRIK3wJd0a0IlefP RHvQXC1O4szCK56hb/ccG9XMEGcV8bjT -----END CERTIFICATE-----Generated at Sun Aug 24 00:02:52 2025 by rpki-client