$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft File: Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft (raw, json) Hash identifier: 6T0CFYUTzf4bxLEoesJRbfDX5itRUliM/a9PC5mgf0o= Subject key identifier: 2A:6E:B9:C1:6B:4F:DA:F1:F5:58:6A:46:81:78:87:D6:01:F7:45:B0 Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA Certificate issuer: /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft Manifest number: 016D Signing time: Sat 23 Aug 2025 03:58:08 +0000 Manifest this update: Sat 23 Aug 2025 03:58:07 +0000 Manifest next update: Sat 30 Aug 2025 03:58:07 +0000 Files and hashes: 1: Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl (hash: IBsUahMCEKZ5a9/j/T6VI0vQYGRjELdeyype+kqhioU=) 2: 7AE89AF4513511EE88C64E20C4F9AE02.roa (hash: 5LGDu0CCi6DfJNCRARsLcv5edhJaqrMRVu8YSoKbd1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118009, serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA Validity Not Before: Aug 23 03:58:07 2025 GMT Not After : Aug 30 03:58:07 2025 GMT Subject: CN=68a93c50-63b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:44:de:fe:45:39:3b:22:e8:39:bf:b6:2c: 03:cd:39:2a:e8:cb:ce:74:0c:0c:e3:3e:0c:60:eb: ae:66:51:8e:7b:5b:d2:38:48:d0:2b:e2:94:b0:17: b1:0b:95:4c:b2:33:5a:45:bc:c5:b0:39:10:ce:1c: cb:03:80:93:3d:ef:8c:bd:dd:98:bb:e4:97:74:01: 8f:bf:94:3c:ff:e2:0f:53:48:0a:53:c3:9d:4d:6a: 9f:86:80:f0:83:c3:10:9e:e7:09:9f:69:4d:ac:e6: 0d:56:9f:ae:fb:60:4f:3c:a6:12:39:bf:25:52:92: 66:c9:23:2f:d2:c8:3d:6a:5a:13:1d:98:f7:1b:8a: 9c:0f:79:72:a9:2e:3d:80:f5:a9:8f:dc:d6:96:76: 0e:2b:4a:5b:95:94:0c:fa:fd:fa:3d:45:76:ed:75: 81:dd:0a:fb:8d:2e:c6:fc:a2:82:b4:ba:66:5f:76: ee:dc:6c:1a:5a:d3:e8:ec:42:9c:26:7f:15:c8:81: b2:00:72:10:74:cf:99:f7:fd:89:24:99:09:95:69: b1:fb:fc:a9:be:ca:73:b4:68:56:92:ff:93:7f:93: 62:24:60:11:00:44:b3:a1:88:5f:54:49:47:c3:06: 68:db:3b:95:db:4f:de:f2:e2:17:e6:4f:9c:90:92: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6E:B9:C1:6B:4F:DA:F1:F5:58:6A:46:81:78:87:D6:01:F7:45:B0 X509v3 Authority Key Identifier: keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3e:6d:a7:5c:75:a8:fa:7d:07:1e:c5:ab:d7:50:ba:a6:8b: bf:8d:14:d3:91:76:47:d2:df:9c:e5:ed:12:66:9b:0f:1f:00: 73:80:e6:4f:77:1f:72:b7:10:74:2c:6c:0b:24:bf:9a:1a:b2: 5c:99:e4:19:82:45:bf:da:04:70:20:e5:40:a0:b2:0b:02:92: a5:af:ff:c4:54:32:e6:e8:1a:3e:01:a4:9a:65:a2:02:de:28: 38:a5:fe:ff:39:e4:28:47:3a:2e:00:a2:75:84:b0:f5:7f:ff: d3:8a:77:2c:f6:b2:85:9a:db:96:6d:eb:66:c4:98:12:60:12: 44:91:6c:1b:e7:10:5c:bc:8a:75:8a:4b:7a:f6:01:9c:1b:be: 79:e2:a0:cf:bb:46:dd:84:5e:62:b5:ab:79:83:69:65:c6:df: 84:a7:c8:82:07:ad:5d:a3:c5:95:b8:e1:a5:6a:dd:28:00:f4: cd:53:b7:68:4a:bf:7d:96:b1:9e:b7:97:42:9e:28:71:73:4c: 7a:53:06:db:f4:45:6d:13:29:bd:fd:be:2b:20:6b:04:6a:80: 89:e7:bd:cb:31:62:01:83:9c:7c:b1:95:60:22:43:89:c9:9c: c3:65:4c:9f:5e:44:19:20:d3:59:f2:da:71:2a:67:9b:1a:26: 1d:f5:89:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMDkxMTAvBgNVBAUTKDJEQkVERDg4RUIyQjJEQzQ3Q0I1MzA5MEMzQTM4NTFG QzY1MjRFQ0EwHhcNMjUwODIzMDM1ODA3WhcNMjUwODMwMDM1ODA3WjAYMRYwFAYD VQQDEw02OGE5M2M1MC02M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkBE3v5FOTsi6Dm/tiwDzTkq6MvOdAwM4z4MYOuuZlGOe1vSOEjQK+KUsBex C5VMsjNaRbzFsDkQzhzLA4CTPe+Mvd2Yu+SXdAGPv5Q8/+IPU0gKU8OdTWqfhoDw g8MQnucJn2lNrOYNVp+u+2BPPKYSOb8lUpJmySMv0sg9aloTHZj3G4qcD3lyqS49 gPWpj9zWlnYOK0pblZQM+v36PUV27XWB3Qr7jS7G/KKCtLpmX3bu3GwaWtPo7EKc Jn8VyIGyAHIQdM+Z9/2JJJkJlWmx+/ypvspztGhWkv+Tf5NiJGARAESzoYhfVElH wwZo2zuV20/e8uIX5k+ckJLKmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpuucFr T9rx9VhqRoF4h9YB90WwMB8GA1UdIwQYMBaAFC2+3YjrKy3EfLUwkMOjhR/GUk7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAwOS9FMzVBQ0FGNDUx MzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxjUjh0VENRdzZPRkg4WlNU c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xiN2RpT3NyTGNSOHRUQ1F3Nk9GSDhaU1Rzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAwOS9FMzVBQ0FGNDUxMzQxMUVFQTM5MjRFMUZDNEY5QUUwMi9MYjdkaU9zckxj Ujh0VENRdzZPRkg4WlNUc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAePm2nXHWo+n0HHsWr11C6pou/jRTTkXZH0t+c5e0SZpsPHwBzgOZP dx9ytxB0LGwLJL+aGrJcmeQZgkW/2gRwIOVAoLILApKlr//EVDLm6Bo+AaSaZaIC 3ig4pf7/OeQoRzouAKJ1hLD1f//Tincs9rKFmtuWbetmxJgSYBJEkWwb5xBcvIp1 ikt69gGcG7554qDPu0bdhF5itat5g2llxt+Ep8iCB61do8WVuOGlat0oAPTNU7do Sr99lrGet5dCnihxc0x6Uwbb9EVtEym9/b4rIGsEaoCJ573LMWIBg5x8sZVgIkOJ yZzDZUyfXkQZINNZ8tpxKmebGiYd9YlX -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:41 2025 by rpki-client