$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: hnwhPPlupzYZstEvxMiLqCnRcvO5KaR/avTFXRaSIjM= Subject key identifier: B5:7D:96:AB:84:20:7C:5B:C5:03:7D:46:DC:F1:64:AF:A7:FC:FA:FB Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 90 Signing time: Thu 03 Jul 2025 06:45:27 +0000 Manifest this update: Thu 03 Jul 2025 06:45:26 +0000 Manifest next update: Thu 10 Jul 2025 06:45:26 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: B9GioTzAy08g0eggnVopB4GJCvRDVjyvp0J6Gr3Rj4M=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Jul 3 06:45:26 2025 GMT Not After : Jul 10 06:45:26 2025 GMT Subject: CN=68662706-54e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fd:6a:b5:40:97:4a:82:31:36:b4:ae:fc:35: 76:c7:a7:10:fa:f1:ad:b9:1e:60:89:6a:36:bd:66: ea:4e:da:ab:86:b6:3e:51:94:a4:c5:89:c8:bd:05: ee:c2:6e:52:80:85:ef:28:5a:b7:bb:25:56:df:bf: 37:5e:a2:6e:e6:49:25:46:09:fe:c8:39:56:7b:4c: fd:01:ae:9e:cf:ac:7a:24:24:a7:6f:24:15:3e:64: 2b:99:e1:be:17:b3:f3:a2:3b:11:54:25:2e:91:60: 3a:d1:8c:a0:a6:fb:e8:25:c2:45:5a:9e:e5:a3:09: 35:0e:7a:4b:a5:83:c9:f9:5e:86:16:80:b3:50:e0: f8:ac:67:6d:83:0c:ad:28:bb:59:5a:64:95:b4:54: 4c:df:bc:62:e6:ad:c6:e3:2d:14:84:5f:b2:ff:28: 74:c6:35:be:f0:93:c7:bd:61:87:d6:70:29:1b:ef: 52:a0:a8:28:fd:c1:5c:1e:f0:f3:84:78:12:17:ad: 05:19:6e:2f:57:c6:3d:d0:94:04:fe:fa:5e:7f:43: 03:d7:aa:4c:b7:18:fe:55:01:1a:cb:c8:15:36:ff: a9:64:8e:80:45:3b:19:2d:b6:c7:16:14:09:49:2f: 9d:57:1f:02:af:f5:2f:bf:af:12:ee:c2:0a:c6:bf: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:96:AB:84:20:7C:5B:C5:03:7D:46:DC:F1:64:AF:A7:FC:FA:FB X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:90:43:54:dc:62:c9:51:57:d9:cc:96:93:3b:73:3e:ca:27: 86:39:cf:58:a7:d7:cb:db:ed:f7:18:cf:b9:29:4f:5e:61:b4: 2f:56:fa:7d:1d:ca:53:09:b4:30:f7:34:bd:b2:bc:01:b9:ad: 60:6b:2f:8d:c3:18:cc:cf:0d:be:a4:ca:c8:b1:e6:d9:a0:cc: 81:e1:ca:2d:94:7c:1c:81:0c:cf:0a:f9:1a:8a:ae:b2:44:7a: 68:48:de:6e:f0:b5:d4:1d:fd:62:42:e7:ab:5d:16:fb:e7:56: 77:62:07:e4:34:81:6b:d9:8c:c1:fc:ab:a1:96:04:c2:29:1b: c5:75:88:91:23:ed:66:36:1d:94:4a:bb:3a:49:1d:e3:09:0d: 6c:f0:ef:e9:b5:c2:b3:c4:4e:8b:4d:d3:5b:16:0f:81:06:6e: 1f:56:f8:2b:4b:13:04:01:3b:8d:ff:f2:1f:66:36:b9:ea:0f: 14:16:dc:c0:15:89:2b:e5:e5:d5:f2:20:89:3d:41:ae:a4:12: d1:b0:c8:c5:7e:c3:3e:54:31:2e:07:a1:77:a2:a4:b8:34:cd: e0:e8:3f:74:19:c8:bc:45:51:a7:99:40:de:df:82:96:f2:9f: 4d:48:6c:8a:89:1c:4e:65:0a:8a:d1:94:01:f8:2b:b1:7e:09: 00:2e:6f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUwNzAzMDY0NTI2WhcNMjUwNzEwMDY0NTI2WjAYMRYwFAYD VQQDEw02ODY2MjcwNi01NGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/1qtUCXSoIxNrSu/DV2x6cQ+vGtuR5giWo2vWbqTtqrhrY+UZSkxYnIvQXu wm5SgIXvKFq3uyVW3783XqJu5kklRgn+yDlWe0z9Aa6ez6x6JCSnbyQVPmQrmeG+ F7PzojsRVCUukWA60YygpvvoJcJFWp7lowk1DnpLpYPJ+V6GFoCzUOD4rGdtgwyt KLtZWmSVtFRM37xi5q3G4y0UhF+y/yh0xjW+8JPHvWGH1nApG+9SoKgo/cFcHvDz hHgSF60FGW4vV8Y90JQE/vpef0MD16pMtxj+VQEay8gVNv+pZI6ARTsZLbbHFhQJ SS+dVx8Cr/Uvv68S7sIKxr8KUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV9lquE IHxbxQN9RtzxZK+n/Pr7MB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqkENU3GLJUVfZzJaTO3M+yieGOc9Yp9fL2+33GM+5KU9eYbQvVvp9 HcpTCbQw9zS9srwBua1gay+NwxjMzw2+pMrIsebZoMyB4cotlHwcgQzPCvkaiq6y RHpoSN5u8LXUHf1iQuerXRb751Z3YgfkNIFr2YzB/KuhlgTCKRvFdYiRI+1mNh2U Srs6SR3jCQ1s8O/ptcKzxE6LTdNbFg+BBm4fVvgrSxMEATuN//IfZja56g8UFtzA FYkr5eXV8iCJPUGupBLRsMjFfsM+VDEuB6F3oqS4NM3g6D90Gci8RVGnmUDe34KW 8p9NSGyKiRxOZQqK0ZQB+CuxfgkALm97 -----END CERTIFICATE-----Generated at Thu Jul 3 09:28:38 2025 by rpki-client