$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: VRzUEsPxeT/QLd94glGOMdcgD+67B/7NyuiqjlH1Quk= Subject key identifier: 2E:D7:D8:F5:C7:01:69:DE:1A:7B:B8:28:A1:AC:28:55:77:C1:EC:A2 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 02:36:08 +0000 Manifest this update: Sat 23 Aug 2025 02:36:07 +0000 Manifest next update: Sat 30 Aug 2025 02:36:07 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: xQqxn8hEisXbhLBJJ0GGZ5JqBPSAEbX84sGN/HM3hAg=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Aug 23 02:36:07 2025 GMT Not After : Aug 30 02:36:07 2025 GMT Subject: CN=68a92918-853d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:79:03:67:6c:dd:e7:bc:b0:60:80:f5:c2: 17:c6:ef:63:56:68:92:33:2d:68:95:d7:07:be:df: db:0e:b2:c8:c7:ed:a4:7e:3f:96:47:8d:96:3d:80: 48:97:a2:1e:b6:37:68:2d:6a:36:93:1c:e6:c9:61: ab:07:6c:b0:ec:81:be:75:b0:81:80:ca:33:95:3a: 79:4b:fd:b1:f9:50:54:82:88:6b:b6:5b:95:aa:89: a4:37:c0:bd:d1:54:19:7a:25:d3:78:59:3f:cc:e3: 4f:ab:7d:01:fd:4e:14:4c:0d:f7:79:33:1a:87:68: ae:f9:1a:27:6a:fc:97:25:02:e7:44:ef:2b:10:3f: e6:7e:29:98:27:fc:ee:c5:68:82:f1:4b:70:0c:ad: 2a:05:55:0b:73:99:89:75:f4:2d:4f:41:65:33:07: 62:7c:7d:7b:7d:f0:3f:4b:bc:bc:17:a5:9f:4b:a1: cf:26:0c:00:65:33:b0:29:79:43:21:66:95:92:02: 06:6c:c4:6e:1f:42:85:68:8a:4d:04:38:04:6c:c1: 7c:8c:bc:31:4f:10:4b:0a:d6:05:f1:cc:3c:57:e2: 8b:e0:15:dd:ea:95:a0:2f:ca:96:9b:cb:9e:a7:79: e6:f2:4b:b9:83:9e:af:f4:18:fc:f8:cd:cb:1d:5a: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:D8:F5:C7:01:69:DE:1A:7B:B8:28:A1:AC:28:55:77:C1:EC:A2 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:86:65:27:1a:ca:0e:5e:93:e4:ed:6c:e1:77:ef:83:21:6c: 10:d3:8d:73:5f:4c:f1:2c:2c:32:30:fb:04:f3:28:47:b3:7f: 61:8a:73:9b:43:97:d7:7e:f5:20:f3:a9:da:2b:76:26:02:2d: e5:65:6b:34:f1:eb:49:c5:06:44:c5:d1:c8:9c:c7:d8:99:8a: 45:d5:77:10:14:eb:d1:36:5f:e2:9c:23:31:e0:ee:06:e1:d7: d1:4d:4d:a2:ed:90:40:34:23:6e:34:3b:e3:cb:a2:3f:22:1b: fe:6f:61:d6:ec:0a:1e:4f:6f:c5:c5:2c:ad:8a:72:66:fe:13: 7a:db:6b:a3:9a:e4:98:e5:44:02:8c:13:09:8b:de:b0:a4:8b: 2a:3b:0d:e0:13:01:aa:5f:15:06:d4:54:d5:56:3b:4e:88:6e: f0:98:80:93:3c:61:20:f1:39:03:83:31:1b:67:92:98:6d:62: dd:c7:6e:71:18:66:b1:99:97:7f:7f:f3:78:ba:0d:13:e3:38: ba:ca:d7:dc:ac:97:8b:a4:1c:96:36:43:45:c3:46:be:61:69: 43:c9:91:70:41:93:7c:2f:44:40:c9:f3:67:3f:e2:dd:e3:88: 6c:89:01:7e:5d:ea:5d:51:95:c0:94:c2:6c:8f:a7:cc:10:2f: 44:15:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwODIzMDIzNjA3WhcNMjUwODMwMDIzNjA3WjAYMRYwFAYD VQQDEw02OGE5MjkxOC04NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZF5A2ds3ee8sGCA9cIXxu9jVmiSMy1oldcHvt/bDrLIx+2kfj+WR42WPYBI l6IetjdoLWo2kxzmyWGrB2yw7IG+dbCBgMozlTp5S/2x+VBUgohrtluVqomkN8C9 0VQZeiXTeFk/zONPq30B/U4UTA33eTMah2iu+RonavyXJQLnRO8rED/mfimYJ/zu xWiC8UtwDK0qBVULc5mJdfQtT0FlMwdifH17ffA/S7y8F6WfS6HPJgwAZTOwKXlD IWaVkgIGbMRuH0KFaIpNBDgEbMF8jLwxTxBLCtYF8cw8V+KL4BXd6pWgL8qWm8ue p3nm8ku5g56v9Bj8+M3LHVpOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7X2PXH AWneGnu4KKGsKFV3weyiMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhmUnGsoOXpPk7Wzhd++DIWwQ041zX0zxLCwyMPsE8yhHs39hinOb Q5fXfvUg86naK3YmAi3lZWs08etJxQZExdHInMfYmYpF1XcQFOvRNl/inCMx4O4G 4dfRTU2i7ZBANCNuNDvjy6I/Ihv+b2HW7AoeT2/FxSytinJm/hN622ujmuSY5UQC jBMJi96wpIsqOw3gEwGqXxUG1FTVVjtOiG7wmICTPGEg8TkDgzEbZ5KYbWLdx25x GGaxmZd/f/N4ug0T4zi6ytfcrJeLpByWNkNFw0a+YWlDyZFwQZN8L0RAyfNnP+Ld 44hsiQF+XepdUZXAlMJsj6fMEC9EFYHJ -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:28 2025 by rpki-client