$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: W4dopzZliVyQRWBAGX4+H0OithIYA9SBXnZ2p9w0ULA= Subject key identifier: 8C:68:C3:46:CD:12:99:F3:B1:7C:08:93:8B:2C:9D:73:B3:1C:13:FB Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01E2 Signing time: Thu 03 Jul 2025 02:50:32 +0000 Manifest this update: Thu 03 Jul 2025 02:50:32 +0000 Manifest next update: Thu 10 Jul 2025 02:50:32 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: CTfIvug/be+z9vdYUpPAIko1idpYHeQVKiQIKeJqNmg=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Jul 3 02:50:32 2025 GMT Not After : Jul 10 02:50:32 2025 GMT Subject: CN=6865eff8-12f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:54:2a:77:82:97:70:5f:80:79:5b:3e:18: 28:06:12:a5:9c:f8:67:8d:f4:19:fc:90:92:4d:cf: 3c:1c:7c:f2:e1:d7:e8:85:ed:36:af:af:87:05:de: b9:6d:04:90:29:cc:bc:04:b6:3e:a2:76:82:e7:e5: c3:c1:bf:79:99:36:40:30:c6:9a:7c:bb:06:8a:55: 18:36:ad:e4:60:13:37:58:8d:1f:05:73:3d:d5:e8: 2f:26:e0:75:04:5a:96:98:8a:ca:85:7c:98:39:25: dc:08:64:75:99:07:ab:76:4c:34:c1:68:b1:0b:8d: e2:33:c0:52:37:ed:40:9c:ce:29:4d:02:04:07:51: 72:1e:68:9b:92:1d:e4:a4:3d:59:e4:d3:96:3e:7b: f5:5e:40:56:d5:d8:7a:01:3d:75:f4:ed:6b:ba:1b: c4:9d:96:6e:59:a6:16:92:f6:6c:ee:d2:8f:0c:c7: 5a:ae:02:89:81:24:8a:9f:da:ec:a0:61:34:27:ba: 08:cb:77:ee:b6:a0:58:0a:52:5c:d4:66:8b:b9:a3: ac:19:5a:e1:f7:82:ea:04:ea:df:ee:aa:12:33:6a: eb:d8:b3:8a:d9:86:bf:6f:6d:be:79:04:5e:49:69: 5c:48:7d:89:a0:48:8e:e9:52:8c:7c:ab:3e:43:9d: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:C3:46:CD:12:99:F3:B1:7C:08:93:8B:2C:9D:73:B3:1C:13:FB X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:ba:3a:df:b4:f1:f9:9b:18:35:08:74:2e:4e:7f:49:00: 2e:01:45:b3:f7:93:aa:5e:fd:6d:9c:2f:25:27:60:cd:c9:b8: b9:23:ae:2d:21:95:ea:bd:ff:af:29:4f:41:b9:48:2c:1d:4d: a8:48:fa:2f:84:be:e8:4f:39:a1:3f:25:fd:a2:a7:58:3e:d6: b3:1a:f7:d2:56:8d:7a:ba:1e:a5:a7:21:88:e0:59:64:c5:a1: 49:8a:ad:8b:ff:38:ab:ad:d1:3f:39:00:06:0d:2b:37:46:53: 95:6c:88:c8:71:0f:7a:3a:3e:f7:67:8a:32:3a:5f:4f:51:05: 4b:25:62:a3:92:c2:4a:ac:53:f8:5b:00:1e:b9:e7:50:e1:cf: 22:2c:95:42:ca:c7:14:f7:28:0e:b6:c2:1d:1c:6f:6b:37:6b: 50:6c:da:3f:35:cd:bb:a9:ce:9e:6e:da:92:7f:db:f2:3d:e9: 43:14:67:1e:81:f7:78:7a:a8:ec:1d:d5:d9:ab:e4:4b:0d:b0: d2:4d:65:83:75:bc:95:27:b6:83:c7:19:6e:29:27:87:44:64: 6b:77:27:81:f4:65:e0:b0:d0:b1:fc:49:47:2b:58:ca:a8:d5: 08:82:29:90:f2:46:b0:be:14:a0:26:45:e9:f5:8f:66:37:11: c0:15:8c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNzAzMDI1MDMyWhcNMjUwNzEwMDI1MDMyWjAYMRYwFAYD VQQDEw02ODY1ZWZmOC0xMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqBUKneCl3BfgHlbPhgoBhKlnPhnjfQZ/JCSTc88HHzy4dfohe02r6+HBd65 bQSQKcy8BLY+onaC5+XDwb95mTZAMMaafLsGilUYNq3kYBM3WI0fBXM91egvJuB1 BFqWmIrKhXyYOSXcCGR1mQerdkw0wWixC43iM8BSN+1AnM4pTQIEB1FyHmibkh3k pD1Z5NOWPnv1XkBW1dh6AT119O1ruhvEnZZuWaYWkvZs7tKPDMdargKJgSSKn9rs oGE0J7oIy3futqBYClJc1GaLuaOsGVrh94LqBOrf7qoSM2rr2LOK2Ya/b22+eQRe SWlcSH2JoEiO6VKMfKs+Q50xUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxow0bN EpnzsXwIk4ssnXOzHBP7MB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYp7o637Tx+ZsYNQh0Lk5/SQAuAUWz95OqXv1tnC8lJ2DNybi5I64t IZXqvf+vKU9BuUgsHU2oSPovhL7oTzmhPyX9oqdYPtazGvfSVo16uh6lpyGI4Flk xaFJiq2L/zirrdE/OQAGDSs3RlOVbIjIcQ96Oj73Z4oyOl9PUQVLJWKjksJKrFP4 WwAeuedQ4c8iLJVCyscU9ygOtsIdHG9rN2tQbNo/Nc27qc6ebtqSf9vyPelDFGce gfd4eqjsHdXZq+RLDbDSTWWDdbyVJ7aDxxluKSeHRGRrdyeB9GXgsNCx/ElHK1jK qNUIgimQ8kawvhSgJkXp9Y9mNxHAFYxh -----END CERTIFICATE-----Generated at Fri Jul 4 18:02:59 2025 by rpki-client