$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: /f83/ZM9z4+io8PKE9YInCo+YQRTmQWjzsqsEOc0Ab8= Subject key identifier: 97:4E:22:B2:48:9F:42:0A:75:A8:29:E8:54:14:EF:3C:50:B2:6C:F9 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 0647 Signing time: Mon 30 Jun 2025 23:00:50 +0000 Manifest this update: Mon 30 Jun 2025 23:00:49 +0000 Manifest next update: Mon 07 Jul 2025 23:00:49 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: SjIm1kx2tLM7m3OhKEluelTU2eS8JkkpVhFyiSaSI/Y=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: vh0GgYCDzl5MpyGfL9qB9BZe6rjSGvbzU8V9PATHokg=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Jun 30 23:00:49 2025 GMT Not After : Jul 7 23:00:49 2025 GMT Subject: CN=68631722-befa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:ea:23:55:a4:ab:35:07:9c:6b:e7:ae:ed: 4e:7b:73:76:ac:46:ba:d8:05:77:7b:a8:74:18:99: 71:df:5e:02:0b:0b:1a:75:81:37:5c:5c:c5:65:0b: 00:49:b3:e8:b9:a1:61:3b:68:7e:fd:d1:7e:27:38: 8e:9d:f9:e7:34:62:ba:15:0d:bb:a4:8e:42:1b:a9: 00:c6:96:4e:5b:58:c0:ed:b4:6b:d7:a0:65:2b:65: 72:b1:b2:eb:21:99:4f:c4:5f:c3:11:f6:58:12:73: 2d:96:58:c1:19:ac:b7:81:72:da:84:94:4c:25:24: 7a:56:c8:c1:43:e6:a6:f3:df:86:5a:77:66:e7:fa: 55:1b:30:eb:ac:d1:c9:cb:3d:b6:21:3b:8c:09:2b: 72:98:eb:9a:48:00:62:53:3c:05:ae:5c:f9:e3:6e: 02:72:55:53:23:56:3b:d7:69:d2:b6:94:57:3f:9d: 84:e9:97:e1:cd:3d:61:59:34:3a:86:1e:19:7b:c4: 34:39:c0:7e:03:10:b8:36:07:31:75:59:68:af:26: bf:03:79:d5:22:77:35:48:37:ba:1e:ec:ed:0c:ce: 4a:27:c0:9c:b9:d8:ae:ea:4b:ea:8a:d0:56:9f:af: f5:00:e1:c4:89:1c:46:9d:b1:11:17:d5:98:ad:d1: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4E:22:B2:48:9F:42:0A:75:A8:29:E8:54:14:EF:3C:50:B2:6C:F9 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:16:8b:90:64:17:5a:8a:b2:dc:2a:31:fd:c9:8c:4c:82:3d: c9:69:a0:26:fc:bb:fe:e5:9a:0d:6c:55:be:cf:70:1f:31:9c: c7:1d:be:b3:b2:b9:a8:ee:57:1c:86:fc:d1:a3:d4:0e:c0:79: ce:fd:cb:e0:01:d5:36:e5:f1:06:bd:30:2e:02:a1:61:4c:13: c7:8e:8d:7b:8c:dc:f1:53:75:02:1a:f6:73:e3:2c:d6:a8:6d: 97:8c:d3:35:dc:cb:ab:e0:c2:96:57:8b:4a:32:26:a4:d1:a9: 96:b7:59:d8:9f:3a:b4:02:69:00:85:22:9b:5f:5d:d3:d5:d3: 01:a5:11:14:a0:de:32:9f:b6:f6:91:74:e0:2f:fe:a2:1c:51: aa:0d:88:04:bd:b4:92:56:8b:d0:11:35:f2:72:66:32:35:bf: 7b:01:36:91:9c:e9:85:a2:0f:0a:31:87:db:a9:7b:0c:fa:5f: 94:77:5c:b8:83:76:3a:04:a5:04:3f:fd:08:53:5c:cc:fc:11: a1:38:ee:a2:64:e8:e9:ea:85:31:05:82:69:51:4a:32:63:bf: 50:e4:d9:8e:0e:56:3d:97:7e:bc:f5:4e:7e:5f:e0:10:6b:0b: b2:75:79:41:7e:ef:26:67:38:a4:fd:3b:20:82:27:d0:b9:41: ba:9e:41:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNjMwMjMwMDQ5WhcNMjUwNzA3MjMwMDQ5WjAYMRYwFAYD VQQDEw02ODYzMTcyMi1iZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5jqI1WkqzUHnGvnru1Oe3N2rEa62AV3e6h0GJlx314CCwsadYE3XFzFZQsA SbPouaFhO2h+/dF+JziOnfnnNGK6FQ27pI5CG6kAxpZOW1jA7bRr16BlK2VysbLr IZlPxF/DEfZYEnMtlljBGay3gXLahJRMJSR6VsjBQ+am89+GWndm5/pVGzDrrNHJ yz22ITuMCStymOuaSABiUzwFrlz5424CclVTI1Y712nStpRXP52E6ZfhzT1hWTQ6 hh4Ze8Q0OcB+AxC4NgcxdVlorya/A3nVInc1SDe6HuztDM5KJ8Ccudiu6kvqitBW n6/1AOHEiRxGnbERF9WYrdGbPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdOIrJI n0IKdagp6FQU7zxQsmz5MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLFouQZBdairLcKjH9yYxMgj3JaaAm/Lv+5ZoNbFW+z3AfMZzHHb6z srmo7lcchvzRo9QOwHnO/cvgAdU25fEGvTAuAqFhTBPHjo17jNzxU3UCGvZz4yzW qG2XjNM13Mur4MKWV4tKMiak0amWt1nYnzq0AmkAhSKbX13T1dMBpREUoN4yn7b2 kXTgL/6iHFGqDYgEvbSSVovQETXycmYyNb97ATaRnOmFog8KMYfbqXsM+l+Ud1y4 g3Y6BKUEP/0IU1zM/BGhOO6iZOjp6oUxBYJpUUoyY79Q5NmODlY9l3689U5+X+AQ awuydXlBfu8mZzik/TsggifQuUG6nkFv -----END CERTIFICATE-----Generated at Wed Jul 2 23:19:30 2025 by rpki-client