$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: oR8X0aFFa3q4MV34me/nt8oWFtVJvveRCQoTsDOyiBE= Subject key identifier: 69:2B:47:E4:92:AA:83:13:5C:61:20:DA:AC:AA:F5:C1:95:66:C1:2E Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 02:38:05 +0000 Manifest this update: Sat 23 Aug 2025 02:38:05 +0000 Manifest next update: Sat 30 Aug 2025 02:38:05 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: mIGbhgG095lxGTy2fnOc8h8T1XpZWUseZRykjzHQK+I=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Aug 23 02:38:05 2025 GMT Not After : Aug 30 02:38:05 2025 GMT Subject: CN=68a9298d-7ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:b4:69:62:f9:d2:14:f0:2c:e8:9a:c7:52: 12:c5:12:97:0f:3f:b6:43:08:4f:60:fc:7e:7b:c9: 11:17:d4:16:2c:16:5a:1f:99:d7:0c:38:41:58:4e: a5:60:4b:dd:14:7c:26:de:b2:02:d9:48:cd:82:9b: aa:a2:6f:96:6d:82:c4:2e:71:30:be:a5:4d:41:a7: 73:ab:03:34:23:34:96:62:e4:f2:fd:25:5a:59:8f: 81:52:1e:07:20:46:6c:68:d2:15:dc:de:3d:5e:92: dd:04:84:00:99:e7:a1:59:7c:fa:23:26:36:0d:8c: 4a:3b:7b:60:34:9d:24:73:af:ea:61:d2:66:31:33: 1d:5f:5a:f1:09:27:5c:12:f3:70:a9:5b:60:de:66: d5:f6:9d:ab:a3:cd:26:ba:ed:93:39:0d:9b:42:e7: a0:09:da:ec:11:4e:92:ac:2e:1a:f2:ff:d6:2e:e0: 0d:f5:3b:dd:f0:62:e4:36:d3:b0:13:21:0b:e9:ab: 3d:f1:9d:7d:b0:f5:13:26:f7:26:fe:a0:3c:25:86: e2:1a:75:40:82:0f:ae:7b:c2:66:f2:69:1a:f2:58: e5:b8:29:c2:ab:3f:d4:73:f5:da:3d:8f:22:15:18: f3:b5:54:53:bf:48:77:c1:9f:3d:57:bc:92:b6:ff: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:47:E4:92:AA:83:13:5C:61:20:DA:AC:AA:F5:C1:95:66:C1:2E X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b5:f4:71:9d:c4:42:a9:96:66:bf:c0:31:f1:ac:8f:46:96: 40:ff:f3:5d:45:91:5c:5d:05:65:8b:f9:14:50:a9:84:80:9d: 7a:d5:ba:da:02:16:c4:82:5c:05:2e:ca:85:e9:4c:ee:40:ab: 27:1a:2c:8e:aa:ba:dc:10:31:5e:f6:6a:c9:86:3d:40:99:c8: 27:2f:d8:0b:00:83:94:56:9c:c7:35:30:7a:11:7c:87:3d:86: 01:f0:e4:cf:62:91:2f:b2:dc:cc:50:d9:c6:26:ad:f4:a7:0f: 41:40:27:9d:95:fb:1d:85:cb:b9:38:51:d9:27:68:a9:34:ac: 9e:dd:bf:b1:da:dd:52:0c:c8:47:95:9b:20:32:73:0f:74:14: 13:f0:ce:d3:8d:28:bd:72:19:fe:72:a1:f1:7a:2c:00:2e:09: fa:6f:1a:d9:7f:e2:42:82:b6:84:52:4c:6f:3f:c0:c5:e2:52: 24:17:62:12:f8:67:2d:e2:57:57:56:f7:b7:7f:44:63:52:30: 20:33:d9:ca:55:7d:7e:97:63:30:c0:27:7b:31:6c:bd:6b:20: 90:38:64:b8:29:82:d1:fd:71:a7:bc:ef:ec:b9:b7:78:cb:0f: 72:59:f7:51:3d:de:ed:c3:12:71:ed:d1:a9:b8:56:89:23:14: 37:e6:1b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwODIzMDIzODA1WhcNMjUwODMwMDIzODA1WjAYMRYwFAYD VQQDEw02OGE5Mjk4ZC03ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfO0aWL50hTwLOiax1ISxRKXDz+2QwhPYPx+e8kRF9QWLBZaH5nXDDhBWE6l YEvdFHwm3rIC2UjNgpuqom+WbYLELnEwvqVNQadzqwM0IzSWYuTy/SVaWY+BUh4H IEZsaNIV3N49XpLdBIQAmeehWXz6IyY2DYxKO3tgNJ0kc6/qYdJmMTMdX1rxCSdc EvNwqVtg3mbV9p2ro80muu2TOQ2bQuegCdrsEU6SrC4a8v/WLuAN9Tvd8GLkNtOw EyEL6as98Z19sPUTJvcm/qA8JYbiGnVAgg+ue8Jm8mka8ljluCnCqz/Uc/XaPY8i FRjztVRTv0h3wZ89V7yStv9lJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkrR+SS qoMTXGEg2qyq9cGVZsEuMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqtfRxncRCqZZmv8Ax8ayPRpZA//NdRZFcXQVli/kUUKmEgJ161bra AhbEglwFLsqF6UzuQKsnGiyOqrrcEDFe9mrJhj1AmcgnL9gLAIOUVpzHNTB6EXyH PYYB8OTPYpEvstzMUNnGJq30pw9BQCedlfsdhcu5OFHZJ2ipNKye3b+x2t1SDMhH lZsgMnMPdBQT8M7TjSi9chn+cqHxeiwALgn6bxrZf+JCgraEUkxvP8DF4lIkF2IS +Gct4ldXVve3f0RjUjAgM9nKVX1+l2MwwCd7MWy9ayCQOGS4KYLR/XGnvO/subd4 yw9yWfdRPd7twxJx7dGpuFaJIxQ35hsd -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:29 2025 by rpki-client