$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: xPIJgUqo+Ph98TeJACBgZN0XuPh6X7s5+7BvDOMYO7g= Subject key identifier: 8B:E0:FC:97:84:A4:A1:0E:EA:CB:FE:31:7E:E1:49:B3:29:84:B0:D6 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01C7 Signing time: Sat 19 Jul 2025 03:06:44 +0000 Manifest this update: Sat 19 Jul 2025 03:06:44 +0000 Manifest next update: Sat 26 Jul 2025 03:06:44 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: QhOOfLC+UkXsR7RysmNTim1sMmf5TellbZOr6hSWaM0=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: r2GEMiOfnscgdpCkR3elgdL+OdlduqhLjKNmAhLGMa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: Jul 19 03:06:44 2025 GMT Not After : Jul 26 03:06:44 2025 GMT Subject: CN=687b0bc4-26d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:93:1d:52:80:f5:70:b0:b2:bd:5a:27:ae: 7f:1f:62:a2:67:ac:af:9f:4c:09:66:29:ce:0f:db: ea:47:b4:e8:1b:0a:61:29:80:63:51:94:ed:1f:ab: 7b:a9:db:c6:aa:f9:43:76:1b:2f:8e:8a:6d:f0:c5: 78:0c:9b:62:08:3f:1e:07:3d:48:38:54:5c:c3:99: ee:3a:d5:8f:32:8d:b5:b5:a5:4e:2f:87:43:61:60: 55:bc:df:8a:28:ff:d9:1e:fe:f4:b9:c0:1b:82:d6: 42:89:95:62:4d:c8:67:c5:1f:3f:76:f3:7d:f4:5f: 9d:eb:9a:c2:3f:6a:da:6a:0a:da:c9:8b:a3:3d:5e: 75:de:45:43:18:63:0c:18:be:92:50:5e:b3:df:f6: 7d:c8:32:cd:ee:98:9d:7d:f1:80:3c:a1:9b:36:f9: d4:f0:7f:12:41:83:2d:ac:3c:25:63:ce:4e:78:01: 0c:d4:8c:1d:67:58:b6:f5:2c:ed:69:a3:a0:fd:0d: 0b:fa:db:3a:90:b2:4f:95:d0:92:e7:af:70:f3:0c: d7:1e:b1:63:d2:94:75:03:14:7e:a9:74:32:2a:5e: 3e:83:5b:eb:bc:68:1d:2d:b3:0b:ea:e9:c5:21:55: bb:8f:aa:f6:af:d8:24:90:88:26:02:cd:e4:eb:05: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:FC:97:84:A4:A1:0E:EA:CB:FE:31:7E:E1:49:B3:29:84:B0:D6 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:6e:d6:f2:b6:7b:ed:62:93:84:e4:19:81:db:64:82:33:d7: c3:51:bc:e3:b6:59:e7:11:f1:bb:e0:0c:8b:a6:a0:73:d2:fa: 4c:a7:d0:2e:5e:b3:4f:c0:01:74:17:11:f8:71:83:26:7c:fd: ab:59:3d:67:96:28:ed:42:b0:06:1b:53:57:57:d9:8e:7b:af: 3f:cb:79:1a:80:cb:07:6d:84:09:f9:e1:ca:4b:58:01:aa:c3: c9:c7:e5:79:02:a6:d8:45:1e:e9:96:ae:19:01:1a:b3:7b:16: 8f:e4:b9:d5:5a:e0:07:0e:8e:6f:31:9c:f3:ac:9d:51:26:03: 69:b5:0d:e3:ba:7d:29:32:c6:4c:9b:64:0b:ee:cf:75:bd:31: 03:ee:1f:a7:aa:a7:a5:88:dc:a1:86:ac:91:88:b2:37:76:50: 68:13:61:b5:91:77:0a:e8:01:e4:ef:35:2d:57:3c:18:6d:b1: ad:31:42:20:56:4c:1c:11:4a:8b:15:6a:85:ec:34:5f:a5:0b: 0c:fc:71:c1:a7:09:3c:f2:51:d7:c4:40:c6:4d:af:c8:6e:a7: f9:ca:29:6b:8e:ee:cf:4d:4a:a5:31:7a:22:5d:a6:ff:1f:47: 80:0f:1c:bc:61:42:bb:7d:81:a3:d3:b9:8e:f9:ae:27:ef:60: 72:1a:ee:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNzE5MDMwNjQ0WhcNMjUwNzI2MDMwNjQ0WjAYMRYwFAYD VQQDEw02ODdiMGJjNC0yNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiWTHVKA9XCwsr1aJ65/H2KiZ6yvn0wJZinOD9vqR7ToGwphKYBjUZTtH6t7 qdvGqvlDdhsvjopt8MV4DJtiCD8eBz1IOFRcw5nuOtWPMo21taVOL4dDYWBVvN+K KP/ZHv70ucAbgtZCiZViTchnxR8/dvN99F+d65rCP2raagrayYujPV513kVDGGMM GL6SUF6z3/Z9yDLN7pidffGAPKGbNvnU8H8SQYMtrDwlY85OeAEM1IwdZ1i29Szt aaOg/Q0L+ts6kLJPldCS569w8wzXHrFj0pR1AxR+qXQyKl4+g1vrvGgdLbML6unF IVW7j6r2r9gkkIgmAs3k6wULGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvg/JeE pKEO6sv+MX7hSbMphLDWMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPbtbytnvtYpOE5BmB22SCM9fDUbzjtlnnEfG74AyLpqBz0vpMp9Au XrNPwAF0FxH4cYMmfP2rWT1nlijtQrAGG1NXV9mOe68/y3kagMsHbYQJ+eHKS1gB qsPJx+V5AqbYRR7plq4ZARqzexaP5LnVWuAHDo5vMZzzrJ1RJgNptQ3jun0pMsZM m2QL7s91vTED7h+nqqeliNyhhqyRiLI3dlBoE2G1kXcK6AHk7zUtVzwYbbGtMUIg VkwcEUqLFWqF7DRfpQsM/HHBpwk88lHXxEDGTa/Ibqf5yilrju7PTUqlMXoiXab/ H0eADxy8YUK7fYGj07mO+a4n72ByGu6n -----END CERTIFICATE-----Generated at Sat Jul 19 14:42:40 2025 by rpki-client