$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: EIGY1UleOyaTgd4D84fPAJUfiuRyzspdEGSq3qgLz00= Subject key identifier: CE:44:D5:96:1D:57:15:48:6F:F8:BC:2F:56:D5:28:61:91:9A:DF:38 Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 3F Signing time: Sat 23 Aug 2025 07:42:44 +0000 Manifest this update: Sat 23 Aug 2025 07:42:44 +0000 Manifest next update: Sat 30 Aug 2025 07:42:44 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: kHnW5iQckGILDjad0r22/lLGRkYkQRVI+8M7agsue7E=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Aug 23 07:42:44 2025 GMT Not After : Aug 30 07:42:44 2025 GMT Subject: CN=68a970f4-1d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:6b:97:a8:c9:53:0c:be:4e:7c:12:c8:f8: 1f:7f:dd:1f:2f:9f:a0:aa:e6:14:b5:9e:74:7f:2f: 33:a8:00:32:fc:65:1b:e6:30:b3:52:d4:fa:c4:40: 75:66:6a:11:57:5d:66:75:0a:25:8e:84:42:58:db: 66:54:91:59:da:ab:45:1e:bc:4d:5f:d8:7e:91:68: 33:22:db:f8:d6:00:ec:a9:13:46:d3:c1:db:b5:2a: 95:9e:1a:53:92:6f:11:e1:40:6c:be:07:8f:02:1f: 68:2d:8f:09:ab:aa:a0:a7:ac:22:d8:7d:3d:81:39: 51:9f:2d:fa:ca:a4:21:67:df:d2:b7:cd:e8:e2:d3: 1e:9e:2e:8c:a1:6e:10:1f:19:22:0d:29:27:ae:19: 53:4d:c3:cc:2a:1d:4b:42:d9:e9:8c:76:6f:49:8a: c9:20:9c:c0:aa:db:76:c9:8c:eb:e1:94:2c:45:d9: 4c:01:dc:1e:55:df:d0:b8:47:ab:35:64:db:85:cc: 04:e3:7e:09:c2:15:95:4f:72:2c:7b:d7:55:2a:b1: 1f:84:50:d8:fd:66:50:53:28:78:35:7e:19:37:8e: 14:30:68:33:28:ef:4a:6f:58:53:be:03:b5:97:e2: 24:67:31:51:cc:cc:d6:ba:de:48:66:a6:0d:31:9e: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:D5:96:1D:57:15:48:6F:F8:BC:2F:56:D5:28:61:91:9A:DF:38 X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:49:b2:18:ae:c5:59:33:d2:ed:46:fd:96:c7:da:d7:84:be: 9f:fc:1f:2b:d8:53:b7:7f:7a:d0:e2:92:fe:9e:59:b9:06:e4: 16:50:6e:79:c5:6c:f0:9a:9d:b1:40:f9:8b:b0:f5:d4:18:dd: 9a:03:85:60:9f:5b:4d:bd:3f:09:70:38:61:ae:68:af:de:df: b9:64:b3:a7:af:10:0a:20:ed:db:e2:fa:7d:36:49:ba:3c:09: 3f:74:56:11:03:63:ae:9a:0e:5c:ad:6c:ec:40:91:34:6f:9d: 23:2e:b1:f6:8d:5a:e3:8d:b2:30:67:a1:4f:e4:b1:38:3f:46: 9a:b6:1e:0b:53:63:0f:9c:61:cc:f1:a7:1d:db:46:9c:71:68: 0c:e1:b8:2c:91:f8:6c:14:4a:3a:1a:56:12:4e:c0:4c:f4:cb: 67:f3:4c:22:f8:c9:4e:09:30:f4:b6:a2:10:65:69:28:88:fb: 9e:04:2e:25:1f:e6:e3:aa:23:9e:fb:46:60:07:d7:e0:f7:86: 7b:59:90:cd:ba:4a:92:62:00:4e:02:97:7b:b9:89:4c:b5:21: 7e:ec:a0:c1:ce:b8:62:fb:1f:dd:6d:1e:43:6e:ab:56:15:34: a5:20:af:4c:64:e6:d7:3b:6e:04:43:6c:69:1b:27:f0:9c:82: ef:04:d4:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA4MjMwNzQyNDRaFw0yNTA4MzAwNzQyNDRaMBgxFjAUBgNV BAMTDTY4YTk3MGY0LTFkNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm1muXqMlTDL5OfBLI+B9/3R8vn6Cq5hS1nnR/LzOoADL8ZRvmMLNS1PrEQHVm ahFXXWZ1CiWOhEJY22ZUkVnaq0UevE1f2H6RaDMi2/jWAOypE0bTwdu1KpWeGlOS bxHhQGy+B48CH2gtjwmrqqCnrCLYfT2BOVGfLfrKpCFn39K3zeji0x6eLoyhbhAf GSINKSeuGVNNw8wqHUtC2emMdm9JiskgnMCq23bJjOvhlCxF2UwB3B5V39C4R6s1 ZNuFzATjfgnCFZVPcix711UqsR+EUNj9ZlBTKHg1fhk3jhQwaDMo70pvWFO+A7WX 4iRnMVHMzNa63khmpg0xnpnJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzkTVlh1X FUhv+LwvVtUoYZGa3zgwHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9JshiuxVkz0u1G/ZbH2teEvp/8HyvYU7d/etDikv6eWbkG5BZQbnnF bPCanbFA+Yuw9dQY3ZoDhWCfW029PwlwOGGuaK/e37lks6evEAog7dvi+n02Sbo8 CT90VhEDY66aDlytbOxAkTRvnSMusfaNWuONsjBnoU/ksTg/Rpq2HgtTYw+cYczx px3bRpxxaAzhuCyR+GwUSjoaVhJOwEz0y2fzTCL4yU4JMPS2ohBlaSiI+54ELiUf 5uOqI577RmAH1+D3hntZkM26SpJiAE4Cl3u5iUy1IX7soMHOuGL7H91tHkNuq1YV NKUgr0xk5tc7bgRDbGkbJ/Ccgu8E1NA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:32 2025 by rpki-client