$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: 5CABpRhcdIW1D41Aomn9oEF/87QBIk+2ySYvOJ4VqKA= Subject key identifier: 35:0F:DD:3B:F7:72:A0:A4:0B:18:63:C5:F8:00:AA:61:27:A1:0C:17 Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 25 Signing time: Thu 03 Jul 2025 08:03:51 +0000 Manifest this update: Thu 03 Jul 2025 08:03:51 +0000 Manifest next update: Thu 10 Jul 2025 08:03:51 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: orsRjxd47P96y0SxBcfTTFXcaeEG7RVDTXwE42Rr4bQ=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Jul 3 08:03:51 2025 GMT Not After : Jul 10 08:03:51 2025 GMT Subject: CN=68663967-96a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:0f:89:04:5f:3c:93:bb:ed:f6:a7:a6:6e: 8f:91:4f:ba:3f:fe:ca:2c:d1:e3:a7:67:89:8c:28: ec:2c:86:21:8a:d6:c5:66:e3:ee:e8:ab:4c:dc:f6: fc:fb:ef:4b:2c:36:c0:7c:e0:78:68:0e:f4:f7:d9: 04:cf:5e:90:8d:28:c1:1a:77:f1:53:76:b8:9e:41: 04:b2:5f:7b:c7:02:02:aa:7a:2d:98:3d:6d:c3:36: 14:dd:05:bf:2e:c6:de:0b:c3:b8:70:47:87:a7:e4: 6a:20:46:a5:36:4a:1a:52:c2:c5:a4:ce:8e:6f:ed: fd:b6:a5:ef:bc:df:8d:2a:fc:4f:01:5d:27:ce:2b: 0f:e7:b6:cf:2b:c6:32:af:6d:7b:27:4d:f0:6d:87: 8c:06:a6:5b:b2:16:21:1e:2f:0c:2e:22:da:c4:94: d6:db:46:47:3c:37:ea:1b:1e:aa:6f:b2:ef:4b:ca: a8:9f:de:b1:6a:2f:04:b9:84:25:cf:a6:b4:2e:e9: 34:49:cb:6a:0a:76:62:de:59:aa:aa:1e:d6:f1:2d: 48:c5:ec:89:45:e1:c5:af:b8:c7:ba:67:76:91:d3: 51:2d:21:65:9b:5b:0b:52:d2:a2:f4:f6:dc:be:6d: 9e:26:21:e4:9d:e3:d2:0e:67:c3:b1:68:2a:a4:63: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:DD:3B:F7:72:A0:A4:0B:18:63:C5:F8:00:AA:61:27:A1:0C:17 X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:55:0e:34:6a:36:65:7c:df:1d:c1:8e:f6:f9:fb:ca:54:f1: 12:c8:10:c8:78:e8:51:15:eb:9e:e4:95:5e:ab:dd:e6:c6:92: d4:57:2d:16:13:1c:c5:bd:86:88:b4:92:59:6a:24:f5:c6:c5: 31:37:a2:4c:bb:0c:30:bd:b5:bb:7d:c1:8f:48:50:6c:00:81: 65:1b:4d:70:24:e7:82:26:c7:5d:12:2c:1e:c0:6d:94:bc:e3: e0:24:0c:2d:68:e0:fc:4f:6f:03:91:ce:b6:fe:34:37:b8:9d: ff:80:be:6d:4c:3a:96:06:b8:c3:ea:ae:8c:f4:f0:e5:08:b6: 59:ea:0b:41:f8:d1:e1:bb:2b:30:b5:60:05:d9:91:8c:f6:2a: cd:bf:fa:a0:c7:f8:6d:52:cc:e2:8c:80:45:19:91:ad:93:93: 52:08:ae:8d:0e:0a:85:79:12:24:3f:48:05:31:b4:e1:92:33: 39:02:7f:1c:b8:e9:a3:dc:02:42:40:43:8a:b5:b4:f4:ac:05: 93:d5:6d:9f:d9:e8:6c:87:e7:5a:dd:a5:eb:1e:6e:e7:64:ff: 87:a3:b6:85:b1:c0:b4:55:14:ce:37:ec:0e:fa:16:66:4d:0f: ad:96:3e:f5:8e:48:34:11:e6:39:65:ff:43:1b:e0:14:78:03: e7:ca:5b:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA3MDMwODAzNTFaFw0yNTA3MTAwODAzNTFaMBgxFjAUBgNV BAMTDTY4NjYzOTY3LTk2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpPA+JBF88k7vt9qembo+RT7o//sos0eOnZ4mMKOwshiGK1sVm4+7oq0zc9vz7 70ssNsB84HhoDvT32QTPXpCNKMEad/FTdrieQQSyX3vHAgKqei2YPW3DNhTdBb8u xt4Lw7hwR4en5GogRqU2ShpSwsWkzo5v7f22pe+8340q/E8BXSfOKw/nts8rxjKv bXsnTfBth4wGpluyFiEeLwwuItrElNbbRkc8N+obHqpvsu9Lyqif3rFqLwS5hCXP prQu6TRJy2oKdmLeWaqqHtbxLUjF7IlF4cWvuMe6Z3aR01EtIWWbWwtS0qL09ty+ bZ4mIeSd49IOZ8OxaCqkYz0NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNQ/dO/dy oKQLGGPF+ACqYSehDBcwHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFVDjRqNmV83x3Bjvb5+8pU8RLIEMh46FEV657klV6r3ebGktRXLRYT HMW9hoi0kllqJPXGxTE3oky7DDC9tbt9wY9IUGwAgWUbTXAk54Imx10SLB7AbZS8 4+AkDC1o4PxPbwORzrb+NDe4nf+Avm1MOpYGuMPqroz08OUItlnqC0H40eG7KzC1 YAXZkYz2Ks2/+qDH+G1SzOKMgEUZka2Tk1IIro0OCoV5EiQ/SAUxtOGSMzkCfxy4 6aPcAkJAQ4q1tPSsBZPVbZ/Z6GyH51rdpesebudk/4ejtoWxwLRVFM437A76FmZN D62WPvWOSDQR5jll/0Mb4BR4A+fKW2M= -----END CERTIFICATE-----Generated at Thu Jul 3 09:48:41 2025 by rpki-client