$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: EFcKSGflBd0GlCsyJuapbO5lMWVUht5ew9d615E73gk= Subject key identifier: B7:C0:55:5E:38:42:4A:37:79:EE:67:CB:CB:DF:AB:43:98:6D:03:54 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 06D7 Signing time: Fri 22 Aug 2025 23:34:52 +0000 Manifest this update: Fri 22 Aug 2025 23:34:51 +0000 Manifest next update: Fri 29 Aug 2025 23:34:51 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: cBzoldHMmbyJP/Hfa3ptUp7K/DVWWHTUELH9cEaupeA=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: yTT1wU+7SDiGP1yf/wpGgeLBeSp2dcgSEJuvKyJu/s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Aug 22 23:34:51 2025 GMT Not After : Aug 29 23:34:51 2025 GMT Subject: CN=68a8fe9b-3b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:88:a8:f7:a3:8c:8a:50:1d:97:da:06:a0: 93:77:28:fb:6d:5d:9b:c9:71:06:e7:cd:f7:dc:53: e0:08:f6:eb:0e:dc:c0:0a:de:07:dd:10:5d:81:bd: f8:15:4d:5d:71:7e:e5:7a:f7:f0:b0:ad:1a:90:4a: eb:3a:41:1e:1c:c0:bd:d4:d7:c0:0f:13:d9:d0:a7: 5e:6c:ef:5d:d8:0e:4e:d3:0b:e6:1c:b2:33:b4:0d: 85:a1:2c:11:01:5a:3b:60:9d:14:05:1f:5d:d0:c2: 95:52:85:94:4e:c5:3f:dd:09:d5:3c:88:c3:0d:1f: 81:e3:f1:d7:dc:a6:38:b3:7d:d8:22:d5:7a:55:a0: 12:5a:4f:f7:05:d3:b9:ae:34:8f:e9:2b:fd:f5:d1: 2f:d2:14:95:41:e3:ff:aa:d3:f2:d9:f5:01:6b:7f: e2:9d:f7:31:5e:18:0c:b4:0c:6b:88:77:b8:57:7c: 98:6e:dd:eb:05:07:9e:60:fd:ef:e6:59:e1:d5:44: 3c:be:ca:56:19:a5:4a:5e:fd:d3:c6:b0:2e:b0:9b: fc:4e:f4:2c:4e:3a:93:d5:94:1e:5e:4c:25:1f:70: 5a:fd:06:3e:93:af:81:4e:42:6e:39:95:a6:db:48: b4:07:f4:a7:4d:2b:85:be:06:14:40:3f:cc:54:6b: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:55:5E:38:42:4A:37:79:EE:67:CB:CB:DF:AB:43:98:6D:03:54 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2c:1d:aa:46:21:52:f0:f0:43:70:94:cd:5c:82:1f:1d:62: c7:fa:bd:97:d3:cd:d8:fc:1f:95:b3:da:22:4f:c4:10:bf:21: c2:de:91:17:42:3b:07:ad:ca:f6:f2:e4:da:1c:c2:49:a1:d2: a7:e7:33:aa:c3:8f:88:a5:4a:c6:32:c8:d9:dd:0a:27:7f:9f: a9:ab:c3:c1:af:b1:fe:48:27:95:52:7f:05:7c:37:14:51:b6: 42:ca:c0:03:a8:e3:95:5d:09:8c:64:1d:2f:e4:28:8b:b6:87: 4a:9c:7d:4d:90:ef:2d:10:1b:c5:42:65:8c:94:b2:a0:84:e6: 6e:01:36:ad:41:e0:dc:97:fd:93:e2:fd:b2:f2:de:36:b5:bb: 55:39:1b:d5:f6:d3:2e:5d:23:ce:0b:e0:a7:c4:dd:3a:2a:ae: c5:58:68:33:75:df:24:f2:7a:52:15:75:6c:2c:2b:5d:59:98: de:c4:6b:6d:e4:ca:41:72:c0:53:27:56:9a:8c:9e:ee:1a:1a: ca:a6:22:f8:76:f7:26:c9:09:75:8d:73:6f:3d:52:e4:c5:d7: a0:ff:7f:fa:6d:65:87:44:1f:68:c3:27:74:d7:b2:6a:fd:65: 6c:58:45:2d:03:f8:92:5a:05:c1:87:32:ac:6d:e2:e2:6c:a4: 83:86:87:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUwODIyMjMzNDUxWhcNMjUwODI5MjMzNDUxWjAYMRYwFAYD VQQDEw02OGE4ZmU5Yi0zYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvaIqPejjIpQHZfaBqCTdyj7bV2byXEG58333FPgCPbrDtzACt4H3RBdgb34 FU1dcX7levfwsK0akErrOkEeHMC91NfADxPZ0KdebO9d2A5O0wvmHLIztA2FoSwR AVo7YJ0UBR9d0MKVUoWUTsU/3QnVPIjDDR+B4/HX3KY4s33YItV6VaASWk/3BdO5 rjSP6Sv99dEv0hSVQeP/qtPy2fUBa3/infcxXhgMtAxriHe4V3yYbt3rBQeeYP3v 5lnh1UQ8vspWGaVKXv3TxrAusJv8TvQsTjqT1ZQeXkwlH3Ba/QY+k6+BTkJuOZWm 20i0B/SnTSuFvgYUQD/MVGt+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfAVV44 Qko3ee5ny8vfq0OYbQNUMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBLB2qRiFS8PBDcJTNXIIfHWLH+r2X083Y/B+Vs9oiT8QQvyHC3pEX QjsHrcr28uTaHMJJodKn5zOqw4+IpUrGMsjZ3Qonf5+pq8PBr7H+SCeVUn8FfDcU UbZCysADqOOVXQmMZB0v5CiLtodKnH1NkO8tEBvFQmWMlLKghOZuATatQeDcl/2T 4v2y8t42tbtVORvV9tMuXSPOC+CnxN06Kq7FWGgzdd8k8npSFXVsLCtdWZjexGtt 5MpBcsBTJ1aajJ7uGhrKpiL4dvcmyQl1jXNvPVLkxdeg/3/6bWWHRB9owyd017Jq /WVsWEUtA/iSWgXBhzKsbeLibKSDhocO -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:08 2025 by rpki-client