$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: C6wEyAtjuRGp8VehXAkBxMKZ3y5BrIrUV/0WJrLmDkI= Subject key identifier: 8F:6C:6B:79:01:EF:54:7D:4B:F0:E8:54:73:5C:17:24:F1:37:F8:F8 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 018F Signing time: Sat 23 Aug 2025 03:35:36 +0000 Manifest this update: Sat 23 Aug 2025 03:35:35 +0000 Manifest next update: Sat 30 Aug 2025 03:35:35 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: NmlEcFpHFkF3jLy+OYiPGWBfzjwnttmEvhEMkQDd5qw=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Aug 23 03:35:35 2025 GMT Not After : Aug 30 03:35:35 2025 GMT Subject: CN=68a93707-927f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:ba:9f:14:cf:90:86:5d:21:1d:7b:e7:4f: d7:2d:a1:27:0e:63:c3:0b:88:6f:1a:08:61:2a:ff: 6b:07:fd:fe:67:a3:96:82:fb:66:52:3f:86:ba:f2: 2f:97:2d:9b:7e:c6:20:ae:33:a6:60:59:aa:51:28: 9f:39:8f:0b:b1:95:40:15:b8:99:fc:55:22:bf:b1: c3:a4:81:1f:ee:d2:03:d1:d2:5c:b8:c5:cb:4a:53: 59:58:b8:92:ed:ef:f6:22:b5:7f:4a:e8:7b:6b:54: cc:68:7c:57:fd:87:3e:a2:02:13:0f:5c:1f:39:d9: 67:08:b5:0e:77:0d:e3:c9:b7:60:3a:0f:fb:95:1c: 53:13:7f:80:58:11:d9:c3:f0:16:ed:ee:11:e2:13: 79:1a:ef:37:a4:13:11:bc:39:66:dc:7a:8d:0b:af: d9:fd:b2:44:b4:65:bd:e9:27:1b:ee:76:74:7d:80: af:a9:05:ca:f9:7c:01:16:9f:5f:6c:62:9a:a5:82: af:91:01:4f:76:77:d5:3f:59:7d:0b:59:f6:8d:97: 41:86:72:cc:80:11:a3:7e:a5:78:9c:e4:73:ae:20: 0d:85:d1:2c:f1:98:f7:54:1e:fb:ad:0a:34:6d:48: c6:21:ef:eb:f2:ae:0e:df:bf:92:1b:11:ec:5c:7a: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6C:6B:79:01:EF:54:7D:4B:F0:E8:54:73:5C:17:24:F1:37:F8:F8 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:41:54:39:99:7e:7e:15:35:3d:b2:68:c7:7a:a8:08:ce:82: 00:86:fb:fe:15:d5:2b:2f:cf:97:99:e8:24:9f:21:07:0d:57: fe:5f:1c:b1:46:db:99:b3:60:9e:b0:11:43:aa:32:d4:76:6c: b4:dd:7a:b9:88:ac:97:c8:69:6e:f9:9e:71:2a:ba:fc:7a:6f: 64:a8:8e:80:6a:f4:3c:d7:b4:1c:d3:8a:58:76:ab:9f:41:6a: db:bc:05:c1:09:1b:2a:cc:fc:29:c2:e7:1c:cb:1d:fc:b1:fe: c3:6e:a3:d5:e7:79:eb:35:03:4f:22:aa:c1:c8:68:ad:c9:f2: 52:bf:1a:14:ef:17:e4:34:8e:29:26:9f:85:ef:cc:c2:b6:a7: c3:94:d1:57:9d:7b:ea:87:b2:6d:ba:7d:3d:fd:1e:d2:56:24: 4e:f1:12:0e:47:f3:8d:b6:62:cd:05:e3:3d:59:37:63:75:26: 87:1b:80:b7:32:53:ab:0c:67:fc:cb:eb:01:c6:8e:d9:6a:bb: d2:5f:4b:d3:b6:2a:96:06:72:43:4f:12:ec:4b:e1:13:f4:3a: 16:51:b3:b5:88:dc:5f:2e:fa:75:19:07:b3:30:ae:8e:61:ec: 90:90:07:53:ac:d8:c0:96:92:61:5d:14:71:c7:ec:c9:ac:16: bd:9c:bb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjUwODIzMDMzNTM1WhcNMjUwODMwMDMzNTM1WjAYMRYwFAYD VQQDEw02OGE5MzcwNy05MjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fG6nxTPkIZdIR1750/XLaEnDmPDC4hvGghhKv9rB/3+Z6OWgvtmUj+GuvIv ly2bfsYgrjOmYFmqUSifOY8LsZVAFbiZ/FUiv7HDpIEf7tID0dJcuMXLSlNZWLiS 7e/2IrV/Suh7a1TMaHxX/Yc+ogITD1wfOdlnCLUOdw3jybdgOg/7lRxTE3+AWBHZ w/AW7e4R4hN5Gu83pBMRvDlm3HqNC6/Z/bJEtGW96Scb7nZ0fYCvqQXK+XwBFp9f bGKapYKvkQFPdnfVP1l9C1n2jZdBhnLMgBGjfqV4nORzriANhdEs8Zj3VB77rQo0 bUjGIe/r8q4O37+SGxHsXHqd6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9sa3kB 71R9S/DoVHNcFyTxN/j4MB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMQVQ5mX5+FTU9smjHeqgIzoIAhvv+FdUrL8+XmegknyEHDVf+Xxyx RtuZs2CesBFDqjLUdmy03Xq5iKyXyGlu+Z5xKrr8em9kqI6AavQ817Qc04pYdquf QWrbvAXBCRsqzPwpwuccyx38sf7DbqPV53nrNQNPIqrByGityfJSvxoU7xfkNI4p Jp+F78zCtqfDlNFXnXvqh7Jtun09/R7SViRO8RIOR/ONtmLNBeM9WTdjdSaHG4C3 MlOrDGf8y+sBxo7ZarvSX0vTtiqWBnJDTxLsS+ET9DoWUbO1iNxfLvp1GQezMK6O YeyQkAdTrNjAlpJhXRRxx+zJrBa9nLuD -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:31 2025 by rpki-client