$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: SGYzD2H5ixi3fxBpkZEHKnOE5YSCzWefFXmE4C20III= Subject key identifier: 14:C7:85:7E:85:F6:8E:8D:BA:58:A0:3A:08:D2:A7:3C:78:75:C9:36 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 0140 Signing time: Sat 23 Aug 2025 04:30:42 +0000 Manifest this update: Sat 23 Aug 2025 04:30:41 +0000 Manifest next update: Sat 30 Aug 2025 04:30:41 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: RG0K8v+O3XuBPMfqptonqqpBNGW8PcEw2SlvL+XwgHk=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Aug 23 04:30:41 2025 GMT Not After : Aug 30 04:30:41 2025 GMT Subject: CN=68a943f2-d65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:79:cb:84:8e:d0:a8:c1:9c:03:45:5a:d1: 91:62:c8:b7:d3:eb:3b:55:0c:9b:81:a1:d5:28:42: a4:79:fb:f3:2d:cb:f2:59:72:51:56:a2:f7:4e:42: 99:fd:a3:91:9a:66:67:79:ae:9c:c5:1e:64:c8:45: 49:f8:7c:db:5b:30:e5:fb:b9:f6:95:fa:a0:b5:07: 16:40:4c:a2:31:0e:60:c2:3c:0e:f6:7a:81:8a:52: 50:23:b0:0f:90:5b:d1:5d:2b:f6:6d:b5:ac:e8:a9: 1b:20:6d:bc:4b:50:a5:ce:46:90:b4:76:95:0c:8e: 08:09:c6:04:50:27:5f:e6:12:69:4b:bd:c1:70:c9: 28:1e:00:1f:8b:e4:3d:fd:dc:d7:9a:7b:74:08:97: a8:38:36:12:a7:bc:fc:0b:01:94:e8:b3:78:fd:56: 95:20:0a:cf:03:71:16:14:39:4b:49:57:84:b0:0b: ec:b4:13:db:92:af:52:25:b9:68:26:9d:f0:d4:64: ba:e2:46:5d:26:88:a6:a9:40:1d:f6:9f:b6:1c:58: f0:37:a2:7a:b9:b4:3b:a6:a8:aa:5c:c0:ae:ee:43: 18:29:0b:c2:07:e4:fa:a2:6f:bb:54:c0:6c:59:4d: 3e:43:09:c9:47:db:5e:c4:58:8a:f4:c7:f2:76:c1: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:85:7E:85:F6:8E:8D:BA:58:A0:3A:08:D2:A7:3C:78:75:C9:36 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:62:37:d9:1a:03:c2:2d:77:21:66:9f:8e:82:74:ca:9c:1e: c9:f9:25:cc:78:48:92:e2:89:df:81:1d:57:08:1f:80:58:a6: be:37:d9:36:a2:f0:cf:85:67:a4:33:44:e5:7f:f5:e6:67:0d: 3a:1e:6c:02:62:31:7b:20:83:7c:36:14:ab:60:a8:af:4d:f0: a2:45:5f:92:72:20:98:82:68:92:0e:88:b6:25:a1:2c:fb:e2: 67:b4:ef:49:11:09:a8:99:ac:8f:dd:b1:07:01:45:9b:88:32: a9:cf:a8:60:4a:b2:8a:e0:fc:9d:d5:7e:02:9d:63:f5:f7:95: 23:a5:b8:f7:6f:be:63:72:cc:c1:cb:28:75:1b:97:56:d9:fd: a0:19:e4:22:b7:3b:62:66:66:2d:e1:7c:41:49:7d:14:1d:3e: c4:b6:0d:53:51:48:39:c5:73:3a:79:d3:9e:d6:4b:da:51:4b: b1:42:2c:23:26:89:44:51:5e:d5:84:39:6d:38:db:68:5d:d7: bf:1b:9e:69:bb:94:e2:6b:f4:5a:dc:10:b3:b3:a2:a6:5a:c1: a3:5e:0a:22:1f:8b:ab:dc:02:50:8d:12:60:29:49:66:15:bb: c4:77:24:32:5d:38:ab:ce:33:67:12:dd:a3:5a:e3:6c:31:da: 40:53:8a:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwODIzMDQzMDQxWhcNMjUwODMwMDQzMDQxWjAYMRYwFAYD VQQDEw02OGE5NDNmMi1kNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ55y4SO0KjBnANFWtGRYsi30+s7VQybgaHVKEKkefvzLcvyWXJRVqL3TkKZ /aORmmZnea6cxR5kyEVJ+HzbWzDl+7n2lfqgtQcWQEyiMQ5gwjwO9nqBilJQI7AP kFvRXSv2bbWs6KkbIG28S1ClzkaQtHaVDI4ICcYEUCdf5hJpS73BcMkoHgAfi+Q9 /dzXmnt0CJeoODYSp7z8CwGU6LN4/VaVIArPA3EWFDlLSVeEsAvstBPbkq9SJblo Jp3w1GS64kZdJoimqUAd9p+2HFjwN6J6ubQ7pqiqXMCu7kMYKQvCB+T6om+7VMBs WU0+QwnJR9texFiK9MfydsGPSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTHhX6F 9o6NuligOgjSpzx4dck2MB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSYjfZGgPCLXchZp+OgnTKnB7J+SXMeEiS4onfgR1XCB+AWKa+N9k2 ovDPhWekM0Tlf/XmZw06HmwCYjF7IIN8NhSrYKivTfCiRV+SciCYgmiSDoi2JaEs ++JntO9JEQmomayP3bEHAUWbiDKpz6hgSrKK4Pyd1X4CnWP195Ujpbj3b75jcszB yyh1G5dW2f2gGeQitztiZmYt4XxBSX0UHT7Etg1TUUg5xXM6edOe1kvaUUuxQiwj JolEUV7VhDltONtoXde/G55pu5Tia/Ra3BCzs6KmWsGjXgoiH4ur3AJQjRJgKUlm FbvEdyQyXTirzjNnEt2jWuNsMdpAU4qr -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:18 2025 by rpki-client