$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: 6hvQXUqYROkiNVu1fixywiZ6cVOaIGaf/cUpU6JxoAg= Subject key identifier: B8:85:27:46:41:71:D5:D0:9A:88:85:A9:E2:E1:05:AA:91:87:C3:67 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 0130 Signing time: Thu 03 Jul 2025 04:41:14 +0000 Manifest this update: Thu 03 Jul 2025 04:41:13 +0000 Manifest next update: Thu 10 Jul 2025 04:41:13 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: TPRdmwXjHZ76x2qTWNZartNGbzbYcmUkipHlwf8Tjuw=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Jul 3 04:41:13 2025 GMT Not After : Jul 10 04:41:13 2025 GMT Subject: CN=686609e9-a29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:9e:de:c7:ba:22:da:95:aa:48:b5:c8:48: 80:38:af:54:f0:e0:cc:ac:aa:ac:fe:48:02:9f:86: 3f:ce:b7:87:e9:ef:27:8c:d2:53:fe:65:2c:58:4b: 1f:bc:f3:8c:0d:1e:f5:3b:62:15:2d:c2:27:ce:8d: a7:52:d9:10:23:15:1d:87:94:57:33:ca:dd:a8:9f: 39:df:63:3b:a2:ca:c8:c0:e6:c7:88:83:84:f6:2e: 44:df:07:08:82:a4:d9:ed:c6:ba:5c:36:f6:e9:8f: 43:df:d3:77:10:dd:09:e9:36:9e:36:93:02:78:1b: f7:ed:26:86:e2:8b:61:53:f3:15:ec:b7:5f:11:0e: 86:52:25:3a:f9:0d:94:b9:b8:84:65:f5:86:3c:e1: 6c:31:f8:e5:48:d2:ce:c5:83:ea:e1:99:8c:bb:3e: f0:05:33:83:05:c4:a0:28:3d:80:c9:45:fa:87:20: 28:e3:27:5f:a2:ae:fd:6e:09:f2:a1:a0:6d:bf:95: e3:a9:ec:8a:e5:60:06:b0:d3:05:21:a5:27:32:c9: 2b:2c:c6:1f:22:de:45:66:9e:92:7d:47:ae:b4:bb: 67:3f:fc:e1:30:35:60:0d:76:fe:ea:9a:6d:7a:9e: 4f:f5:0e:bf:e0:a0:de:d6:54:f5:64:f8:57:51:eb: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:27:46:41:71:D5:D0:9A:88:85:A9:E2:E1:05:AA:91:87:C3:67 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:69:48:b6:c3:e1:d1:f6:a6:b9:ef:b0:dc:d9:32:81:88:89: f6:48:3e:1b:f3:08:03:68:61:95:4b:d5:b9:02:ab:50:f0:0b: df:80:37:a2:61:0c:5d:01:59:c8:e9:29:5b:82:8d:e1:10:9d: ed:19:4c:11:11:4c:b5:5c:15:95:4d:48:7f:63:9a:9d:42:57: 33:c9:4a:23:19:3b:8a:6c:85:20:41:d5:79:87:3c:6f:a6:30: a1:a1:a2:f8:e6:7c:cc:2e:b6:57:23:b0:71:10:0d:e6:79:07: d7:ac:59:22:b3:bd:ff:61:4e:d2:12:51:c5:0a:bd:c1:17:e7: 6b:c3:14:40:71:d6:b4:ac:36:46:60:ea:e4:59:4d:72:d3:f0: 91:0b:e8:d9:1a:a2:ed:db:da:b6:73:5c:4d:a8:46:0e:9b:c2: db:42:9f:e8:a0:09:14:df:39:18:85:a3:67:50:8d:ed:e1:63: 94:ee:29:e8:85:fd:cc:ef:c3:64:19:b5:a0:7c:2d:87:51:ac: d5:43:64:0d:75:1d:24:9d:14:0d:7c:25:40:42:40:f3:16:e9: 75:71:5e:8f:55:d3:af:db:c8:08:53:66:61:43:e4:52:eb:90: 17:d8:3f:6a:85:4d:7a:f5:d8:93:71:36:48:12:9d:cc:32:40: c1:76:f7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjUwNzAzMDQ0MTEzWhcNMjUwNzEwMDQ0MTEzWjAYMRYwFAYD VQQDEw02ODY2MDllOS1hMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbKe3se6ItqVqki1yEiAOK9U8ODMrKqs/kgCn4Y/zreH6e8njNJT/mUsWEsf vPOMDR71O2IVLcInzo2nUtkQIxUdh5RXM8rdqJ8532M7osrIwObHiIOE9i5E3wcI gqTZ7ca6XDb26Y9D39N3EN0J6TaeNpMCeBv37SaG4othU/MV7LdfEQ6GUiU6+Q2U ubiEZfWGPOFsMfjlSNLOxYPq4ZmMuz7wBTODBcSgKD2AyUX6hyAo4ydfoq79bgny oaBtv5XjqeyK5WAGsNMFIaUnMskrLMYfIt5FZp6SfUeutLtnP/zhMDVgDXb+6ppt ep5P9Q6/4KDe1lT1ZPhXUetGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiFJ0ZB cdXQmoiFqeLhBaqRh8NnMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmaUi2w+HR9qa577Dc2TKBiIn2SD4b8wgDaGGVS9W5AqtQ8AvfgDei YQxdAVnI6Slbgo3hEJ3tGUwREUy1XBWVTUh/Y5qdQlczyUojGTuKbIUgQdV5hzxv pjChoaL45nzMLrZXI7BxEA3meQfXrFkis73/YU7SElHFCr3BF+drwxRAcda0rDZG YOrkWU1y0/CRC+jZGqLt29q2c1xNqEYOm8LbQp/ooAkU3zkYhaNnUI3t4WOU7ino hf3M78NkGbWgfC2HUazVQ2QNdR0knRQNfCVAQkDzFul1cV6PVdOv28gIU2ZhQ+RS 65AX2D9qhU169diTcTZIEp3MMkDBdvct -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:10 2025 by rpki-client