$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: GfyBWxZ0yMSljQFe+rmG/SVCoHvgVvUo845A9k30j2w= Subject key identifier: 56:AE:F9:14:39:11:D1:8C:30:1D:C2:E0:E5:D8:D9:4A:B7:A5:AF:B6 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:25:40 +0000 Manifest this update: Sat 23 Aug 2025 04:25:40 +0000 Manifest next update: Sat 30 Aug 2025 04:25:40 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: Y1LOhZpEHHDhpbp9mwLD6oTreXmtxUqipgAx5ms9qxo=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Aug 23 04:25:40 2025 GMT Not After : Aug 30 04:25:40 2025 GMT Subject: CN=68a942c4-9c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:ad:7d:d7:6a:e4:c3:55:f4:af:ef:48:b6: ea:78:10:9c:c6:ca:c3:2f:a4:31:33:c5:a3:c4:35: 2c:67:fc:37:5c:4d:4c:08:26:d8:9b:79:6f:56:af: dc:33:de:66:0b:65:79:75:71:dc:0c:5e:ab:74:3e: 66:6f:3c:88:b9:c2:d2:bb:e4:2c:ad:3a:66:a3:c7: 6d:66:97:50:1e:58:96:9e:7b:11:6b:aa:cf:00:dc: 05:45:d6:03:43:2d:e1:97:1c:50:1d:6c:51:37:7b: 5f:c0:4f:80:e5:c2:83:eb:14:a9:83:47:8a:6d:84: 01:52:2f:70:88:94:4e:6a:86:46:27:03:81:ea:20: 3e:9c:10:ca:b7:69:3a:3c:15:22:b2:2c:76:a4:82: d1:42:00:10:18:97:df:18:8b:5b:11:35:fe:26:e6: b3:91:81:9f:8c:b1:a7:e6:81:8d:91:69:8c:42:63: 5e:c0:0b:3d:09:40:b3:6e:2f:fc:0a:22:a0:8a:64: 0b:f1:75:77:ed:5b:17:6d:1b:a7:a5:85:b1:c5:9d: 60:91:58:82:69:4d:4c:72:1d:ef:c5:be:b9:76:f2: 53:e0:ad:99:ea:4e:e3:bc:b7:2a:90:49:01:f1:55: 46:dd:23:ec:43:1a:b2:76:7f:d5:31:b8:39:e9:63: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:F9:14:39:11:D1:8C:30:1D:C2:E0:E5:D8:D9:4A:B7:A5:AF:B6 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fd:91:f6:73:bf:92:fe:97:a4:6a:2d:43:cd:78:38:e8:78: cb:c1:8f:c0:e9:98:9a:a4:bf:1a:6d:0e:48:e1:51:61:f3:a5: 5d:4e:ba:4f:df:6a:96:eb:38:df:d7:3f:e0:f5:4e:d0:36:a1: af:0e:60:68:7a:f6:5f:5f:6c:cf:ff:48:25:4f:8b:8e:e3:b3: 01:0b:98:ea:27:9a:b2:2d:20:58:45:71:20:50:cd:55:81:b1: 52:f2:ee:ae:68:7a:b6:12:c3:c7:7c:70:59:88:ce:57:59:a0: e5:f2:42:69:ca:e2:83:45:36:2b:0b:54:24:fc:ad:9f:62:58: 94:d9:5b:aa:61:9b:6e:1c:7a:b5:ce:68:2c:d9:7b:c3:06:e4: d7:5c:7b:ed:86:ec:85:83:b6:04:9b:be:48:a2:e3:d2:ee:ab: 13:cb:5a:d8:89:54:36:ef:64:50:79:fc:2b:3f:e9:f4:6b:04: 8a:bb:59:7b:bb:96:6e:5b:05:3f:d2:67:71:6e:44:5c:8c:c1: eb:7c:d4:7d:cd:20:5f:19:b3:58:83:12:2d:c4:7f:7f:f4:11: 72:74:93:0f:90:d3:80:f5:4d:96:5b:82:61:ce:30:ad:b6:79: 17:dd:70:fc:dd:4d:a9:e5:e1:8f:d6:2a:e5:84:c4:27:e7:a6: ab:63:f1:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjUwODIzMDQyNTQwWhcNMjUwODMwMDQyNTQwWjAYMRYwFAYD VQQDEw02OGE5NDJjNC05YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Jatfddq5MNV9K/vSLbqeBCcxsrDL6QxM8WjxDUsZ/w3XE1MCCbYm3lvVq/c M95mC2V5dXHcDF6rdD5mbzyIucLSu+QsrTpmo8dtZpdQHliWnnsRa6rPANwFRdYD Qy3hlxxQHWxRN3tfwE+A5cKD6xSpg0eKbYQBUi9wiJROaoZGJwOB6iA+nBDKt2k6 PBUisix2pILRQgAQGJffGItbETX+JuazkYGfjLGn5oGNkWmMQmNewAs9CUCzbi/8 CiKgimQL8XV37VsXbRunpYWxxZ1gkViCaU1Mch3vxb65dvJT4K2Z6k7jvLcqkEkB 8VVG3SPsQxqydn/VMbg56WOdQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFau+RQ5 EdGMMB3C4OXY2Uq3pa+2MB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/ZH2c7+S/pekai1DzXg46HjLwY/A6ZiapL8abQ5I4VFh86VdTrpP 32qW6zjf1z/g9U7QNqGvDmBoevZfX2zP/0glT4uO47MBC5jqJ5qyLSBYRXEgUM1V gbFS8u6uaHq2EsPHfHBZiM5XWaDl8kJpyuKDRTYrC1Qk/K2fYliU2VuqYZtuHHq1 zmgs2XvDBuTXXHvthuyFg7YEm75IouPS7qsTy1rYiVQ272RQefwrP+n0awSKu1l7 u5ZuWwU/0mdxbkRcjMHrfNR9zSBfGbNYgxItxH9/9BFydJMPkNOA9U2WW4JhzjCt tnkX3XD83U2p5eGP1irlhMQn56arY/Hx -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:11 2025 by rpki-client