$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: JITvVqOq1Q1yiHa5R9iMtbLE9i0YCQXTWi0psrU76vU= Subject key identifier: 5B:56:1E:EA:DC:C8:62:52:F5:E4:4F:A6:3D:F9:6B:D7:E1:AF:EB:C2 Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 0448 Signing time: Sat 23 Aug 2025 00:30:23 +0000 Manifest this update: Sat 23 Aug 2025 00:30:23 +0000 Manifest next update: Sat 30 Aug 2025 00:30:23 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: L6cFHDehPMcToA2Ih9LlmKpzGpzpVu0W0mKilGKqHcA=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: Aug 23 00:30:23 2025 GMT Not After : Aug 30 00:30:23 2025 GMT Subject: CN=68a90b9f-c09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:7c:e0:f7:56:31:95:0f:29:d5:84:7b:96: 47:be:65:c7:6b:c5:45:2b:ca:5b:53:50:fe:6d:74: 16:a0:eb:db:25:76:1c:1f:1b:d7:03:c5:dc:83:fa: ff:88:be:a7:ef:93:42:d9:64:ba:f6:bb:11:75:ff: 31:f2:44:85:f9:d4:8e:09:0a:e1:9f:c7:b6:51:db: 13:86:53:2f:77:6f:9c:8b:b0:73:e0:e5:80:58:b3: c0:75:6f:b0:45:71:17:61:a4:b6:00:1f:ac:23:ee: 1f:1c:f4:74:00:bb:a9:06:f1:73:8b:e6:5e:41:b3: bc:9c:b0:85:7d:32:59:d0:be:3e:cc:01:21:f2:dd: 02:88:a8:3b:06:fe:f8:51:e9:bd:b1:7f:26:4c:01: 7a:22:ca:ad:ea:a4:aa:7c:73:73:f9:cf:45:99:11: 05:61:5f:22:f4:22:02:0f:fb:9c:9f:e0:44:f2:87: 3e:cd:2e:46:4e:36:fe:6a:98:ff:26:f8:d1:52:e8: 3b:5d:e2:70:48:ec:f1:7f:be:3f:b6:fc:b4:2f:b3: 15:66:52:67:97:73:f7:9c:1e:71:1d:e0:e5:55:1e: db:cd:fd:db:da:4f:ae:5a:4f:89:9a:f3:30:d6:fa: 17:6c:7c:72:bb:cd:c1:f2:ef:5e:ed:f5:4a:43:4b: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:1E:EA:DC:C8:62:52:F5:E4:4F:A6:3D:F9:6B:D7:E1:AF:EB:C2 X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:2b:e6:95:ba:a2:a1:07:98:68:b1:ca:97:b0:99:90:69: 50:b0:19:87:0f:26:5e:99:ad:0e:c7:3e:72:4b:88:5b:c2:19: 1d:63:65:d2:c4:ef:13:7f:90:d7:3f:d6:7e:43:7d:18:61:01: cf:41:8a:5f:49:4f:e6:99:ca:08:01:f1:c8:f5:ce:75:84:4b: af:2c:97:e0:0c:ed:5d:1e:ec:0c:04:75:4f:fa:02:97:ed:73: d4:e6:46:15:c2:f3:ca:98:05:52:ad:ad:e0:ca:57:44:45:30: 36:28:96:d1:fe:e9:8f:24:59:bd:f6:36:ee:4b:05:28:21:be: 71:79:8e:68:30:ea:0b:cc:d9:97:51:15:a9:bc:1c:40:cb:5a: 4f:35:eb:40:8a:bf:00:63:98:2f:85:e8:52:7d:c2:e0:67:c3: 53:16:35:31:6a:5e:22:85:f3:a9:d6:f4:aa:4e:3e:5c:97:c5: 15:1a:11:57:e7:5e:ed:31:3e:b0:e6:85:29:f2:5c:eb:5d:63: 44:a8:21:b8:b8:52:f5:64:16:d2:3b:bc:0f:8e:5d:dc:96:b3: 9a:30:67:8c:5e:d6:59:45:6c:10:41:5e:86:f3:98:3d:75:9f: 52:0c:73:66:01:33:1e:67:b9:f0:c1:d6:01:13:c2:2f:bf:13: c1:c8:2a:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjUwODIzMDAzMDIzWhcNMjUwODMwMDAzMDIzWjAYMRYwFAYD VQQDEw02OGE5MGI5Zi1jMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbh84PdWMZUPKdWEe5ZHvmXHa8VFK8pbU1D+bXQWoOvbJXYcHxvXA8Xcg/r/ iL6n75NC2WS69rsRdf8x8kSF+dSOCQrhn8e2UdsThlMvd2+ci7Bz4OWAWLPAdW+w RXEXYaS2AB+sI+4fHPR0ALupBvFzi+ZeQbO8nLCFfTJZ0L4+zAEh8t0CiKg7Bv74 Uem9sX8mTAF6Isqt6qSqfHNz+c9FmREFYV8i9CICD/ucn+BE8oc+zS5GTjb+apj/ JvjRUug7XeJwSOzxf74/tvy0L7MVZlJnl3P3nB5xHeDlVR7bzf3b2k+uWk+JmvMw 1voXbHxyu83B8u9e7fVKQ0su5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtWHurc yGJS9eRPpj35a9fhr+vCMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApoCvmlbqioQeYaLHKl7CZkGlQsBmHDyZema0Oxz5yS4hbwhkdY2XS xO8Tf5DXP9Z+Q30YYQHPQYpfSU/mmcoIAfHI9c51hEuvLJfgDO1dHuwMBHVP+gKX 7XPU5kYVwvPKmAVSra3gyldERTA2KJbR/umPJFm99jbuSwUoIb5xeY5oMOoLzNmX URWpvBxAy1pPNetAir8AY5gvhehSfcLgZ8NTFjUxal4ihfOp1vSqTj5cl8UVGhFX 517tMT6w5oUp8lzrXWNEqCG4uFL1ZBbSO7wPjl3clrOaMGeMXtZZRWwQQV6G85g9 dZ9SDHNmATMeZ7nwwdYBE8IvvxPByCoP -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:41 2025 by rpki-client