$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: 27Yhxbmimy33ll8+toDV1Naxf9TzD/4J7GM1AUsBcT8= Subject key identifier: 30:E9:E1:3E:D4:EE:CF:09:2D:B7:10:1D:FA:5F:5F:A7:6B:06:DE:15 Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 0430 Signing time: Mon 07 Jul 2025 00:34:37 +0000 Manifest this update: Mon 07 Jul 2025 00:34:36 +0000 Manifest next update: Mon 14 Jul 2025 00:34:36 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: JTHCwXbpnxuo7z+rK5oxzXtpbu71+C35e+PS5H48aqc=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: Jul 7 00:34:36 2025 GMT Not After : Jul 14 00:34:36 2025 GMT Subject: CN=686b161d-e147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:c3:66:c7:87:4a:0b:ff:ba:56:37:c1:0b: 84:ec:22:8d:81:8b:c8:1b:fa:84:46:0e:c8:c0:a9: 4b:2a:ca:ba:4a:f6:1c:85:34:0d:1a:f7:bc:c0:74: 45:9f:d4:45:ce:a1:96:01:d0:86:13:5d:dc:00:49: 61:4a:60:83:ee:8a:d4:46:44:2b:45:6f:35:af:4e: 91:ce:d2:a8:24:c2:bb:fd:77:94:6e:18:65:a7:a6: 5d:c6:bc:b9:21:d1:bc:ad:61:f3:25:15:94:99:7b: 5b:64:fe:e3:82:ce:1c:11:f7:84:b5:59:89:e0:6a: 55:26:93:cd:0f:21:89:30:9c:fe:ff:f1:41:83:10: 77:e4:3e:ba:88:9e:78:e7:af:c1:70:02:28:c8:63: 47:49:76:03:a0:1e:73:89:49:47:b9:b7:7d:39:14: f9:6e:c2:c8:c4:3d:2f:96:97:1a:15:79:33:6b:0e: 63:1d:34:bf:e3:b9:9e:a9:ed:46:17:b1:64:61:25: 39:a7:5c:47:ed:96:6d:f0:87:40:27:fd:45:b8:2b: 7d:61:aa:ad:df:46:15:ba:e0:b6:c6:1e:39:56:08: be:41:7e:76:09:8f:79:ca:28:f0:aa:0a:cf:da:ff: 3c:8e:f3:3a:ff:b1:b6:9a:f6:1a:5c:c8:c7:b2:f6: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E9:E1:3E:D4:EE:CF:09:2D:B7:10:1D:FA:5F:5F:A7:6B:06:DE:15 X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a6:b2:1b:6a:13:b9:69:40:7a:db:ac:c4:c2:29:4b:46:23: db:53:70:8a:7d:5d:6c:c0:70:15:33:51:f4:4a:46:67:49:24: b2:68:f0:3c:21:ee:e0:b7:d4:fb:ae:e8:4a:69:c0:6a:3c:20: fb:6f:68:76:e0:7d:f8:28:03:d3:6a:64:0c:93:83:c8:7b:15: ea:eb:99:77:38:38:e4:cd:12:76:a2:27:c9:f8:dd:f1:40:50: 52:59:c4:ed:f2:b3:7f:99:c0:37:97:9c:93:c8:70:1b:32:dd: 51:e0:a4:d6:aa:a2:32:b1:31:27:7b:33:73:f7:67:24:7a:18: cf:ea:93:a8:f2:0c:fc:33:49:cb:d2:ed:b1:da:63:c2:a3:d0: f4:ec:67:ec:ff:a9:23:a2:cf:9b:e8:f3:e1:78:26:b1:3e:b5: c5:b3:da:05:b5:b5:d1:e1:97:86:95:ed:65:10:f4:89:7d:b8: e0:d2:f4:99:05:23:eb:19:0c:89:ae:b1:7b:1f:c0:b3:ba:d3: e2:74:0d:e9:46:43:81:5b:94:ee:f4:dc:17:01:da:ed:65:84: 87:c2:07:d9:22:32:e7:a0:d8:a0:aa:cb:cc:50:c5:ea:09:e4: 5c:67:6f:57:d1:46:8f:af:a4:1d:f7:5e:54:6a:c3:51:ca:e0: d1:5c:39:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjUwNzA3MDAzNDM2WhcNMjUwNzE0MDAzNDM2WjAYMRYwFAYD VQQDEw02ODZiMTYxZC1lMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLDDZseHSgv/ulY3wQuE7CKNgYvIG/qERg7IwKlLKsq6SvYchTQNGve8wHRF n9RFzqGWAdCGE13cAElhSmCD7orURkQrRW81r06RztKoJMK7/XeUbhhlp6Zdxry5 IdG8rWHzJRWUmXtbZP7jgs4cEfeEtVmJ4GpVJpPNDyGJMJz+//FBgxB35D66iJ54 56/BcAIoyGNHSXYDoB5ziUlHubd9ORT5bsLIxD0vlpcaFXkzaw5jHTS/47meqe1G F7FkYSU5p1xH7ZZt8IdAJ/1FuCt9Yaqt30YVuuC2xh45Vgi+QX52CY95yijwqgrP 2v88jvM6/7G2mvYaXMjHsvaSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDp4T7U 7s8JLbcQHfpfX6drBt4VMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPprIbahO5aUB626zEwilLRiPbU3CKfV1swHAVM1H0SkZnSSSyaPA8 Ie7gt9T7ruhKacBqPCD7b2h24H34KAPTamQMk4PIexXq65l3ODjkzRJ2oifJ+N3x QFBSWcTt8rN/mcA3l5yTyHAbMt1R4KTWqqIysTEnezNz92ckehjP6pOo8gz8M0nL 0u2x2mPCo9D07Gfs/6kjos+b6PPheCaxPrXFs9oFtbXR4ZeGle1lEPSJfbjg0vSZ BSPrGQyJrrF7H8CzutPidA3pRkOBW5Tu9NwXAdrtZYSHwgfZIjLnoNigqsvMUMXq CeRcZ29X0UaPr6Qd915UasNRyuDRXDl6 -----END CERTIFICATE-----Generated at Mon Jul 7 03:33:08 2025 by rpki-client