$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: 51PUtMCaAGtWB+YIFmIN2QV8i2FsrxjLQEAXxNWEwu0= Subject key identifier: 63:B9:19:A1:3B:7C:0B:43:12:BC:11:6D:63:FE:0F:CA:E1:16:E7:B1 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 01BE Signing time: Sat 23 Aug 2025 03:09:23 +0000 Manifest this update: Sat 23 Aug 2025 03:09:22 +0000 Manifest next update: Sat 30 Aug 2025 03:09:22 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: 0GDHpGxwsocio5ImFeLnaqJVv0aEKU2zvu72ni3l0jE=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: 8k36pvGImmVckUyl9Af0a0wGsrxQEwJI0duKzhrmqDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: Aug 23 03:09:22 2025 GMT Not After : Aug 30 03:09:22 2025 GMT Subject: CN=68a930e2-0227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:8f:a9:f4:d8:20:d3:35:80:59:73:0a:88: b6:b0:08:ad:66:64:0f:bc:06:27:9c:ba:6a:87:c0: 01:5d:12:8e:0e:03:3b:84:cb:9f:8e:90:b8:22:23: 05:e6:9d:c1:1b:1b:da:2a:91:fe:61:28:20:29:20: 2e:4f:15:b3:2e:ad:19:0e:04:6c:9c:ec:f3:a8:f0: 5a:0c:89:31:cb:af:4f:ba:69:34:64:75:21:6a:33: 79:78:87:16:f6:48:8f:ba:af:a9:ae:66:98:38:80: 22:76:dc:77:e6:00:0e:f5:32:13:36:25:ed:6c:2b: cf:48:d7:ca:5b:7d:21:42:48:0d:fa:10:58:70:2b: 4d:57:8b:4e:3a:00:da:b1:ac:a5:21:26:50:35:a4: 6c:e1:8d:7a:b2:fd:7e:fd:63:4a:51:15:91:3e:1e: e1:9b:43:14:2a:81:3f:12:fb:85:cd:e4:f7:e8:9c: c7:93:c9:90:42:11:3f:55:9d:98:31:f5:56:76:78: ee:2b:14:be:fd:f5:b1:8a:32:f8:4f:3f:6f:08:0d: 60:35:ad:d5:46:49:3a:c9:d4:30:29:20:30:ec:66: 71:b1:19:f6:ad:65:d8:67:bc:d3:39:19:e2:4f:56: 14:ce:d4:18:a7:a4:68:9c:f8:d4:38:3f:5f:36:af: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B9:19:A1:3B:7C:0B:43:12:BC:11:6D:63:FE:0F:CA:E1:16:E7:B1 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:be:d0:2d:b6:ef:1e:85:42:66:e8:25:c1:5f:68:0e:13:62: d8:ec:f8:a2:b3:47:4b:87:33:be:9e:00:fb:0b:3e:71:9e:a7: 8a:9e:2f:ad:74:5d:ec:a3:65:55:a8:75:72:66:2a:14:45:3a: be:41:35:c0:6b:63:35:39:0f:d1:7c:bb:34:1a:e2:99:ab:1e: a3:00:b8:bd:51:23:cc:9e:b2:c8:99:d5:f9:ae:3d:e5:79:ba: ff:30:a5:eb:b8:66:03:ef:b6:54:fe:16:42:1d:45:43:b0:e1: eb:87:62:d7:6f:3c:82:cd:bf:03:6f:c6:4d:11:46:86:5e:5d: 15:30:39:cb:b3:ca:28:12:71:1e:08:54:f8:59:c7:3b:e0:f9: 63:96:cf:c0:2c:e2:31:f4:9a:92:1b:b2:8a:4a:41:56:dd:20: ce:01:f6:eb:97:51:98:0f:10:12:73:76:c5:74:06:87:60:d5: ce:f8:fe:8e:91:fc:05:0e:e4:34:7f:78:d9:33:3f:f8:18:56: 8a:d0:c2:fa:c8:00:c4:92:3c:f4:ea:25:30:12:b2:93:96:1f: 12:c7:e5:30:9c:21:cd:09:38:9a:4e:83:c5:12:5d:72:70:7e: 2a:1c:47:87:bc:f1:1b:28:3d:cf:cc:0c:cc:24:e7:85:f3:6c: 1a:12:f4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjUwODIzMDMwOTIyWhcNMjUwODMwMDMwOTIyWjAYMRYwFAYD VQQDEw02OGE5MzBlMi0wMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o+PqfTYINM1gFlzCoi2sAitZmQPvAYnnLpqh8ABXRKODgM7hMufjpC4IiMF 5p3BGxvaKpH+YSggKSAuTxWzLq0ZDgRsnOzzqPBaDIkxy69Pumk0ZHUhajN5eIcW 9kiPuq+prmaYOIAidtx35gAO9TITNiXtbCvPSNfKW30hQkgN+hBYcCtNV4tOOgDa saylISZQNaRs4Y16sv1+/WNKURWRPh7hm0MUKoE/EvuFzeT36JzHk8mQQhE/VZ2Y MfVWdnjuKxS+/fWxijL4Tz9vCA1gNa3VRkk6ydQwKSAw7GZxsRn2rWXYZ7zTORni T1YUztQYp6RonPjUOD9fNq+d1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO5GaE7 fAtDErwRbWP+D8rhFuexMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtvtAttu8ehUJm6CXBX2gOE2LY7Piis0dLhzO+ngD7Cz5xnqeKni+t dF3so2VVqHVyZioURTq+QTXAa2M1OQ/RfLs0GuKZqx6jALi9USPMnrLImdX5rj3l ebr/MKXruGYD77ZU/hZCHUVDsOHrh2LXbzyCzb8Db8ZNEUaGXl0VMDnLs8ooEnEe CFT4Wcc74Pljls/ALOIx9JqSG7KKSkFW3SDOAfbrl1GYDxASc3bFdAaHYNXO+P6O kfwFDuQ0f3jZMz/4GFaK0ML6yADEkjz06iUwErKTlh8Sx+UwnCHNCTiaToPFEl1y cH4qHEeHvPEbKD3PzAzMJOeF82waEvRd -----END CERTIFICATE-----Generated at Sat Aug 23 19:16:15 2025 by rpki-client