$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft File: lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json) Hash identifier: 7LlWJOI7g3wwanxMTIn8WhSUkIJLRreSTF6I647J6Sk= Subject key identifier: 71:19:F7:E5:BB:A7:08:A5:3C:7E:0E:33:3C:FD:9D:36:79:CB:A6:3C Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A Certificate issuer: /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft Manifest number: 016C Signing time: Sat 23 Aug 2025 04:01:56 +0000 Manifest this update: Sat 23 Aug 2025 04:01:56 +0000 Manifest next update: Sat 30 Aug 2025 04:01:56 +0000 Files and hashes: 1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: 5IRPBisoVNwStQERs+lycnRmaWmm1JpH8zMf/pjp60U=) 2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: 7mVuQ3E5O7SHzP2lHVSGMO1XS8RjhP+KUyO8u78EdqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A Validity Not Before: Aug 23 04:01:56 2025 GMT Not After : Aug 30 04:01:56 2025 GMT Subject: CN=68a93d34-d86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:28:33:40:ad:f6:be:91:ac:f0:0b:8b:ca: ec:ef:d8:9a:5c:dd:fc:22:cb:fb:62:82:51:1b:31: ef:a3:cf:e2:b2:3d:0c:b0:d4:ef:69:da:22:9d:bc: d1:45:00:c0:50:1c:21:60:c6:27:5e:fd:e5:b5:2f: 80:0e:5e:ea:98:e1:c1:77:49:c1:9c:59:1c:af:91: 96:3c:c3:05:14:e1:95:38:c9:5a:a4:d2:95:6c:ca: f7:80:40:a0:1d:9e:56:f1:b7:38:99:27:ae:03:62: 47:92:06:27:a1:c4:9c:2d:ff:93:cc:ce:27:9f:53: 10:4f:9b:aa:ed:4a:1f:56:80:06:97:71:8f:79:02: d2:31:12:1a:86:8c:e4:16:1e:5c:77:0f:bf:a7:41: f2:fe:7d:8f:08:df:29:6c:51:b6:d6:20:67:87:2d: 0d:e8:c0:61:d2:7e:ae:ff:ab:52:e1:a0:9e:85:a3: 45:9b:60:8b:f8:95:ca:d0:18:b1:c9:77:29:79:50: c7:3c:43:eb:fb:e9:09:5b:f8:ef:f8:9e:b7:b3:96: 8c:44:3b:2e:39:37:77:d9:35:34:eb:d7:af:61:14: fe:72:14:69:d6:ed:bf:2b:54:b8:a3:a7:64:5a:55: 02:4d:24:76:3f:fa:ff:9f:42:8b:94:88:a3:99:ba: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:F7:E5:BB:A7:08:A5:3C:7E:0E:33:3C:FD:9D:36:79:CB:A6:3C X509v3 Authority Key Identifier: keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c3:67:88:79:e6:34:7b:d6:a6:79:43:ef:62:55:45:26:64: 62:19:df:0c:1b:c2:51:48:0e:de:da:4d:8a:96:1b:e2:f1:69: c3:4c:31:32:bf:05:90:b6:82:7f:64:f1:27:be:2b:19:d6:17: 07:8e:66:09:8c:7a:de:30:9a:c6:1e:44:9c:80:37:93:d2:75: 2d:e7:3e:7d:b3:f9:cf:4a:26:28:81:f9:66:78:ef:e0:49:f9: 1e:8a:ed:20:1d:d7:52:5d:86:24:7e:90:50:79:e0:6d:d1:8c: a0:6b:74:d5:1d:4f:16:38:a3:7d:77:a9:3a:56:58:c3:24:09: e9:31:f5:29:44:e0:77:65:ad:f0:fb:13:5b:c4:be:93:ba:25: 35:08:d3:f1:70:56:56:b2:34:e9:33:55:92:cb:52:b8:12:a7: 6e:5d:f4:d3:31:2d:60:cd:9c:5d:34:89:28:5b:30:6a:bd:46: 3e:7b:14:0c:f8:c7:b5:4e:f5:66:19:5f:d9:d1:e6:52:5d:6e: 1f:4f:68:94:53:fd:b2:c8:90:4b:c0:f1:ef:c2:6c:a5:a1:3a: 9e:ee:ba:21:0f:13:93:ea:6f:37:05:82:9b:8e:ed:e8:70:e2: 9f:a1:49:a4:e2:3e:d6:f3:61:16:57:f0:6e:1d:98:81:a8:18: 52:d6:66:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCRjExMTAvBgNVBAUTKDk0QjAzN0Y3NkZBMjM3QTc4RUE5NTQ4RTM1NTdBNUUx NkVENjI0OUEwHhcNMjUwODIzMDQwMTU2WhcNMjUwODMwMDQwMTU2WjAYMRYwFAYD VQQDEw02OGE5M2QzNC1kODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWQoM0Ct9r6RrPALi8rs79iaXN38Isv7YoJRGzHvo8/isj0MsNTvadoinbzR RQDAUBwhYMYnXv3ltS+ADl7qmOHBd0nBnFkcr5GWPMMFFOGVOMlapNKVbMr3gECg HZ5W8bc4mSeuA2JHkgYnocScLf+TzM4nn1MQT5uq7UofVoAGl3GPeQLSMRIahozk Fh5cdw+/p0Hy/n2PCN8pbFG21iBnhy0N6MBh0n6u/6tS4aCehaNFm2CL+JXK0Bix yXcpeVDHPEPr++kJW/jv+J63s5aMRDsuOTd32TU069evYRT+chRp1u2/K1S4o6dk WlUCTSR2P/r/n0KLlIijmbo9IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEZ9+W7 pwilPH4OMzz9nTZ5y6Y8MB8GA1UdIwQYMBaAFJSwN/dvojenjqlUjjVXpeFu1iSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JGMS83RDE2RTRGQTU3 QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42ZU9xVlNPTlZlbDRXN1dK Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xMQTM5Mi1pTjZlT3FWU09OVmVsNFc3V0pKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JGMS83RDE2RTRGQTU3QjgxMUVFQUUxOEI1NjhDNEY5QUUwMi9sTEEzOTItaU42 ZU9xVlNPTlZlbDRXN1dKSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhw2eIeeY0e9ameUPvYlVFJmRiGd8MG8JRSA7e2k2Klhvi8WnDTDEy vwWQtoJ/ZPEnvisZ1hcHjmYJjHreMJrGHkScgDeT0nUt5z59s/nPSiYogflmeO/g Sfkeiu0gHddSXYYkfpBQeeBt0Yyga3TVHU8WOKN9d6k6VljDJAnpMfUpROB3Za3w +xNbxL6TuiU1CNPxcFZWsjTpM1WSy1K4EqduXfTTMS1gzZxdNIkoWzBqvUY+exQM +Me1TvVmGV/Z0eZSXW4fT2iUU/2yyJBLwPHvwmyloTqe7rohDxOT6m83BYKbju3o cOKfoUmk4j7W82EWV/BuHZiBqBhS1mYG -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:48 2025 by rpki-client