$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: bdbKi3+asNIAwV1laijTdk1VUj53YliF8Mcd7VCFVFk= Subject key identifier: 3E:F2:B6:D1:4E:E3:14:6E:84:1D:26:7F:D4:28:03:64:88:DF:43:57 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 040E Signing time: Sat 23 Aug 2025 00:36:15 +0000 Manifest this update: Sat 23 Aug 2025 00:36:14 +0000 Manifest next update: Sat 30 Aug 2025 00:36:14 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: 3SUwyBgoFmmLcE75Ci8S8x/cEjSabZ8JEFIHf7hgMCY=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: tkOHoIczvR2mvnPtwO2I6CTO8JqQ7Ha6TbdyLv7Jiak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Aug 23 00:36:14 2025 GMT Not After : Aug 30 00:36:14 2025 GMT Subject: CN=68a90cfe-3781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:b5:48:b9:fe:99:79:a0:33:97:50:9f:a3: aa:b5:2f:64:ab:80:af:09:39:66:59:53:8b:92:91: e7:c2:31:e1:bf:03:82:b9:94:0f:67:3d:11:0c:69: 19:5f:21:d4:1e:fc:20:b6:44:26:7d:c1:dd:51:50: 9d:a2:fd:ec:66:b6:13:d6:37:a9:a7:a7:61:8f:74: 2d:48:2c:1e:31:cb:f8:60:e5:d3:bd:df:27:c3:58: da:16:30:43:e0:af:e6:90:ee:59:30:22:4e:ce:87: e5:44:41:d5:fc:3c:7a:46:06:a3:cd:e4:64:57:e7: 18:d0:f2:96:7e:9f:3c:c7:f1:43:d0:bc:1b:fc:59: 1a:cb:c6:34:80:7a:9d:e8:94:bb:d7:58:13:01:c5: 52:be:1e:48:e4:9c:f8:c4:00:84:16:70:b1:a2:e1: d6:92:c7:fa:96:7a:c1:9b:9d:33:ac:ab:c4:9f:d7: 4e:e9:17:ed:93:3b:c4:4b:64:9e:fd:6d:78:19:68: e9:4f:f5:db:cb:ad:35:db:13:9e:b0:36:37:c8:10: 3a:c5:08:8e:03:4d:ec:58:91:9a:45:4e:7c:7c:fa: 67:1b:b8:e1:c7:e7:94:06:30:44:87:74:c7:9b:1e: 05:e5:7a:cd:f1:e1:fc:c9:52:4f:8c:56:d1:43:46: 6b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:B6:D1:4E:E3:14:6E:84:1D:26:7F:D4:28:03:64:88:DF:43:57 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:09:d5:58:2e:de:dd:75:19:3c:76:a1:62:81:9f:c8:e5:d2: d3:9a:64:a4:f1:03:69:99:ce:00:4b:06:f6:f2:d6:5c:95:1f: 9f:a9:c7:7a:ea:e2:41:16:2d:f2:3f:ca:c2:57:90:3f:9d:3d: da:26:39:c2:ed:28:97:8e:0e:f6:e1:0a:22:60:0c:4c:c8:7c: 2c:e5:b1:77:0f:5b:1f:16:7d:c6:8f:f2:72:17:96:45:1f:05: 15:49:01:6d:53:df:2b:77:fc:72:68:dc:9e:46:92:c4:34:6a: cf:ce:67:7b:e3:24:d0:b1:e8:8f:e3:a3:eb:2e:a8:0b:aa:75: b7:d9:d1:1d:fd:ec:72:dd:d8:d5:ca:e7:bf:c8:a6:13:4b:6f: e8:c7:41:4f:9f:ff:82:52:dd:69:bd:9f:cf:db:f1:8a:b0:b9: bc:80:0f:9f:eb:44:8b:e5:64:3d:74:df:e6:1d:2d:8d:02:35: 48:e9:cc:00:60:1a:52:13:69:d2:a7:0d:b2:e6:b7:12:bf:42: 82:ba:4e:67:d9:1a:c7:73:93:82:ad:fe:24:cd:5a:85:eb:67: f5:d9:cb:60:ce:a3:3e:18:6e:1f:2a:df:db:d7:59:8b:9f:94: b7:d3:e6:70:37:52:fc:85:07:94:e3:f2:b5:69:37:dc:57:fa: 4f:a4:21:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjUwODIzMDAzNjE0WhcNMjUwODMwMDAzNjE0WjAYMRYwFAYD VQQDEw02OGE5MGNmZS0zNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMC1SLn+mXmgM5dQn6OqtS9kq4CvCTlmWVOLkpHnwjHhvwOCuZQPZz0RDGkZ XyHUHvwgtkQmfcHdUVCdov3sZrYT1jepp6dhj3QtSCweMcv4YOXTvd8nw1jaFjBD 4K/mkO5ZMCJOzoflREHV/Dx6RgajzeRkV+cY0PKWfp88x/FD0Lwb/Fkay8Y0gHqd 6JS711gTAcVSvh5I5Jz4xACEFnCxouHWksf6lnrBm50zrKvEn9dO6RftkzvES2Se /W14GWjpT/Xby6012xOesDY3yBA6xQiOA03sWJGaRU58fPpnG7jhx+eUBjBEh3TH mx4F5XrN8eH8yVJPjFbRQ0ZrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7yttFO 4xRuhB0mf9QoA2SI30NXMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLCdVYLt7ddRk8dqFigZ/I5dLTmmSk8QNpmc4ASwb28tZclR+fqcd6 6uJBFi3yP8rCV5A/nT3aJjnC7SiXjg724QoiYAxMyHws5bF3D1sfFn3Gj/JyF5ZF HwUVSQFtU98rd/xyaNyeRpLENGrPzmd74yTQseiP46PrLqgLqnW32dEd/exy3djV yue/yKYTS2/ox0FPn/+CUt1pvZ/P2/GKsLm8gA+f60SL5WQ9dN/mHS2NAjVI6cwA YBpSE2nSpw2y5rcSv0KCuk5n2RrHc5OCrf4kzVqF62f12ctgzqM+GG4fKt/b11mL n5S30+ZwN1L8hQeU4/K1aTfcV/pPpCHV -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:42 2025 by rpki-client