$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: KjiOCXyNpnqoaa4W/Ce+fD5F4TNMCOX0Sdi+1IBfmJ8= Subject key identifier: 1F:09:E1:B3:9F:C9:0C:13:0D:E9:B8:7C:DB:55:2C:F0:6E:D3:E9:12 Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0A87 Signing time: Wed 02 Jul 2025 19:48:20 +0000 Manifest this update: Wed 02 Jul 2025 19:48:19 +0000 Manifest next update: Wed 09 Jul 2025 19:48:19 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: 9wdbJW54Vu6iZVs5Z3OFtRyhsLiAMCPQcW7uLuN+pwQ=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Jul 2 19:48:19 2025 GMT Not After : Jul 9 19:48:19 2025 GMT Subject: CN=68658d03-2c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:23:09:94:bb:b9:1d:b3:05:72:c7:e3:03: db:13:cc:2f:8d:7d:5d:d0:9a:90:85:ae:8a:a8:b7: c0:79:a0:6e:62:bf:21:35:ca:85:4c:80:b5:df:ab: 10:a6:cf:a1:5b:93:43:9a:ca:f5:b9:21:03:6a:03: 59:6b:6d:3b:17:fc:2b:f5:b6:d9:ca:32:37:9f:15: 01:7d:2f:42:d5:6e:3c:22:ae:9e:71:d1:ec:f3:80: da:39:f9:24:04:12:eb:82:c4:b2:5b:0a:e5:bb:13: f0:91:06:93:15:58:d6:91:fe:6c:d6:25:0f:5b:f1: 3d:c2:ce:ee:72:47:a9:1d:1a:03:26:41:92:90:72: 55:27:02:10:d8:a0:78:df:83:ca:8b:c7:82:71:a4: cb:0d:c7:70:24:9f:16:87:20:fe:18:6a:90:fe:61: 3f:34:af:79:60:b7:f3:b0:19:77:42:57:81:ec:de: 9d:9d:8b:79:1f:0d:c0:49:3d:8e:3e:ad:65:1b:4d: 82:4a:7e:70:cd:6f:95:1c:76:5a:62:65:04:6a:be: 1e:43:04:61:36:89:be:3f:9f:24:4a:2d:fc:fc:9a: 69:10:2e:ac:73:2b:69:57:76:27:71:d7:46:94:b8: cb:96:94:ec:07:97:74:1a:4e:79:98:5a:2e:31:42: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:E1:B3:9F:C9:0C:13:0D:E9:B8:7C:DB:55:2C:F0:6E:D3:E9:12 X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b0:a3:fa:87:ec:bc:3a:b5:d7:a7:76:d8:13:b4:2a:bd:ed: 0c:a9:db:c4:84:74:2a:2b:4f:3d:30:93:b5:5b:c5:4a:24:3c: e6:7a:1a:87:99:bd:fe:3a:d6:07:35:82:3a:ca:24:1c:ee:f1: 62:c8:4d:d3:4b:0f:92:29:eb:ea:bb:05:4c:a1:91:ec:bb:59: 88:d9:63:e2:bb:dc:27:0c:55:1f:0d:e6:a5:05:31:37:2d:e1: ec:e6:4f:37:0a:70:88:b8:95:7f:5f:af:d7:e6:52:7a:1f:2d: e7:f1:62:4b:84:1c:e6:b9:ed:c2:64:9d:20:5c:26:12:e9:81: 04:9e:9d:cb:cd:46:88:2e:1e:2c:c5:d2:85:e6:f5:6d:42:78: 5f:57:62:40:65:c1:fd:a2:42:f5:56:bf:32:e9:61:12:fb:68: a4:7c:a2:2c:9b:51:eb:3c:0e:8e:25:be:e0:2e:c7:49:6e:c8: f8:5f:e9:4f:94:1a:2d:6e:72:70:2f:70:1e:46:a9:ce:3f:6b: a1:ea:a4:a4:65:9a:0b:0b:ab:9d:5e:0a:0e:39:eb:c0:d5:2b: 3e:41:41:70:ec:f1:69:74:24:57:1f:f3:73:15:2a:17:52:62: 9e:71:70:92:ed:9b:1a:e1:53:8f:88:0b:ad:c8:2f:cd:4b:f8: e8:a2:fe:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwNzAyMTk0ODE5WhcNMjUwNzA5MTk0ODE5WjAYMRYwFAYD VQQDEw02ODY1OGQwMy0yYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmIjCZS7uR2zBXLH4wPbE8wvjX1d0JqQha6KqLfAeaBuYr8hNcqFTIC136sQ ps+hW5NDmsr1uSEDagNZa207F/wr9bbZyjI3nxUBfS9C1W48Iq6ecdHs84DaOfkk BBLrgsSyWwrluxPwkQaTFVjWkf5s1iUPW/E9ws7uckepHRoDJkGSkHJVJwIQ2KB4 34PKi8eCcaTLDcdwJJ8WhyD+GGqQ/mE/NK95YLfzsBl3QleB7N6dnYt5Hw3AST2O Pq1lG02CSn5wzW+VHHZaYmUEar4eQwRhNom+P58kSi38/JppEC6scytpV3YncddG lLjLlpTsB5d0Gk55mFouMULF4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8J4bOf yQwTDem4fNtVLPBu0+kSMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRsKP6h+y8OrXXp3bYE7Qqve0MqdvEhHQqK089MJO1W8VKJDzmehqH mb3+OtYHNYI6yiQc7vFiyE3TSw+SKevquwVMoZHsu1mI2WPiu9wnDFUfDealBTE3 LeHs5k83CnCIuJV/X6/X5lJ6Hy3n8WJLhBzmue3CZJ0gXCYS6YEEnp3LzUaILh4s xdKF5vVtQnhfV2JAZcH9okL1Vr8y6WES+2ikfKIsm1HrPA6OJb7gLsdJbsj4X+lP lBotbnJwL3AeRqnOP2uh6qSkZZoLC6udXgoOOevA1Ss+QUFw7PFpdCRXH/NzFSoX UmKecXCS7Zsa4VOPiAutyC/NS/joov67 -----END CERTIFICATE-----Generated at Thu Jul 3 12:21:09 2025 by rpki-client