$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: SxdkBMIAadZyWKLKOQ08e5sAaFnZw9MA9SFinICLYsU= Subject key identifier: CE:DB:7D:3F:B1:1F:A0:BB:E4:9A:D4:7C:B5:84:64:BC:F4:86:E1:CC Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0ABB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0AA3 Signing time: Fri 22 Aug 2025 19:39:47 +0000 Manifest this update: Fri 22 Aug 2025 19:39:46 +0000 Manifest next update: Fri 29 Aug 2025 19:39:46 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: PTCfUwDlGWHVe7pnir9b9MzgTeHfTHFH/q3grDgS3VQ=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: ibrlLqXyJBvhReQbTY44ZuUpmVrk/0dppjxQ0Xpe60o=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: oypYrt94xP1HGfkKHJnrEVZNMxQYAmf9WSyWVpRVwus=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 1NXDKHdGdwmQ0HPSNP/L0h3g8vj3YJvsOmeCBe7yxT0=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: lhMvYRsrjVyA66+IzRjCtkWTHGswP9g49oqeoBG1Neg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2747 (0xabb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Aug 22 19:39:46 2025 GMT Not After : Aug 29 19:39:46 2025 GMT Subject: CN=68a8c783-4219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:d0:7f:90:98:aa:65:5c:2f:90:54:b7:ed: 39:21:1a:a3:27:b2:2e:36:7e:97:d7:01:2a:13:02: 4d:a8:67:3f:d4:42:0a:85:43:3e:af:d1:b6:cf:80: 0a:5e:69:4f:52:bb:d9:78:cc:e3:33:66:00:f1:3f: 5d:53:31:ac:ee:7d:c7:0e:0f:75:ad:c4:d6:19:1e: f6:4c:aa:a6:94:7a:22:08:11:ee:98:72:9e:5d:16: 13:dd:28:35:d5:60:1f:87:c7:d9:1f:ef:8d:5e:5e: ee:7c:d8:70:61:c2:07:77:b0:e3:ce:29:ba:02:59: cc:96:c1:3d:ec:5d:57:fa:42:55:01:c9:f7:86:87: 23:da:d0:d3:a3:47:5f:94:25:77:9f:16:0b:4f:dd: 95:d6:0d:fc:67:6c:57:1b:d6:02:0a:22:de:29:fc: b6:42:46:aa:81:82:38:85:83:4f:07:8f:eb:81:2d: 5b:d6:d5:de:6c:3e:12:5f:31:13:31:ff:61:3f:ea: 8e:33:fe:a0:f6:82:a5:ea:5f:37:97:c2:88:e8:17: 94:e9:d1:e6:c9:c1:f2:0f:29:83:d4:79:55:eb:51: 6e:e6:ff:38:25:db:3d:cd:ab:4f:01:bb:5e:f0:e2: e2:b7:8f:4e:2a:75:0f:57:0d:2a:af:6a:56:31:6a: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:7D:3F:B1:1F:A0:BB:E4:9A:D4:7C:B5:84:64:BC:F4:86:E1:CC X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c3:66:88:17:4d:b8:cb:01:e1:7e:4d:fe:e6:8d:4c:92:bb: c9:01:68:1c:02:e1:63:e3:ac:57:32:d7:11:2d:16:9a:83:cc: 46:a7:83:de:d2:53:78:69:e1:e4:81:a8:99:6d:1e:ef:19:c5: 1c:4e:50:5d:1b:64:ae:ed:90:32:28:75:1d:55:19:cc:27:ae: 8c:f8:a7:12:e8:af:86:78:40:ac:3b:76:e2:75:e3:60:b9:66: 52:69:cb:ba:e0:ff:ae:e8:1f:06:e1:cc:19:51:8b:13:b1:05: 0f:19:67:50:64:1e:6c:f4:11:66:0f:14:5d:42:90:b4:d3:55: 9e:fb:c7:81:ed:dc:80:3a:73:6a:cb:30:dd:3d:69:e6:0f:75: ff:c2:43:ec:32:45:01:94:dc:a4:5e:54:6b:27:4b:e3:98:48: 7e:5d:4b:56:60:20:65:89:8d:b6:ae:79:42:94:48:36:77:a5: ba:69:5e:43:1c:83:af:b8:83:40:39:70:e2:bb:42:ff:82:23: 11:21:91:35:af:8b:6a:4d:a0:db:76:28:e0:d5:d8:75:61:a5: 73:09:a3:35:ed:ec:da:e6:00:4b:38:51:49:9b:f0:7c:a4:87: 7e:02:48:55:cd:98:18:ef:59:79:df:ee:4f:e3:f0:dd:69:0a: 4b:6f:16:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwODIyMTkzOTQ2WhcNMjUwODI5MTkzOTQ2WjAYMRYwFAYD VQQDEw02OGE4Yzc4My00MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEjQf5CYqmVcL5BUt+05IRqjJ7IuNn6X1wEqEwJNqGc/1EIKhUM+r9G2z4AK XmlPUrvZeMzjM2YA8T9dUzGs7n3HDg91rcTWGR72TKqmlHoiCBHumHKeXRYT3Sg1 1WAfh8fZH++NXl7ufNhwYcIHd7Djzim6AlnMlsE97F1X+kJVAcn3hocj2tDTo0df lCV3nxYLT92V1g38Z2xXG9YCCiLeKfy2QkaqgYI4hYNPB4/rgS1b1tXebD4SXzET Mf9hP+qOM/6g9oKl6l83l8KI6BeU6dHmycHyDymD1HlV61Fu5v84Jds9zatPAbte 8OLit49OKnUPVw0qr2pWMWow/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7bfT+x H6C75JrUfLWEZLz0huHMMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbw2aIF024ywHhfk3+5o1MkrvJAWgcAuFj46xXMtcRLRaag8xGp4Pe 0lN4aeHkgaiZbR7vGcUcTlBdG2Su7ZAyKHUdVRnMJ66M+KcS6K+GeECsO3bideNg uWZSacu64P+u6B8G4cwZUYsTsQUPGWdQZB5s9BFmDxRdQpC001We+8eB7dyAOnNq yzDdPWnmD3X/wkPsMkUBlNykXlRrJ0vjmEh+XUtWYCBliY22rnlClEg2d6W6aV5D HIOvuINAOXDiu0L/giMRIZE1r4tqTaDbdijg1dh1YaVzCaM17eza5gBLOFFJm/B8 pId+AkhVzZgY71l53+5P4/DdaQpLbxYz -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:28 2025 by rpki-client