$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json) Hash identifier: 0pN98gXVmaVz2hq4kUwbeews4AX2CW9bVRy2AJhtvls= Subject key identifier: 6C:35:3E:19:6F:66:B4:EA:81:9F:69:AF:B6:C8:04:DE:08:A3:54:14 Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft Manifest number: 8E Signing time: Sun 29 Jun 2025 05:30:32 +0000 Manifest this update: Sun 29 Jun 2025 05:30:32 +0000 Manifest next update: Sun 06 Jul 2025 05:30:32 +0000 Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: d1M+MBZgZ5G/gIMrCX4vmyT832rwWileDj43VLfjINg=) 2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: Nz2FGej23dIiDwRtV6Sp50mpW+TP9HnxQFOScAwf8wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: Jun 29 05:30:32 2025 GMT Not After : Jul 6 05:30:32 2025 GMT Subject: CN=6860cf78-9b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:f9:5a:27:bd:22:1f:d6:cc:0d:9a:80:ae: 4a:02:ee:70:a5:e4:e3:2d:21:20:14:4e:a6:3e:3a: 00:21:73:e9:96:79:e4:92:44:d2:88:0f:85:56:f0: 0c:3b:72:b8:83:48:4e:89:f5:1e:2b:c4:ad:e8:3d: e8:4a:4f:d6:85:bd:f3:71:e8:25:85:fc:95:64:5c: b1:d1:62:ab:33:a0:f5:d1:6f:39:9a:ea:9a:56:95: 93:d5:d3:45:75:fc:85:0b:29:31:9d:3c:0c:b4:9c: 58:44:90:63:33:e4:2c:e9:58:87:77:d1:a2:b6:f7: e1:c1:18:39:5b:28:cb:1e:b7:e9:ca:40:3b:ea:a8: 38:00:98:33:e5:cd:f6:b4:61:57:8e:84:5a:5e:28: 51:7f:04:b7:f0:4c:a1:2a:c9:da:d9:37:e9:88:36: 6b:be:e5:9b:7b:47:37:78:a5:99:ac:4f:e1:3f:49: f5:32:d1:25:ca:cf:e6:a9:24:25:32:67:22:6a:d1: a2:54:1d:29:64:3c:44:ec:35:28:26:47:ba:7e:d5: 1c:0c:a6:36:0a:25:80:7c:0e:2e:84:3f:a5:71:06: 65:eb:b7:37:58:d6:f5:58:ff:99:83:a7:6c:48:f4: d8:9f:2c:44:77:b1:6b:4a:44:28:8a:a6:15:ed:9b: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:35:3E:19:6F:66:B4:EA:81:9F:69:AF:B6:C8:04:DE:08:A3:54:14 X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:dd:07:26:47:2c:25:e7:1e:6a:2c:8b:82:53:0f:ce:cb:fc: 78:97:ee:43:d2:29:e4:b1:cf:d1:43:62:62:59:06:ca:43:55: ca:01:e3:55:eb:96:b0:a3:70:d9:9a:fb:c2:da:f8:e5:93:4c: 8f:b8:95:56:ae:72:3f:26:9a:d4:ed:75:97:48:a5:ce:87:b4: 64:53:e3:6c:4d:18:91:33:43:bf:f6:ca:46:73:64:92:ed:75: a3:d9:aa:81:e5:9c:84:2a:ee:2e:eb:68:e9:d4:2d:17:0e:22: d4:c8:7b:06:90:8d:4b:7d:58:7e:46:0a:e2:b0:dc:6f:0e:cd: b5:eb:74:a1:b6:c9:9d:c0:6a:a5:88:b8:0d:17:d1:8f:fb:f8: f6:4b:f3:b8:f6:6f:11:e8:fc:40:78:62:a5:81:65:bb:bd:3d: 98:47:6e:d3:b6:b0:28:7b:37:31:dd:b3:6a:e7:81:3b:80:be: da:f8:4e:82:6f:b3:3e:19:b5:b3:82:63:bb:88:24:bf:2f:6c: 73:ef:42:a8:76:df:62:78:59:b4:56:95:2b:45:53:7b:cc:36: 66:13:d1:b4:20:4c:11:56:21:3d:b6:e8:81:08:21:6e:c2:ab: c6:6a:3d:53:69:36:ff:a0:85:9b:f7:d5:d6:f4:f3:f1:17:65: 7b:1c:9e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC MTIyRkRFNzYwHhcNMjUwNjI5MDUzMDMyWhcNMjUwNzA2MDUzMDMyWjAYMRYwFAYD VQQDEw02ODYwY2Y3OC05YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEr5Wie9Ih/WzA2agK5KAu5wpeTjLSEgFE6mPjoAIXPplnnkkkTSiA+FVvAM O3K4g0hOifUeK8St6D3oSk/Whb3zceglhfyVZFyx0WKrM6D10W85muqaVpWT1dNF dfyFCykxnTwMtJxYRJBjM+Qs6ViHd9GitvfhwRg5WyjLHrfpykA76qg4AJgz5c32 tGFXjoRaXihRfwS38EyhKsna2TfpiDZrvuWbe0c3eKWZrE/hP0n1MtElys/mqSQl MmciatGiVB0pZDxE7DUoJke6ftUcDKY2CiWAfA4uhD+lcQZl67c3WNb1WP+Zg6ds SPTYnyxEd7FrSkQoiqYV7Zsx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw1Phlv ZrTqgZ9pr7bIBN4Io1QUMB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ERjY5NEJBNjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdH cHBmTENtV2lIbHl4SXYzblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO3QcmRywl5x5qLIuCUw/Oy/x4l+5D0inksc/RQ2JiWQbKQ1XKAeNV 65awo3DZmvvC2vjlk0yPuJVWrnI/JprU7XWXSKXOh7RkU+NsTRiRM0O/9spGc2SS 7XWj2aqB5ZyEKu4u62jp1C0XDiLUyHsGkI1LfVh+RgrisNxvDs2163ShtsmdwGql iLgNF9GP+/j2S/O49m8R6PxAeGKlgWW7vT2YR27TtrAoezcx3bNq54E7gL7a+E6C b7M+GbWzgmO7iCS/L2xz70Kodt9ieFm0VpUrRVN7zDZmE9G0IEwRViE9tuiBCCFu wqvGaj1TaTb/oIWb99XW9PPxF2V7HJ5S -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:10 2025 by rpki-client