$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json) Hash identifier: cGCqdasTBfPRhw3IF280lxJiuKPus4Gm1XDMIdjDKx4= Subject key identifier: 31:63:71:FD:A9:E8:76:E6:EF:E5:3A:C9:0E:16:80:45:02:CF:0C:CF Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft Manifest number: AA Signing time: Sat 23 Aug 2025 06:21:34 +0000 Manifest this update: Sat 23 Aug 2025 06:21:34 +0000 Manifest next update: Sat 30 Aug 2025 06:21:34 +0000 Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: bR4gz2irc5xcY6J1nPjuoy85S8s/RaTXoqOS26ajSuQ=) 2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: Nz2FGej23dIiDwRtV6Sp50mpW+TP9HnxQFOScAwf8wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: Aug 23 06:21:34 2025 GMT Not After : Aug 30 06:21:34 2025 GMT Subject: CN=68a95dee-7502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:76:7d:82:4f:7a:4d:19:d5:42:31:03:a6: b0:8a:81:3e:9b:6d:06:8c:1d:5d:9f:c0:c7:ad:49: d9:75:fb:5a:16:0e:07:f7:4b:16:fe:26:b7:35:86: d7:cb:d1:95:0e:00:8f:15:f1:d8:ba:56:22:3e:17: 1b:d1:90:7e:85:2c:60:83:11:eb:b1:88:a7:de:60: 32:79:b8:50:fb:88:dd:c4:1a:52:27:b9:81:a0:72: 0f:9a:2f:a0:55:04:2c:2f:27:3e:74:94:07:1b:85: 80:a9:7c:8e:a0:28:f8:9b:dc:51:74:b5:3d:01:3b: 5a:91:eb:43:c6:6d:c6:ef:a8:9e:5f:22:85:f5:0b: 04:f2:d9:43:6e:27:b5:a7:57:04:d9:1f:48:7f:c4: f9:61:17:f7:5c:38:81:3f:67:07:0b:dc:24:a0:5c: f6:f9:1f:30:4a:e3:50:cf:1b:9d:ce:74:08:5d:63: ed:65:c5:70:69:59:53:a8:18:35:e2:6d:53:4d:9a: 82:f8:d8:37:5c:46:43:8c:85:0a:b3:e5:4d:ac:4b: 96:b9:63:f8:39:cc:9b:49:0f:94:53:c0:1f:f6:0c: e7:1a:56:bf:37:b5:96:f4:f5:ae:a1:47:2d:68:67: d9:b5:4e:33:12:54:93:df:17:17:e1:fd:5a:00:d3: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:63:71:FD:A9:E8:76:E6:EF:E5:3A:C9:0E:16:80:45:02:CF:0C:CF X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:bf:4c:0b:44:5b:65:d9:6e:02:f6:e1:d2:10:f3:f2:a0:5e: 89:87:47:0c:a5:f9:d1:d3:a0:57:13:9c:0b:63:43:6e:0c:c7: 7f:ed:0d:c3:28:c4:8e:23:26:1b:ab:b6:3a:9c:2d:f5:0f:88: b1:09:7d:be:b1:60:bb:b7:41:7c:5d:47:de:2d:d4:6f:e2:20: e2:f5:84:ce:03:97:52:92:f8:2f:d4:82:8e:7e:ec:10:d6:ca: 3a:a1:d9:95:62:f9:a4:21:13:19:2e:50:4b:99:31:7c:be:26: 2f:1a:91:24:71:47:91:4e:b4:99:8b:88:67:55:bc:ac:f8:70: 05:28:3f:1c:22:1c:95:ba:95:18:8b:5e:f5:24:79:ec:99:3f: 14:b1:5a:b4:95:14:66:84:28:58:2d:87:f0:18:07:b4:9f:42: 10:27:b7:ea:78:ec:21:24:ed:f6:18:da:13:cf:79:df:93:8b: 1d:f5:df:1e:4a:b2:7a:d3:d4:69:6e:3d:f2:41:be:96:1c:ac: a3:4f:09:f1:9d:22:16:49:d7:fb:f2:ec:f2:dc:e3:9b:7a:bf: 57:0d:d6:6d:4d:b2:2d:c4:ff:c5:49:80:80:79:d3:91:89:d3: 7a:ef:ca:21:19:ea:74:ca:0e:cf:b2:59:a6:9c:08:56:a4:fa: d8:17:4f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKDJEMTgwNkJCNzlGN0VDNkE2OTdDQjBBNjVBMjFFNUNC MTIyRkRFNzYwHhcNMjUwODIzMDYyMTM0WhcNMjUwODMwMDYyMTM0WjAYMRYwFAYD VQQDEw02OGE5NWRlZS03NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yx2fYJPek0Z1UIxA6awioE+m20GjB1dn8DHrUnZdftaFg4H90sW/ia3NYbX y9GVDgCPFfHYulYiPhcb0ZB+hSxggxHrsYin3mAyebhQ+4jdxBpSJ7mBoHIPmi+g VQQsLyc+dJQHG4WAqXyOoCj4m9xRdLU9ATtaketDxm3G76ieXyKF9QsE8tlDbie1 p1cE2R9If8T5YRf3XDiBP2cHC9wkoFz2+R8wSuNQzxudznQIXWPtZcVwaVlTqBg1 4m1TTZqC+Ng3XEZDjIUKs+VNrEuWuWP4OcybSQ+UU8Af9gznGla/N7WW9PWuoUct aGfZtU4zElST3xcX4f1aANOrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFjcf2p 6Hbm7+U6yQ4WgEUCzwzPMB8GA1UdIwQYMBaAFC0YBrt59+xqaXywploh5csSL952 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ERjY5NEJBNjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdHcHBmTENtV2lIbHl4SXYz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ERjY5NEJBNjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi9MUmdHdTNuMzdH cHBmTENtV2lIbHl4SXYzblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxv0wLRFtl2W4C9uHSEPPyoF6Jh0cMpfnR06BXE5wLY0NuDMd/7Q3D KMSOIyYbq7Y6nC31D4ixCX2+sWC7t0F8XUfeLdRv4iDi9YTOA5dSkvgv1IKOfuwQ 1so6odmVYvmkIRMZLlBLmTF8viYvGpEkcUeRTrSZi4hnVbys+HAFKD8cIhyVupUY i171JHnsmT8UsVq0lRRmhChYLYfwGAe0n0IQJ7fqeOwhJO32GNoTz3nfk4sd9d8e SrJ609Rpbj3yQb6WHKyjTwnxnSIWSdf78uzy3OOber9XDdZtTbItxP/FSYCAedOR idN678ohGep0yg7PslmmnAhWpPrYF08e -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:18 2025 by rpki-client