$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: YkXwEQZ6E/+sSEE+ZM8UrqDXdzo9ONwxBNJbatO8bZo= Subject key identifier: F0:89:6F:68:49:D0:D0:52:B0:18:EB:44:1B:E4:18:CF:53:58:15:E9 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 0493 Signing time: Thu 03 Jul 2025 00:21:19 +0000 Manifest this update: Thu 03 Jul 2025 00:21:18 +0000 Manifest next update: Thu 10 Jul 2025 00:21:18 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: FUjR8Maw9ehLXFEodqjy7juCesw/r1W/M+6rJOPTtiw=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: Jul 3 00:21:18 2025 GMT Not After : Jul 10 00:21:18 2025 GMT Subject: CN=6865ccfe-162e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:26:b4:db:a5:34:3a:fd:8f:71:61:98:a3: 37:c3:9c:90:eb:e5:27:ec:1c:97:cb:75:92:52:60: 4d:00:e4:4a:a3:2e:5c:fa:19:39:8f:a1:55:c7:fc: f2:35:5a:9b:5d:fd:1f:b3:8d:40:ac:a6:5e:6f:11: 6a:c0:80:22:7f:30:9c:bf:88:37:e8:7a:72:ab:38: f9:44:62:8f:2d:7b:28:c0:aa:0b:62:12:c8:27:40: 8e:55:db:58:ee:1f:95:1b:6c:c6:14:13:bc:a0:dd: 53:d8:d7:09:dd:c6:89:3d:d0:9d:78:63:06:d5:05: 3c:e2:5a:18:f1:b5:39:db:8e:56:19:30:1f:d0:73: d7:85:47:9a:b2:b1:05:98:11:fb:8d:e1:63:be:17: 0a:6a:ce:32:34:ee:5b:21:e2:87:8d:99:ec:9f:a9: f2:ec:c9:49:3b:41:0f:36:95:7b:ca:1a:2d:12:6c: 49:60:b1:6e:54:1e:a9:f2:5f:60:ff:6c:bc:c9:85: fc:3a:39:cf:6e:74:b3:5e:1a:d8:e7:2a:fd:2b:02: df:7d:2c:5f:ce:4c:9e:a0:3d:da:8d:c2:f6:b8:26: aa:d1:0d:24:53:be:c5:79:f8:74:12:56:d4:a2:ce: f7:66:39:eb:5c:22:d8:4b:a4:ea:cb:db:f3:1b:24: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:89:6F:68:49:D0:D0:52:B0:18:EB:44:1B:E4:18:CF:53:58:15:E9 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0e:94:42:32:39:af:29:75:03:0e:73:5a:43:a8:0e:90:8a: e9:6c:a0:b8:dc:ec:4d:9d:00:cb:e8:d4:89:c6:ea:55:7f:96: 60:24:6f:41:2b:68:44:f2:eb:ca:2e:77:50:a0:1e:f5:6b:eb: 61:1a:5a:cc:01:2c:69:f0:23:1d:3c:e1:6b:81:0e:19:16:72: 0e:d3:5f:de:64:3b:76:8e:7c:ba:04:b1:b2:75:d8:3a:30:37: 0e:9b:57:f4:d0:4b:5c:47:cf:bb:5a:e6:14:c4:a1:a4:56:3c: 71:2d:74:1f:07:51:e8:ca:46:a4:6e:34:f6:93:16:bb:5b:ea: dc:4b:75:69:a1:f6:36:dc:5e:9e:9b:61:57:90:7e:29:f8:a0: 62:ac:0e:b5:c1:2c:ee:34:77:75:e6:6e:1b:d5:93:d3:61:69: 0f:56:04:a7:67:03:e2:f3:ad:c9:36:e1:d8:6c:51:a0:fa:60: ea:f7:5c:d0:a8:55:3c:42:82:d9:f8:f4:92:c1:f8:8a:78:07: 39:8a:c2:91:c8:71:07:a0:b0:91:43:9b:24:f3:fa:7d:44:e5: c4:e8:30:61:df:82:71:80:d4:ba:cc:68:03:a4:49:79:0c:b7: 9f:29:41:63:1a:c2:83:bd:91:3c:74:cd:fc:0c:55:ad:aa:f8: e9:ad:95:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUwNzAzMDAyMTE4WhcNMjUwNzEwMDAyMTE4WjAYMRYwFAYD VQQDEw02ODY1Y2NmZS0xNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoQmtNulNDr9j3FhmKM3w5yQ6+Un7ByXy3WSUmBNAORKoy5c+hk5j6FVx/zy NVqbXf0fs41ArKZebxFqwIAifzCcv4g36Hpyqzj5RGKPLXsowKoLYhLIJ0COVdtY 7h+VG2zGFBO8oN1T2NcJ3caJPdCdeGMG1QU84loY8bU5245WGTAf0HPXhUeasrEF mBH7jeFjvhcKas4yNO5bIeKHjZnsn6ny7MlJO0EPNpV7yhotEmxJYLFuVB6p8l9g /2y8yYX8OjnPbnSzXhrY5yr9KwLffSxfzkyeoD3ajcL2uCaq0Q0kU77Fefh0ElbU os73ZjnrXCLYS6Tqy9vzGyRiWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCJb2hJ 0NBSsBjrRBvkGM9TWBXpMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPDpRCMjmvKXUDDnNaQ6gOkIrpbKC43OxNnQDL6NSJxupVf5ZgJG9B K2hE8uvKLndQoB71a+thGlrMASxp8CMdPOFrgQ4ZFnIO01/eZDt2jny6BLGyddg6 MDcOm1f00EtcR8+7WuYUxKGkVjxxLXQfB1HoykakbjT2kxa7W+rcS3VpofY23F6e m2FXkH4p+KBirA61wSzuNHd15m4b1ZPTYWkPVgSnZwPi863JNuHYbFGg+mDq91zQ qFU8QoLZ+PSSwfiKeAc5isKRyHEHoLCRQ5sk8/p9ROXE6DBh34JxgNS6zGgDpEl5 DLefKUFjGsKDvZE8dM38DFWtqvjprZWO -----END CERTIFICATE-----Generated at Fri Jul 4 08:16:24 2025 by rpki-client