$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: LAi/msptQxG4mGYc72Cm4k78gG2Ud+lONJx1UBYr8vs= Subject key identifier: 32:12:22:CA:64:FF:39:DF:37:87:6E:AF:86:36:9C:D6:E3:DE:6C:97 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 014C Signing time: Sat 23 Aug 2025 04:25:33 +0000 Manifest this update: Sat 23 Aug 2025 04:25:33 +0000 Manifest next update: Sat 30 Aug 2025 04:25:33 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: JZBHliRaXj0iRAYUF4PcZQujZIQ1wkC6BwXQJ2rfXx4=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: Aug 23 04:25:33 2025 GMT Not After : Aug 30 04:25:33 2025 GMT Subject: CN=68a942bd-a696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:ef:fc:a0:2a:8c:bd:4c:73:41:4c:60:79: f0:ac:d0:5e:99:79:b2:e1:23:97:dd:df:17:fb:11: 33:11:fb:3c:af:18:e8:87:56:fb:10:d3:d0:ab:5a: 95:76:86:e2:9b:b1:f9:ee:27:00:70:1f:21:df:b0: 3e:c5:a9:3b:b9:8a:1f:a4:04:88:8c:84:44:99:0b: 71:33:79:e3:6a:83:1d:d8:39:76:a7:bc:9d:10:42: aa:74:45:3e:86:96:51:60:76:48:98:45:41:7e:6a: a1:4e:2f:97:ca:f0:87:20:4f:c5:a0:f3:a3:a5:78: 56:7c:b3:f3:ee:db:6a:df:92:1c:65:f1:f3:4b:0d: c5:d4:22:94:99:31:86:89:14:b0:4b:d3:6d:64:93: ba:45:47:e2:aa:d0:9b:66:4d:f5:85:37:84:71:af: 18:8f:d9:00:42:8f:b6:9d:cb:70:4d:cf:b6:a8:10: db:fe:98:68:2c:92:9e:20:b3:19:e9:24:ce:10:4f: a3:80:36:40:40:ef:ce:67:4b:59:f8:ff:3d:96:9b: 6c:a3:b3:83:99:45:0d:46:5c:ef:71:ea:60:76:95: 98:9a:73:4c:73:1e:92:60:be:19:99:b8:f6:17:8e: 6b:57:24:3c:bc:6d:5b:10:b5:56:50:01:c6:c5:61: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:22:CA:64:FF:39:DF:37:87:6E:AF:86:36:9C:D6:E3:DE:6C:97 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:71:0c:a5:62:ad:a2:c2:b1:d3:74:c9:24:d9:8b:15:7e:64: e1:8a:b7:db:76:1a:54:7d:d0:bc:fc:54:85:de:f5:88:18:cd: 09:94:aa:6f:75:73:31:53:e5:4e:62:59:d0:6d:9d:42:a4:d0: ca:21:f2:21:69:fd:b0:77:7a:14:7f:10:df:3f:a9:94:c4:48: 62:c2:5c:40:20:03:39:0b:bf:63:3d:45:90:9b:6d:d8:77:1f: 43:21:db:76:0e:01:91:79:35:34:67:fb:2a:24:1b:77:8c:10: 6d:da:f2:21:47:02:cb:87:4e:d3:c0:2d:11:50:fd:4d:7b:9a: 91:86:fe:8e:2c:bf:c3:d6:b6:9a:6a:50:c2:0e:1c:e4:e3:62: 94:eb:55:2b:92:5d:b3:9e:89:69:01:c1:f1:ac:9a:a6:c7:18: 26:7c:42:01:1f:2e:f2:d2:e4:9a:8d:21:6f:f6:37:01:7b:87: 9f:4a:12:ae:b5:45:d9:b2:df:1f:5c:5f:de:1a:2c:67:dc:ca: 0a:4c:cc:f9:00:91:ab:da:69:1f:9e:d7:38:78:a2:64:f3:ff: 79:27:ef:cd:fd:05:9b:83:7e:52:8e:79:8a:55:32:63:dd:d6: 09:42:14:ce:43:4b:79:b6:ce:51:45:c4:d6:5c:3c:28:6c:ab: 33:7b:58:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwODIzMDQyNTMzWhcNMjUwODMwMDQyNTMzWjAYMRYwFAYD VQQDEw02OGE5NDJiZC1hNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZPv/KAqjL1Mc0FMYHnwrNBemXmy4SOX3d8X+xEzEfs8rxjoh1b7ENPQq1qV dobim7H57icAcB8h37A+xak7uYofpASIjIREmQtxM3njaoMd2Dl2p7ydEEKqdEU+ hpZRYHZImEVBfmqhTi+XyvCHIE/FoPOjpXhWfLPz7ttq35IcZfHzSw3F1CKUmTGG iRSwS9NtZJO6RUfiqtCbZk31hTeEca8Yj9kAQo+2nctwTc+2qBDb/phoLJKeILMZ 6STOEE+jgDZAQO/OZ0tZ+P89lptso7ODmUUNRlzvcepgdpWYmnNMcx6SYL4Zmbj2 F45rVyQ8vG1bELVWUAHGxWFVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDISIspk /znfN4dur4Y2nNbj3myXMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtcQylYq2iwrHTdMkk2YsVfmThirfbdhpUfdC8/FSF3vWIGM0JlKpv dXMxU+VOYlnQbZ1CpNDKIfIhaf2wd3oUfxDfP6mUxEhiwlxAIAM5C79jPUWQm23Y dx9DIdt2DgGReTU0Z/sqJBt3jBBt2vIhRwLLh07TwC0RUP1Ne5qRhv6OLL/D1raa alDCDhzk42KU61Urkl2znolpAcHxrJqmxxgmfEIBHy7y0uSajSFv9jcBe4efShKu tUXZst8fXF/eGixn3MoKTMz5AJGr2mkfntc4eKJk8/95J+/N/QWbg35SjnmKVTJj 3dYJQhTOQ0t5ts5RRcTWXDwobKsze1i1 -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:00 2025 by rpki-client