$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: eSfUEYud/n3lzYqc8MPeWy54VZt9bFnErU454VIKmY4= Subject key identifier: 6C:B5:CA:49:9A:28:36:A3:78:8C:F0:9B:76:88:29:7F:DF:A3:38:B7 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B40 Signing time: Mon 30 Jun 2025 19:22:27 +0000 Manifest this update: Mon 30 Jun 2025 19:22:27 +0000 Manifest next update: Mon 07 Jul 2025 19:22:27 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: 9UqfxFndPKxPwnaglJ4JYKoGWMY1tQGkb1UF6UnyVC0=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Jun 30 19:22:27 2025 GMT Not After : Jul 7 19:22:27 2025 GMT Subject: CN=6862e3f3-3616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:2c:4a:5e:ca:26:48:80:a2:ed:66:76:d1: 9f:8c:f2:4a:4c:e9:ac:b3:4c:19:fd:a4:1c:bf:82: f7:74:2a:0d:98:03:78:2a:22:9f:61:d0:64:43:5b: 0e:b8:14:cb:a0:a3:15:48:7b:8f:1a:34:03:e7:64: 16:0c:56:9b:9b:4d:5f:c8:d0:67:18:67:46:08:88: 5b:87:31:ea:5c:f4:1d:07:7d:83:0c:7b:af:59:1a: b1:66:03:94:97:a6:be:68:80:21:28:82:e0:1d:7f: 53:1b:21:71:d3:f4:80:aa:7a:6c:9b:93:77:ac:6b: 54:2b:92:3e:05:0a:c1:b4:64:97:e5:b7:19:2a:ba: bd:47:11:22:16:db:b2:d1:55:05:3b:fb:c5:02:bb: f6:f4:96:4b:7a:f9:a2:af:23:fe:08:f0:81:b2:9e: cf:cd:8e:f2:a6:8b:dd:ee:a7:ea:91:ef:2c:87:a3: b3:8e:7e:f7:ae:21:08:ff:0a:8c:87:41:75:8e:43: 57:ae:2a:ea:5c:cd:83:9a:75:f3:fe:28:69:56:78: 4f:78:60:2f:3c:2f:b7:59:ea:3d:75:5b:83:8c:08: 3b:2b:23:c2:1d:06:d0:d5:4d:13:a4:b9:98:3c:45: 96:01:7d:89:27:05:55:8a:7d:a9:a3:8b:4b:6b:85: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:CA:49:9A:28:36:A3:78:8C:F0:9B:76:88:29:7F:DF:A3:38:B7 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d0:be:74:9d:c7:b9:bc:0a:0e:b2:16:ed:c2:f5:57:96:8f: f6:b0:c2:da:73:fa:46:f2:ec:30:21:46:1e:3d:9e:4e:76:1e: 71:10:df:e6:21:9e:1a:e8:6b:3e:67:0d:4c:32:1b:5a:44:80: 4b:4f:06:a0:ec:f3:6c:02:45:17:4e:b1:c2:d1:02:10:8f:55: 58:5e:c8:6f:13:f9:2a:cf:f9:4a:d4:44:f8:49:65:95:38:9e: e1:c9:33:8e:cd:6b:e6:02:ad:02:c3:60:85:68:75:6a:88:02: 66:45:6a:1f:26:33:59:d8:71:e3:98:82:ec:51:aa:f8:12:95: 7b:70:61:eb:2d:c9:0d:4a:70:ff:5d:d3:f5:f6:7b:03:04:87: 8b:69:7e:9c:49:17:9f:e1:b4:e9:b1:83:76:15:80:f1:68:35: bc:04:8a:45:a7:db:f1:86:9c:9d:18:69:f4:7a:4c:fb:b1:d4: 6b:da:db:31:08:74:6c:4e:7e:97:7e:39:92:27:77:16:c0:6f: f7:81:d7:53:0d:4a:76:cd:8d:41:ca:4d:72:c1:91:cd:b4:3b: 8d:fb:b0:6a:88:bd:f5:ac:04:ac:02:48:85:4a:eb:38:46:b6: c1:59:98:4c:3c:95:bc:10:46:2c:5a:67:12:50:cb:a6:a3:56: d6:59:5a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwNjMwMTkyMjI3WhcNMjUwNzA3MTkyMjI3WjAYMRYwFAYD VQQDEw02ODYyZTNmMy0zNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cosSl7KJkiAou1mdtGfjPJKTOmss0wZ/aQcv4L3dCoNmAN4KiKfYdBkQ1sO uBTLoKMVSHuPGjQD52QWDFabm01fyNBnGGdGCIhbhzHqXPQdB32DDHuvWRqxZgOU l6a+aIAhKILgHX9TGyFx0/SAqnpsm5N3rGtUK5I+BQrBtGSX5bcZKrq9RxEiFtuy 0VUFO/vFArv29JZLevmiryP+CPCBsp7PzY7ypovd7qfqke8sh6Ozjn73riEI/wqM h0F1jkNXrirqXM2DmnXz/ihpVnhPeGAvPC+3Weo9dVuDjAg7KyPCHQbQ1U0TpLmY PEWWAX2JJwVVin2po4tLa4UeTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy1ykma KDajeIzwm3aIKX/fozi3MB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0L50nce5vAoOshbtwvVXlo/2sMLac/pG8uwwIUYePZ5Odh5xEN/m IZ4a6Gs+Zw1MMhtaRIBLTwag7PNsAkUXTrHC0QIQj1VYXshvE/kqz/lK1ET4SWWV OJ7hyTOOzWvmAq0Cw2CFaHVqiAJmRWofJjNZ2HHjmILsUar4EpV7cGHrLckNSnD/ XdP19nsDBIeLaX6cSRef4bTpsYN2FYDxaDW8BIpFp9vxhpydGGn0ekz7sdRr2tsx CHRsTn6XfjmSJ3cWwG/3gddTDUp2zY1Byk1ywZHNtDuN+7BqiL31rASsAkiFSus4 RrbBWZhMPJW8EEYsWmcSUMumo1bWWVp7 -----END CERTIFICATE-----Generated at Wed Jul 2 07:25:54 2025 by rpki-client