$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: nMFi0KngYJ1N1TehvLJhVEaiFdkOgk8u6cGFQMO5sN4= Subject key identifier: 8A:A1:2B:AB:DE:B9:9D:59:F4:B5:A1:C9:9D:35:28:C8:27:F5:D2:1D Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B5B Signing time: Fri 22 Aug 2025 19:17:52 +0000 Manifest this update: Fri 22 Aug 2025 19:17:52 +0000 Manifest next update: Fri 29 Aug 2025 19:17:52 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: wbZH6S4FuYG2NTFQrgdNkqJ+22nta5UK19R5AXdDtrI=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2932 (0xb74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Aug 22 19:17:52 2025 GMT Not After : Aug 29 19:17:52 2025 GMT Subject: CN=68a8c260-eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:fb:be:44:8c:61:4e:08:d2:ad:84:2a:10: 92:5c:76:f8:c9:7e:2d:92:01:0a:ab:e4:3f:c3:df: ab:c2:42:a4:b5:29:8b:ab:b4:37:a0:d7:73:01:34: 65:41:97:52:c7:5f:24:00:25:58:43:9c:2b:3b:23: c7:ed:ef:68:7d:94:41:19:1c:16:ff:e2:d7:32:84: 52:2c:cc:04:92:51:e7:06:80:c6:12:d6:49:4a:97: 6f:3c:59:78:d8:10:5c:f8:30:d4:93:ab:91:6a:6e: 1b:37:68:17:37:c5:7c:5c:2e:df:b1:28:cc:39:b3: 63:43:80:37:6c:b6:06:ba:64:ae:4e:e0:b7:83:8c: b1:51:69:90:fa:30:c1:c1:31:0e:23:4b:c5:4a:49: 8c:d3:6c:8f:63:8c:9e:44:dc:3b:28:31:4c:d3:db: 95:33:fd:76:fb:30:6a:d6:ba:db:64:99:f7:a8:34: b2:a4:01:ab:f3:9a:1d:6b:0b:9e:4a:39:54:dc:cb: ae:ff:c4:4b:31:b2:ce:5f:44:9c:72:41:18:99:44: e1:26:6d:fa:64:f1:fa:82:56:94:59:89:bb:9a:f2: fa:2f:2a:a5:79:f1:1a:a1:a2:83:fd:2e:22:13:2a: 37:c5:e4:16:5a:e8:73:aa:13:d0:1e:ca:23:72:2c: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:2B:AB:DE:B9:9D:59:F4:B5:A1:C9:9D:35:28:C8:27:F5:D2:1D X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ef:97:62:e1:ff:36:bc:a5:c6:64:50:19:c5:41:ba:d3:dc: 44:bc:61:2e:a2:fa:33:0c:0f:50:7d:e4:b8:f1:34:07:24:9c: ff:12:4f:41:27:42:79:7c:1e:ac:c5:74:fe:16:6a:1d:d7:e8: ab:5b:b4:9d:13:7a:74:6b:f3:a0:4b:18:18:39:15:1f:ba:43: 02:2e:a5:28:d1:f6:f3:52:49:15:b6:0f:f3:e1:e4:b8:9f:1b: 48:5b:2b:08:bf:c9:36:ce:d3:99:5e:19:93:b0:95:fa:9e:c5: d4:b7:42:7b:51:ef:be:6c:c3:39:3d:9f:e9:6b:55:f4:ef:6b: 29:4f:0d:7a:2e:12:10:a0:5d:35:0c:3d:a9:b3:07:7d:d8:47: 07:80:2c:a6:63:70:3a:64:82:9d:61:ce:95:cd:71:0b:69:26: 01:f0:8a:48:ee:64:b4:eb:cb:65:ad:a9:71:de:8d:f9:c7:c0: 96:e8:00:32:d5:a5:d4:d2:e3:33:0c:ae:95:c0:10:c2:28:61: 91:dd:35:8e:56:80:b7:4f:ad:63:31:01:35:a2:8a:72:7f:61: 7d:fe:24:58:4b:d6:92:d8:59:5c:a7:28:69:34:7e:8e:bf:19: 9f:ae:98:b7:39:72:ba:43:d4:37:3b:ab:ce:9a:fb:bc:db:9e: 12:21:c9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwODIyMTkxNzUyWhcNMjUwODI5MTkxNzUyWjAYMRYwFAYD VQQDEw02OGE4YzI2MC1lYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlr7vkSMYU4I0q2EKhCSXHb4yX4tkgEKq+Q/w9+rwkKktSmLq7Q3oNdzATRl QZdSx18kACVYQ5wrOyPH7e9ofZRBGRwW/+LXMoRSLMwEklHnBoDGEtZJSpdvPFl4 2BBc+DDUk6uRam4bN2gXN8V8XC7fsSjMObNjQ4A3bLYGumSuTuC3g4yxUWmQ+jDB wTEOI0vFSkmM02yPY4yeRNw7KDFM09uVM/12+zBq1rrbZJn3qDSypAGr85odawue SjlU3Muu/8RLMbLOX0ScckEYmUThJm36ZPH6glaUWYm7mvL6LyqlefEaoaKD/S4i Eyo3xeQWWuhzqhPQHsojcizH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqhK6ve uZ1Z9LWhyZ01KMgn9dIdMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA975di4f82vKXGZFAZxUG609xEvGEuovozDA9QfeS48TQHJJz/Ek9B J0J5fB6sxXT+Fmod1+irW7SdE3p0a/OgSxgYORUfukMCLqUo0fbzUkkVtg/z4eS4 nxtIWysIv8k2ztOZXhmTsJX6nsXUt0J7Ue++bMM5PZ/pa1X072spTw16LhIQoF01 DD2pswd92EcHgCymY3A6ZIKdYc6VzXELaSYB8IpI7mS068tlralx3o35x8CW6AAy 1aXU0uMzDK6VwBDCKGGR3TWOVoC3T61jMQE1oopyf2F9/iRYS9aS2FlcpyhpNH6O vxmfrpi3OXK6Q9Q3O6vOmvu8254SIcnv -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:45 2025 by rpki-client