$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: ytsMmUsq7/bU2DWP5svN95c5M4bVRcztyHdicxVjAx8= Subject key identifier: DC:E0:CF:51:37:C3:F2:8B:0F:50:80:84:CB:A2:48:1C:8B:26:47:6C Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: 8E Signing time: Tue 01 Jul 2025 08:02:10 +0000 Manifest this update: Tue 01 Jul 2025 08:02:09 +0000 Manifest next update: Tue 08 Jul 2025 08:02:09 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: 4DFz9UQIw8ytm6d7iXyMLd6FdJkJ9kF8U5+6ZxckU8s=) 2: F830F4564F3611F0A970852BC4F9AE02.roa (hash: fiG3ruzyUrai5g5VaE9UAGeJtws3GlUHxnca+lWelW4=) 3: 935707803BE711F09494D037C4F9AE02.roa (hash: +MXUF9DoN5yICuNkNZAMJrDi3yE0Lm5ipoQu5U0V5cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Jul 1 08:02:09 2025 GMT Not After : Jul 8 08:02:09 2025 GMT Subject: CN=68639602-aca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:bb:83:3e:de:80:02:1c:cd:d0:d3:4a:18: dd:52:8f:5a:4f:e9:c7:55:b5:1b:e8:09:3a:25:09: 7e:3a:5b:ad:c3:b6:f0:be:fd:5f:36:16:25:16:ec: 3d:5f:4b:99:b3:db:9d:b6:ff:e6:c4:a5:d6:57:65: 52:31:b7:e0:c9:b7:75:70:21:6c:84:6d:5e:79:b1: 8d:93:03:c3:12:08:d8:e3:d9:60:0e:41:0f:66:cc: 01:27:74:de:c9:b2:09:0f:67:61:30:0c:d9:0e:81: d5:72:db:e0:65:da:4e:0e:2c:f7:e6:a2:f0:c1:e4: 6c:dc:0a:1f:83:b3:64:99:fa:23:99:f8:d6:d7:60: 79:2e:c6:56:85:0e:80:b4:5c:3b:13:1c:bd:67:87: ae:6c:fc:ab:55:09:20:81:2b:52:d3:8d:39:cd:e7: 9f:7d:bc:b9:51:af:7f:03:d4:85:12:fd:fa:5e:be: b0:6b:16:d5:be:a2:08:c0:84:3b:6f:51:82:77:e0: b0:ab:20:44:a1:9e:1a:0a:67:01:34:6b:90:7b:47: 61:94:2e:53:92:4a:ab:58:5a:f8:3b:66:8b:79:85: 7f:e3:2c:ba:83:4e:c6:ba:98:3d:35:39:6e:00:01: d2:e0:f7:30:68:c6:73:e4:21:51:8c:65:96:d5:62: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E0:CF:51:37:C3:F2:8B:0F:50:80:84:CB:A2:48:1C:8B:26:47:6C X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b0:76:44:03:23:a2:b5:b7:89:bd:56:96:98:0e:1b:29:c7: 3e:dd:ce:91:bb:fa:6e:31:a0:cf:e1:26:15:fb:f0:a4:8a:fa: 69:e7:b8:2a:1a:75:64:a5:50:42:c4:c6:97:63:85:77:6d:2a: 45:9e:0b:24:39:d8:7f:70:87:6c:cf:c8:71:78:3e:37:d9:d2: 6e:7b:1a:59:8d:59:78:85:a7:13:5d:64:4d:27:55:11:0b:ed: dd:f1:6a:7f:bc:bc:90:1e:a9:2a:69:1d:99:88:27:da:f7:92: 6a:1d:d5:48:2a:06:13:e6:a2:4b:5d:2a:b7:ac:86:95:ef:f1: db:13:ed:da:fa:f2:90:e1:0d:78:7c:33:c1:63:8b:49:69:de: ff:52:9c:f3:fd:ea:6b:81:f3:b4:40:ef:32:51:85:80:b9:29: 77:3d:a3:f1:98:9b:e6:88:fa:c7:70:06:b8:8d:91:df:8f:45: 24:ee:e7:33:ce:78:ef:00:29:c9:0e:76:0a:00:ac:b6:5d:8c: 58:dc:fd:cb:1e:11:f1:60:c4:c2:44:ea:e8:77:ed:42:90:b5: 9b:57:cd:c7:90:11:7f:a1:8a:39:58:c7:b6:d8:46:51:4c:89: ac:9e:41:b3:9c:79:4a:fa:1a:62:08:44:69:90:d4:90:b2:e3: 80:05:c0:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw NzcwRTI5MEQwHhcNMjUwNzAxMDgwMjA5WhcNMjUwNzA4MDgwMjA5WjAYMRYwFAYD VQQDEw02ODYzOTYwMi1hY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp67gz7egAIczdDTShjdUo9aT+nHVbUb6Ak6JQl+Olutw7bwvv1fNhYlFuw9 X0uZs9udtv/mxKXWV2VSMbfgybd1cCFshG1eebGNkwPDEgjY49lgDkEPZswBJ3Te ybIJD2dhMAzZDoHVctvgZdpODiz35qLwweRs3Aofg7NkmfojmfjW12B5LsZWhQ6A tFw7Exy9Z4eubPyrVQkggStS0405zeeffby5Ua9/A9SFEv36Xr6waxbVvqIIwIQ7 b1GCd+CwqyBEoZ4aCmcBNGuQe0dhlC5TkkqrWFr4O2aLeYV/4yy6g07Gupg9NTlu AAHS4PcwaMZz5CFRjGWW1WLyeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzgz1E3 w/KLD1CAhMuiSByLJkdsMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdX bmhQaHo5RmhzZllIY09LUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrsHZEAyOitbeJvVaWmA4bKcc+3c6Ru/puMaDP4SYV+/Ckivpp57gq GnVkpVBCxMaXY4V3bSpFngskOdh/cIdsz8hxeD432dJuexpZjVl4hacTXWRNJ1UR C+3d8Wp/vLyQHqkqaR2ZiCfa95JqHdVIKgYT5qJLXSq3rIaV7/HbE+3a+vKQ4Q14 fDPBY4tJad7/Upzz/eprgfO0QO8yUYWAuSl3PaPxmJvmiPrHcAa4jZHfj0Uk7ucz znjvACnJDnYKAKy2XYxY3P3LHhHxYMTCROrod+1CkLWbV83HkBF/oYo5WMe22EZR TImsnkGznHlK+hpiCERpkNSQsuOABcAU -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:52 2025 by rpki-client