$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: AAbAWsw4lJAnldQGF6AYKY3eBLwTtAOEaUw+Nv+eMp4= Subject key identifier: F3:5A:E4:8B:48:C4:B6:6B:6D:BB:00:A0:9C:29:A1:0B:0E:D3:57:7F Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: 89 Signing time: Thu 03 Jul 2025 06:48:46 +0000 Manifest this update: Thu 03 Jul 2025 06:48:46 +0000 Manifest next update: Thu 10 Jul 2025 06:48:46 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: uYPNB24OvSRtW3IfER6qG0O01fN9eWU02Mp0IAXKxos=) 2: B3DA6A52A96511EFB3EB6721C4F9AE02.roa (hash: FFio9OtmebaEzCJyFXTCLhGivXqzWOQVgzKrbso6U2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Jul 3 06:48:46 2025 GMT Not After : Jul 10 06:48:46 2025 GMT Subject: CN=686627ce-cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:6e:67:6b:df:c3:76:d9:15:90:34:cc:76: 67:14:2c:65:52:13:f1:f6:80:ea:90:f1:19:f0:4d: 61:ba:eb:8d:72:56:c8:2e:62:4a:29:d5:eb:92:65: cd:7b:76:88:66:37:c1:ae:66:7f:4a:c2:d0:e0:42: 6b:43:f4:29:72:46:4c:af:df:7e:28:f3:00:55:43: 08:5d:7c:54:db:c0:8c:4e:d1:d6:b9:3e:f9:43:1e: 86:73:7d:df:af:1c:ba:e2:8e:3c:52:6e:0e:fa:50: ae:be:55:48:08:ba:ce:35:63:1b:f2:29:13:47:1c: 0f:aa:98:c1:72:c6:83:75:09:e7:e7:e7:05:59:67: 04:fc:3b:37:9a:bb:4d:a3:99:87:34:e3:2c:7f:24: 60:f1:8d:f1:a5:d2:76:8c:10:93:aa:f9:07:4b:13: ed:75:03:d3:13:13:58:03:8c:d4:b4:4a:fb:12:ed: a9:4f:60:35:67:46:62:ec:48:2e:7a:93:18:19:01: f1:9c:78:7d:77:29:d2:b9:4d:42:e9:3c:dd:24:c0: 83:f0:8e:ae:db:57:21:f2:58:76:02:85:8a:00:33: 7f:f3:19:0c:fc:cc:8b:63:f5:38:59:4f:1d:79:e0: 54:6e:5a:23:a6:d3:5a:18:b3:39:1b:77:d8:07:01: be:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5A:E4:8B:48:C4:B6:6B:6D:BB:00:A0:9C:29:A1:0B:0E:D3:57:7F X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:fb:3d:56:14:07:87:52:52:24:b6:3c:82:db:64:8f:15: ac:70:a6:a6:db:ec:11:cf:08:ff:b6:8b:a8:9b:96:d9:f9:02: 32:17:29:a6:26:03:7e:fd:f3:86:0a:f4:0d:d2:33:fa:7e:a8: f6:40:24:61:21:ec:e4:19:a3:3a:e2:29:95:1a:be:4a:0d:4a: 5b:b5:f3:43:81:80:e4:90:bd:b8:79:0f:72:50:b2:79:45:a4: 20:7d:a3:33:6a:b8:23:2b:69:94:7b:5d:2d:cb:94:0c:2a:f1: 6d:ae:7b:c2:8a:47:e8:aa:c2:d2:e7:af:8f:5a:94:53:de:58: 17:14:32:cf:4f:f1:b2:6c:a6:59:73:21:16:d1:cd:76:e0:68: 7a:16:64:3f:55:0e:68:33:4a:ca:05:bf:be:a9:36:07:9a:2f: 64:c5:8e:87:91:12:a1:92:f9:ec:38:fd:7b:f5:f2:48:35:44: 5f:91:8a:c0:05:de:6a:10:82:f1:d3:a4:a8:c3:af:f4:72:0d: 47:43:60:03:e7:50:1b:06:7f:a1:83:ff:56:dd:4d:dd:35:62: ac:6a:3e:2b:53:cf:cb:b6:74:32:83:bb:c0:ee:ff:ad:41:75: d4:95:1b:41:2a:e8:44:bb:ed:03:13:fe:95:f4:b1:aa:ab:79: 23:50:48:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz M0U3RUQyRTEwHhcNMjUwNzAzMDY0ODQ2WhcNMjUwNzEwMDY0ODQ2WjAYMRYwFAYD VQQDEw02ODY2MjdjZS1jYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3puZ2vfw3bZFZA0zHZnFCxlUhPx9oDqkPEZ8E1huuuNclbILmJKKdXrkmXN e3aIZjfBrmZ/SsLQ4EJrQ/QpckZMr99+KPMAVUMIXXxU28CMTtHWuT75Qx6Gc33f rxy64o48Um4O+lCuvlVICLrONWMb8ikTRxwPqpjBcsaDdQnn5+cFWWcE/Ds3mrtN o5mHNOMsfyRg8Y3xpdJ2jBCTqvkHSxPtdQPTExNYA4zUtEr7Eu2pT2A1Z0Zi7Egu epMYGQHxnHh9dynSuU1C6TzdJMCD8I6u21ch8lh2AoWKADN/8xkM/MyLY/U4WU8d eeBUblojptNaGLM5G3fYBwG+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNa5ItI xLZrbbsAoJwpoQsO01d/MB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkx/s9VhQHh1JSJLY8gttkjxWscKam2+wRzwj/touom5bZ+QIyFymm JgN+/fOGCvQN0jP6fqj2QCRhIezkGaM64imVGr5KDUpbtfNDgYDkkL24eQ9yULJ5 RaQgfaMzargjK2mUe10ty5QMKvFtrnvCikfoqsLS56+PWpRT3lgXFDLPT/GybKZZ cyEW0c124Gh6FmQ/VQ5oM0rKBb++qTYHmi9kxY6HkRKhkvnsOP179fJINURfkYrA Bd5qEILx06Sow6/0cg1HQ2AD51AbBn+hg/9W3U3dNWKsaj4rU8/LtnQyg7vA7v+t QXXUlRtBKuhEu+0DE/6V9LGqq3kjUEjY -----END CERTIFICATE-----Generated at Fri Jul 4 18:55:24 2025 by rpki-client