$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: urZO7RIoNMZyAU9DzL7cX+Y36eTMnEu5J8ueYmG/MAI= Subject key identifier: 14:60:0D:A7:A9:63:72:B7:AC:AB:8F:A9:8E:C5:4A:03:A3:60:9C:B1 Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: DA Signing time: Thu 03 Jul 2025 05:45:46 +0000 Manifest this update: Thu 03 Jul 2025 05:45:46 +0000 Manifest next update: Thu 10 Jul 2025 05:45:46 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: zOXiJyAaMuCGVZJ5wJosxBLhW3WsOvf/+pSXrC1yasE=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: Jul 3 05:45:46 2025 GMT Not After : Jul 10 05:45:46 2025 GMT Subject: CN=6866190a-76f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:49:29:fc:03:00:db:f7:21:dc:0e:1a:6c: ea:9c:43:16:aa:8b:03:84:56:22:fc:83:3d:cc:be: d8:3d:c3:9c:9c:1b:d4:7b:81:22:22:8c:dc:c1:44: 2e:20:4a:f7:50:d1:74:9b:80:ac:c3:96:12:6e:af: f3:ef:a0:39:08:e1:41:bb:af:36:23:f5:a7:51:87: 6f:68:e0:56:28:11:4a:b3:13:4a:e9:00:c9:cc:ac: 93:f9:1c:43:70:55:3d:5f:85:1e:25:2a:17:82:75: 30:a1:83:87:a0:31:ae:6c:2c:2d:f0:ad:e9:8f:81: 1f:4a:b5:e0:4a:f6:7c:69:7d:e2:d8:54:57:70:86: 0d:58:e6:cc:3e:9b:95:70:bc:b7:22:38:7b:df:7b: 1e:99:49:bb:67:c3:4e:28:78:4a:d0:81:06:d7:27: 21:94:50:b3:6d:c2:b0:90:d8:9e:47:4f:2a:e8:25: fc:02:c3:19:8e:75:4e:51:3e:4a:8b:8e:83:71:d9: ee:bd:c7:17:9b:04:03:7b:5d:2e:36:ba:be:0f:54: 79:13:c4:4d:94:df:a0:27:f5:00:5b:d0:63:30:0f: 33:76:40:62:bb:c9:99:8b:38:dd:16:f0:d6:36:3f: e9:23:5c:3c:3f:02:63:7c:20:2e:66:0f:04:ee:3f: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:60:0D:A7:A9:63:72:B7:AC:AB:8F:A9:8E:C5:4A:03:A3:60:9C:B1 X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:df:f7:2d:04:c9:eb:29:f2:3c:c9:cc:4e:0c:7d:b2:b3:2d: 3d:b4:0f:ab:9f:ba:32:7f:94:1b:3e:1a:b5:54:b8:ec:4b:69: c3:ad:d6:d9:9e:52:8c:99:0f:77:b1:08:81:72:80:fc:8d:66: a4:29:8f:60:9b:d2:c9:77:4d:66:95:4a:ca:3e:07:8a:67:18: 20:2e:26:cf:4d:24:5f:24:64:e1:01:40:e4:0e:c4:d5:50:4d: e6:be:7e:44:5c:2f:ce:cb:ee:d4:ae:ce:69:b2:d9:7f:15:c9: fb:4f:e2:59:a4:4b:25:63:4d:a8:54:30:45:5d:5a:48:b9:43: 81:13:b1:af:19:bc:8a:0f:97:18:f5:fe:92:e4:b2:9f:58:2d: ee:6a:17:1a:46:cc:41:3c:a2:a0:16:58:cd:0b:78:cd:31:87: f8:18:e7:9c:73:8d:87:61:3c:8e:07:ae:4b:9f:9c:1d:22:d8: 94:c1:e2:5b:ca:fa:8a:0c:83:d7:fd:4e:ee:e6:20:44:4b:2f: a8:4f:3b:49:74:20:de:44:8a:63:a5:69:52:0c:b1:bb:c3:da: c7:c7:f2:ae:1f:f7:06:28:04:0a:7e:dc:15:1c:ed:49:a1:f1: 71:6c:99:55:55:3e:76:7a:0c:b1:a8:e2:d7:df:c9:b6:a3:e3: 3c:f1:27:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNzAzMDU0NTQ2WhcNMjUwNzEwMDU0NTQ2WjAYMRYwFAYD VQQDEw02ODY2MTkwYS03NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaFJKfwDANv3IdwOGmzqnEMWqosDhFYi/IM9zL7YPcOcnBvUe4EiIozcwUQu IEr3UNF0m4Csw5YSbq/z76A5COFBu682I/WnUYdvaOBWKBFKsxNK6QDJzKyT+RxD cFU9X4UeJSoXgnUwoYOHoDGubCwt8K3pj4EfSrXgSvZ8aX3i2FRXcIYNWObMPpuV cLy3Ijh733semUm7Z8NOKHhK0IEG1ychlFCzbcKwkNieR08q6CX8AsMZjnVOUT5K i46DcdnuvccXmwQDe10uNrq+D1R5E8RNlN+gJ/UAW9BjMA8zdkBiu8mZizjdFvDW Nj/pI1w8PwJjfCAuZg8E7j/P1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRgDaep Y3K3rKuPqY7FSgOjYJyxMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA3/ctBMnrKfI8ycxODH2ysy09tA+rn7oyf5QbPhq1VLjsS2nDrdbZ nlKMmQ93sQiBcoD8jWakKY9gm9LJd01mlUrKPgeKZxggLibPTSRfJGThAUDkDsTV UE3mvn5EXC/Oy+7Urs5pstl/Fcn7T+JZpEslY02oVDBFXVpIuUOBE7GvGbyKD5cY 9f6S5LKfWC3uahcaRsxBPKKgFljNC3jNMYf4GOecc42HYTyOB65Ln5wdItiUweJb yvqKDIPX/U7u5iBESy+oTztJdCDeRIpjpWlSDLG7w9rHx/KuH/cGKAQKftwVHO1J ofFxbJlVVT52egyxqOLX38m2o+M88Se/ -----END CERTIFICATE-----Generated at Thu Jul 3 18:21:09 2025 by rpki-client