$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: vEe+rc68cU8tKLwKjK1ahFby0oouVDe8FKJyBJ+Rzjo= Subject key identifier: 2A:97:E4:7A:6E:EC:66:8E:E4:A6:7A:0F:59:FC:78:35:CF:70:DB:95 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 014B Signing time: Sat 23 Aug 2025 04:20:27 +0000 Manifest this update: Sat 23 Aug 2025 04:20:27 +0000 Manifest next update: Sat 30 Aug 2025 04:20:27 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: H/q/X1daDZczuPBPDd86edA6dBClClApOlhB6qw9ino=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: Mp31Dl4GGrwfX+s1p5DZGdrkWL4P3e5ufUEs+Tl9/MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: Aug 23 04:20:27 2025 GMT Not After : Aug 30 04:20:27 2025 GMT Subject: CN=68a9418b-1a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:f5:3e:da:d8:6c:9a:06:fc:87:6e:e7:d2: 94:e0:59:43:82:54:41:29:ed:50:0a:02:61:85:55: 12:c0:16:74:60:64:f7:e1:1c:e8:b5:51:d9:83:20: 10:59:6a:44:b8:d1:c8:41:dd:67:88:a3:5e:14:29: 81:c7:49:87:0b:e6:08:a3:ff:46:07:9d:3e:de:1d: e7:15:3c:0a:90:95:53:41:a6:0d:4d:a0:dd:19:a6: 5c:e9:c4:74:7c:c5:64:eb:06:40:cf:6b:8c:f7:2b: 8b:6f:9a:60:9b:ee:3d:4c:1c:24:e4:c4:e4:0b:2c: 35:da:39:7d:1c:77:d6:4c:6f:57:6b:d5:3d:7a:4b: f6:22:d3:c9:dc:20:6c:db:f6:67:03:ce:eb:75:d7: 79:e5:46:68:b8:ec:99:06:ec:31:a0:bd:26:4b:15: 22:9b:b3:42:52:ae:2e:ba:00:c3:fe:df:3a:11:12: 8e:a8:f7:1a:c2:0f:aa:2f:e7:09:2a:bf:a6:42:6d: 51:6a:e4:97:9b:77:e3:b5:cd:31:3e:cc:30:ef:6b: 4c:5b:70:bb:a3:fc:b2:aa:27:70:2e:78:b7:76:2d: f1:b0:40:5c:34:6e:01:e8:88:70:86:7a:8d:ca:1d: 2d:aa:ca:16:d1:ed:85:6e:1a:e6:d4:18:af:3b:2d: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:E4:7A:6E:EC:66:8E:E4:A6:7A:0F:59:FC:78:35:CF:70:DB:95 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:28:19:4d:85:ac:d0:a3:e0:bb:ef:b3:a6:d2:82:0e:dc:2e: 3e:89:88:c6:49:6a:dd:eb:7e:b1:fb:69:a0:17:84:1b:ff:95: fa:a7:e3:5a:c2:03:b7:47:ca:ad:d4:9a:98:78:e3:69:e2:cb: 81:f2:95:10:f2:6f:14:06:4e:5b:2e:3e:db:af:d9:f7:15:c4: 13:93:98:9c:cd:c1:16:ab:5c:6d:3f:d5:fd:90:04:9c:34:33: e6:54:15:00:a7:4c:56:4f:57:f0:cf:de:df:d5:03:c7:10:ae: ea:57:1b:b3:70:43:4b:93:50:31:61:75:e3:98:1a:90:3c:9b: d1:66:52:60:b2:a1:d1:29:b6:02:83:48:5d:ec:a4:d0:a4:54: 3a:b7:ea:d4:02:77:3e:e7:6a:4b:8d:95:5d:33:39:2b:f8:9f: 35:60:4e:03:64:c9:1a:64:0c:ff:3f:61:82:69:3f:d8:0a:e1: 6f:4d:0f:86:0f:56:de:48:e3:f8:7d:af:bd:fb:99:93:f3:73: 5d:59:86:4b:50:10:1b:42:9f:6b:38:c8:b0:9f:a0:94:98:eb: b8:c7:4c:df:f8:18:50:d7:ff:24:6d:9c:d3:f0:40:b5:fd:70: 70:da:34:17:c7:ef:3f:13:5d:4d:76:58:ec:aa:b1:34:8e:b1: f9:f6:2a:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjUwODIzMDQyMDI3WhcNMjUwODMwMDQyMDI3WjAYMRYwFAYD VQQDEw02OGE5NDE4Yi0xYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAf1PtrYbJoG/Idu59KU4FlDglRBKe1QCgJhhVUSwBZ0YGT34RzotVHZgyAQ WWpEuNHIQd1niKNeFCmBx0mHC+YIo/9GB50+3h3nFTwKkJVTQaYNTaDdGaZc6cR0 fMVk6wZAz2uM9yuLb5pgm+49TBwk5MTkCyw12jl9HHfWTG9Xa9U9ekv2ItPJ3CBs 2/ZnA87rddd55UZouOyZBuwxoL0mSxUim7NCUq4uugDD/t86ERKOqPcawg+qL+cJ Kr+mQm1RauSXm3fjtc0xPsww72tMW3C7o/yyqidwLni3di3xsEBcNG4B6IhwhnqN yh0tqsoW0e2Fbhrm1BivOy2vXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqX5Hpu 7GaO5KZ6D1n8eDXPcNuVMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeKBlNhazQo+C777Om0oIO3C4+iYjGSWrd636x+2mgF4Qb/5X6p+Na wgO3R8qt1JqYeONp4suB8pUQ8m8UBk5bLj7br9n3FcQTk5iczcEWq1xtP9X9kASc NDPmVBUAp0xWT1fwz97f1QPHEK7qVxuzcENLk1AxYXXjmBqQPJvRZlJgsqHRKbYC g0hd7KTQpFQ6t+rUAnc+52pLjZVdMzkr+J81YE4DZMkaZAz/P2GCaT/YCuFvTQ+G D1beSOP4fa+9+5mT83NdWYZLUBAbQp9rOMiwn6CUmOu4x0zf+BhQ1/8kbZzT8EC1 /XBw2jQXx+8/E11NdljsqrE0jrH59iq9 -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:44 2025 by rpki-client