$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: YJaE4E81aDNW95h1SdBhstjlWFFmKADr/jVv9mmwhVU= Subject key identifier: EF:27:FA:7C:FE:97:77:3B:79:5B:13:35:93:20:5F:27:E0:91:23:6D Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02BC Signing time: Tue 01 Jul 2025 02:06:00 +0000 Manifest this update: Tue 01 Jul 2025 02:05:59 +0000 Manifest next update: Tue 08 Jul 2025 02:05:59 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: O2MuUIigeuBExPU7EJo0NyPwVW6k13YKBBJtjHP2xnc=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: Jul 1 02:05:59 2025 GMT Not After : Jul 8 02:05:59 2025 GMT Subject: CN=68634288-2748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:8c:d3:91:ce:0a:ce:12:9f:a2:9a:05:26: e2:1a:3a:54:1e:05:94:23:04:f1:8d:f3:0e:6b:21: c3:49:99:f1:05:87:e8:63:39:12:27:d9:77:d9:ac: b6:10:44:1a:f4:c3:bd:d1:86:f8:93:0e:88:10:d2: b5:8a:0a:6c:28:5f:12:d3:bb:1a:df:08:a0:22:8c: dc:d4:08:f0:07:83:81:29:4e:7b:30:9a:86:bc:7e: a4:48:df:4f:c6:57:da:3f:ba:be:af:49:dc:27:0c: 96:c1:81:41:03:b8:62:dc:d1:be:33:c6:a1:4a:08: 52:bc:ae:00:40:da:2f:af:20:ef:97:c0:44:e2:ad: 67:f7:53:2e:80:34:03:51:94:6e:c3:14:1b:30:42: e9:34:28:e4:d8:ea:5c:1c:3f:a1:90:14:5a:db:db: 58:da:79:43:fb:fc:66:18:05:81:da:5b:5b:19:2e: 1e:0b:78:75:43:5f:0c:31:32:e6:43:50:6e:a2:8d: fb:56:69:ac:e3:c3:99:ce:b5:60:0e:7c:bf:8d:a9: 11:1a:92:29:b7:b4:f2:6f:26:f9:d3:1e:bb:bb:81: 7d:c9:39:7d:ed:68:63:16:45:6f:ee:6f:8f:06:fd: 0f:0a:e3:17:df:b9:66:7d:95:7e:8c:75:8f:7c:ce: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:27:FA:7C:FE:97:77:3B:79:5B:13:35:93:20:5F:27:E0:91:23:6D X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:7f:5e:13:a0:4c:67:71:0f:1c:54:60:55:fc:70:a3:95:24: 93:48:aa:a7:93:1f:a6:8e:86:1c:71:68:2e:af:c5:bf:50:af: ec:c8:98:11:37:90:fc:74:2c:93:2f:97:37:4c:75:e6:4f:43: af:7c:69:27:74:0f:bd:ce:5b:fe:95:ae:b9:f6:09:f5:3b:48: b7:4b:58:4b:a7:0c:95:84:c6:2a:12:3f:47:f8:12:c8:c7:65: 00:45:9b:95:19:95:9a:ba:b9:37:58:47:8b:80:1d:cd:9e:90: aa:76:fd:7c:04:b7:ba:d9:21:34:cb:04:84:c0:8e:d5:9c:e2: 83:c4:5c:4c:17:08:74:ef:4f:1c:f4:d6:50:3d:70:be:8b:f9: a3:9b:4e:05:43:a5:af:37:b9:ae:f9:15:b4:cc:04:ce:48:b0: 94:c8:97:2d:e2:6a:20:28:f3:cc:50:2d:10:63:1d:d9:a2:1d: 84:ca:ce:7d:e3:1d:9e:55:3b:dd:55:77:b5:25:6a:08:2a:50: 55:e9:a2:c6:7c:c1:cc:4e:85:e5:e4:ad:8f:ca:34:be:c1:62: 0e:cf:3a:d9:9d:82:9c:e9:3c:47:a0:1f:37:c9:79:d3:4d:b9: f8:dc:f8:fb:9d:12:60:83:aa:97:b9:b2:59:76:61:b3:5c:99: 73:4f:8d:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwNzAxMDIwNTU5WhcNMjUwNzA4MDIwNTU5WjAYMRYwFAYD VQQDEw02ODYzNDI4OC0yNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupWM05HOCs4Sn6KaBSbiGjpUHgWUIwTxjfMOayHDSZnxBYfoYzkSJ9l32ay2 EEQa9MO90Yb4kw6IENK1igpsKF8S07sa3wigIozc1AjwB4OBKU57MJqGvH6kSN9P xlfaP7q+r0ncJwyWwYFBA7hi3NG+M8ahSghSvK4AQNovryDvl8BE4q1n91MugDQD UZRuwxQbMELpNCjk2OpcHD+hkBRa29tY2nlD+/xmGAWB2ltbGS4eC3h1Q18MMTLm Q1Buoo37Vmms48OZzrVgDny/jakRGpIpt7Tybyb50x67u4F9yTl97WhjFkVv7m+P Bv0PCuMX37lmfZV+jHWPfM6FEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8n+nz+ l3c7eVsTNZMgXyfgkSNtMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOf14ToExncQ8cVGBV/HCjlSSTSKqnkx+mjoYccWgur8W/UK/syJgR N5D8dCyTL5c3THXmT0OvfGkndA+9zlv+la659gn1O0i3S1hLpwyVhMYqEj9H+BLI x2UARZuVGZWaurk3WEeLgB3NnpCqdv18BLe62SE0ywSEwI7VnOKDxFxMFwh0708c 9NZQPXC+i/mjm04FQ6WvN7mu+RW0zATOSLCUyJct4mogKPPMUC0QYx3Zoh2Eys59 4x2eVTvdVXe1JWoIKlBV6aLGfMHMToXl5K2PyjS+wWIOzzrZnYKc6TxHoB83yXnT Tbn43Pj7nRJgg6qXubJZdmGzXJlzT43k -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:56 2025 by rpki-client