$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: v9KcoPQ3UNnoU8h1ff8cp9LVIzttfBKG5Ail25kKPR0= Subject key identifier: FA:9A:F8:F4:52:4A:3E:6A:F9:29:91:43:37:CE:78:46:80:3E:42:21 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1E83 Signing time: Wed 02 Jul 2025 16:10:52 +0000 Manifest this update: Wed 02 Jul 2025 16:10:52 +0000 Manifest next update: Wed 09 Jul 2025 16:10:52 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: H9KTwk3zs35pKGJKqFU+n0hS1U5SJ+ODly8lXVzsY7A=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7827 (0x1e93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Jul 2 16:10:52 2025 GMT Not After : Jul 9 16:10:52 2025 GMT Subject: CN=68655a0c-3887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:09:28:97:f1:3c:2c:16:eb:a7:e3:57:2f:18: b2:3a:28:b1:86:fb:b7:3c:e4:2b:42:51:6e:5b:29: 75:ae:c4:d0:83:1a:58:45:cb:96:c0:1a:20:89:d7: 48:68:83:43:44:4a:2b:15:36:17:0b:1a:07:0d:9e: 70:ad:d8:4f:ec:49:01:a0:ce:74:86:f6:27:c3:f1: 63:04:c6:bc:6a:74:ef:13:37:ab:3b:ec:83:03:3c: 3d:e8:9e:0f:3e:75:be:e1:d2:e3:37:71:87:74:6c: 23:62:18:46:ee:fd:53:07:62:10:92:14:88:ea:7e: 79:af:03:1a:a8:09:f5:c0:1a:bc:0b:20:0b:3e:b1: 05:b1:27:ec:06:f8:9c:a0:b4:86:40:28:fe:1b:a8: 6b:f2:28:73:be:73:ca:f4:66:61:3b:94:fb:34:5b: 27:9b:9a:7b:d6:8f:1e:43:2b:ae:60:45:21:a7:85: 80:31:e1:a7:0c:41:17:f5:80:3c:3b:33:e6:85:32: b9:46:2f:c3:28:ce:fc:c0:0b:51:41:91:a7:81:ce: 2f:01:d4:45:ae:14:62:03:71:5d:31:ba:8c:41:26: da:a1:90:24:9d:9e:82:b0:9c:45:90:db:59:94:ef: 32:07:5b:70:3d:a5:3b:f5:45:33:be:ab:4c:e9:ad: e5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:F8:F4:52:4A:3E:6A:F9:29:91:43:37:CE:78:46:80:3E:42:21 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e3:af:bc:f6:07:ab:34:ab:c6:10:3f:22:40:e6:29:7c:2e: 7e:2c:8c:a9:3a:cb:69:d4:23:4f:09:11:cb:d5:fa:4b:39:d2: 47:0e:77:ec:6c:2a:1d:fd:d0:af:c5:bf:46:97:e7:76:a0:a8: 71:b2:f6:57:e1:b7:0e:5a:ac:2c:ba:16:e0:b7:e6:cb:72:49: 36:fc:dd:b7:fe:c7:15:49:88:1c:e3:f9:89:57:6a:38:8b:e6: 20:42:6e:51:4d:90:48:9a:61:52:97:76:1b:eb:0a:d8:ff:87: 19:be:59:fe:91:fa:ec:98:1f:68:8f:36:d4:a0:d1:ce:92:b5: f5:23:89:d3:c1:b5:43:98:4e:8a:91:19:d4:f7:9c:1f:f0:f2: 4c:61:6f:81:dc:93:7e:ba:9a:96:14:b6:52:f7:d7:b4:a7:fd: 49:cb:28:dd:c5:da:a6:dc:89:9b:11:5f:5e:92:8e:25:84:3b: b2:d9:43:8d:b3:4c:a3:dd:df:92:6d:5f:3c:e2:0f:83:c8:6e: 04:1b:58:7b:24:63:66:4b:50:1b:de:76:7c:c9:5e:1f:97:cd: 78:ab:c5:ca:72:45:fa:3a:82:5c:d1:df:19:fc:d8:70:e3:ef: 35:0b:79:8b:19:14:50:57:e2:58:cc:fb:a8:60:69:0e:56:34: 20:b2:21:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNzAyMTYxMDUyWhcNMjUwNzA5MTYxMDUyWjAYMRYwFAYD VQQDEw02ODY1NWEwYy0zODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gkol/E8LBbrp+NXLxiyOiixhvu3POQrQlFuWyl1rsTQgxpYRcuWwBogiddI aINDREorFTYXCxoHDZ5wrdhP7EkBoM50hvYnw/FjBMa8anTvEzerO+yDAzw96J4P PnW+4dLjN3GHdGwjYhhG7v1TB2IQkhSI6n55rwMaqAn1wBq8CyALPrEFsSfsBvic oLSGQCj+G6hr8ihzvnPK9GZhO5T7NFsnm5p71o8eQyuuYEUhp4WAMeGnDEEX9YA8 OzPmhTK5Ri/DKM78wAtRQZGngc4vAdRFrhRiA3FdMbqMQSbaoZAknZ6CsJxFkNtZ lO8yB1twPaU79UUzvqtM6a3lcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqa+PRS Sj5q+SmRQzfOeEaAPkIhMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs46+89gerNKvGED8iQOYpfC5+LIypOstp1CNPCRHL1fpLOdJHDnfs bCod/dCvxb9Gl+d2oKhxsvZX4bcOWqwsuhbgt+bLckk2/N23/scVSYgc4/mJV2o4 i+YgQm5RTZBImmFSl3Yb6wrY/4cZvln+kfrsmB9ojzbUoNHOkrX1I4nTwbVDmE6K kRnU95wf8PJMYW+B3JN+upqWFLZS99e0p/1Jyyjdxdqm3ImbEV9eko4lhDuy2UON s0yj3d+SbV884g+DyG4EG1h7JGNmS1Ab3nZ8yV4fl814q8XKckX6OoJc0d8Z/Nhw 4+81C3mLGRRQV+JYzPuoYGkOVjQgsiGo -----END CERTIFICATE-----Generated at Thu Jul 3 21:32:11 2025 by rpki-client