$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: TVR0Ysg/Aw1WclmYiJ2FUP29jF+0vEyCa51A933B9XA= Subject key identifier: E3:E6:61:6D:32:4A:4E:B2:5F:C4:D7:19:37:31:42:60:90:28:97:B0 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 3E Signing time: Tue 01 Jul 2025 08:26:12 +0000 Manifest this update: Tue 01 Jul 2025 08:26:12 +0000 Manifest next update: Tue 08 Jul 2025 08:26:12 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: KYdN9ss5qfUgaX3tU3kXz8qp+GKPys/QVqrlIkP2H10=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jul 1 08:26:12 2025 GMT Not After : Jul 8 08:26:12 2025 GMT Subject: CN=68639ba4-c8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:59:fb:22:6c:42:f6:fc:fc:e6:98:27:87: 8d:3f:b2:6e:0e:3d:da:e3:72:53:01:c3:41:32:46: b0:60:0e:22:b2:2e:18:ef:3e:61:65:61:b2:5d:6e: 95:e1:df:9c:f2:f0:1b:d8:52:3c:3c:e4:f3:62:de: f0:5f:e5:0e:7a:9c:03:ae:b9:66:af:06:87:60:a5: 5b:31:e2:6a:e2:3f:cf:55:9a:af:be:c4:83:39:29: 37:de:ac:fd:95:0e:fe:1c:f5:a3:af:db:ba:ea:da: 65:ac:74:4a:18:7e:1a:72:e2:c3:c1:1d:b1:0c:91: 64:e0:1d:1e:cb:b3:b3:cb:7a:83:bc:de:50:46:d6: 50:eb:8b:21:b9:10:13:2d:ac:09:e5:b7:d6:b6:2d: b2:ae:45:39:e9:d7:3e:7e:b1:23:31:d4:cc:ff:ca: 70:78:83:25:cc:d8:15:4b:e9:1d:a9:c9:3c:e6:04: e3:46:56:49:b1:a9:03:89:6d:2c:c7:d0:d4:aa:ec: 6f:69:16:4d:26:6b:32:26:b9:df:4a:be:a4:03:4f: 97:1b:8e:ef:5a:e1:3a:1c:83:aa:80:c2:7b:f1:3b: 89:75:63:71:6a:4d:48:af:73:06:a0:63:8d:da:46: e2:8a:f4:06:fc:f8:8f:c3:8e:90:52:7a:3a:01:d4: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:61:6D:32:4A:4E:B2:5F:C4:D7:19:37:31:42:60:90:28:97:B0 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f9:05:da:cc:82:69:93:87:4c:32:d4:15:5b:6f:51:81:93: 7f:5a:71:5b:25:33:1a:48:8a:9b:18:7e:8b:8b:73:3e:df:3e: d1:95:5e:41:49:88:cb:73:30:5c:7f:ff:86:81:9f:36:97:88: 32:0c:b3:78:b0:bc:c2:87:26:17:f2:50:3c:2d:11:0f:66:db: 2c:71:8b:49:14:56:af:14:d7:c9:51:a5:7d:ae:d9:4a:d0:52: 46:a6:20:1f:b4:4b:57:31:d7:a8:0d:e9:ae:a8:37:61:ba:8a: f3:d5:34:ad:d7:ad:cc:ae:74:77:b6:90:02:21:82:ee:bd:df: f2:93:a4:25:71:3d:7a:c7:0d:83:63:2d:82:8f:dc:90:63:dc: 74:65:ce:43:72:be:1b:3b:54:f2:ab:81:dd:7f:14:5e:d3:6a: 19:2c:e6:f3:0b:98:f6:f1:0d:2e:a1:49:59:56:97:43:55:54: 3e:67:a1:9d:e8:26:4d:aa:41:22:19:09:bd:bd:9b:d0:58:b7: 80:94:bb:55:89:c7:e8:9b:e8:9e:f4:79:34:c5:57:f9:fa:76: 03:ce:91:2b:ee:6d:2d:86:b1:a0:da:be:16:80:17:cb:c2:d3: a5:fa:15:33:02:84:b8:de:6a:1f:cb:02:87:1b:74:05:78:b3: 13:ae:f8:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA3MDEwODI2MTJaFw0yNTA3MDgwODI2MTJaMBgxFjAUBgNV BAMTDTY4NjM5YmE0LWM4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChVln7ImxC9vz85pgnh40/sm4OPdrjclMBw0EyRrBgDiKyLhjvPmFlYbJdbpXh 35zy8BvYUjw85PNi3vBf5Q56nAOuuWavBodgpVsx4mriP89Vmq++xIM5KTferP2V Dv4c9aOv27rq2mWsdEoYfhpy4sPBHbEMkWTgHR7Ls7PLeoO83lBG1lDriyG5EBMt rAnlt9a2LbKuRTnp1z5+sSMx1Mz/ynB4gyXM2BVL6R2pyTzmBONGVkmxqQOJbSzH 0NSq7G9pFk0mazImud9KvqQDT5cbju9a4Tocg6qAwnvxO4l1Y3FqTUivcwagY43a RuKK9Ab8+I/DjpBSejoB1L+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+ZhbTJK TrJfxNcZNzFCYJAol7AwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB75BdrMgmmTh0wy1BVbb1GBk39acVslMxpIipsYfouLcz7fPtGVXkFJ iMtzMFx//4aBnzaXiDIMs3iwvMKHJhfyUDwtEQ9m2yxxi0kUVq8U18lRpX2u2UrQ UkamIB+0S1cx16gN6a6oN2G6ivPVNK3XrcyudHe2kAIhgu693/KTpCVxPXrHDYNj LYKP3JBj3HRlzkNyvhs7VPKrgd1/FF7Tahks5vMLmPbxDS6hSVlWl0NVVD5noZ3o Jk2qQSIZCb29m9BYt4CUu1WJx+ib6J70eTTFV/n6dgPOkSvubS2GsaDavhaAF8vC 06X6FTMChLjeah/LAocbdAV4sxOu+L4= -----END CERTIFICATE-----Generated at Tue Jul 1 22:43:22 2025 by rpki-client