$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json) Hash identifier: EMTnZw5jqp4Kmfo6TW/TbcYdVjWRzLjZaGxh4u6KJ0I= Subject key identifier: 85:30:B5:65:A7:1C:DF:29:89:1D:82:64:A4:8D:FC:2A:7C:37:93:FF Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 05C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft Manifest number: 05C3 Signing time: Mon 30 Jun 2025 23:29:11 +0000 Manifest this update: Mon 30 Jun 2025 23:29:11 +0000 Manifest next update: Mon 07 Jul 2025 23:29:11 +0000 Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: eWF0Nz7tGGssAS4NHsUb+pvM1HCS45xl8Yor0RsU4Dk=) 2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: pbtxZL2670Vbm5T4UtC+5fCmSHFSsbOrgHoM6Opfzec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: Jun 30 23:29:11 2025 GMT Not After : Jul 7 23:29:11 2025 GMT Subject: CN=68631dc7-40a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:da:c9:c9:d2:cf:61:6a:67:8d:be:c8:a3: a3:93:00:07:b7:36:63:47:b1:79:86:28:5c:e8:4b: 20:c5:65:ef:41:33:54:b1:3d:b5:41:c3:bf:e1:8c: d9:24:b5:77:28:f2:85:15:70:e4:80:b9:4d:4b:71: b1:61:f8:77:66:b1:04:15:cd:a5:56:85:a2:df:8c: c7:ba:80:8c:35:4b:1e:81:b6:ab:2f:07:df:fc:e4: 1d:cf:a7:b1:5b:7d:0f:25:f2:a0:6b:83:d8:5d:cb: 85:4c:70:e2:0a:fa:8b:83:55:b9:5b:44:c4:ad:0d: 4f:ec:85:78:ea:a9:f6:a3:e4:5c:9e:26:5e:d4:91: 5b:5c:0d:e9:87:31:4a:e5:5f:fa:46:6e:41:cd:2c: 4a:18:4f:3e:e9:83:ce:46:90:6b:87:98:17:96:9c: 44:b0:be:4f:99:45:31:1c:0b:53:81:b2:67:03:00: b0:7b:3f:22:c1:3e:17:f8:6d:0c:dd:65:5a:15:75: d1:db:2e:de:ec:54:94:9e:49:3c:d2:f4:85:53:af: d4:44:c6:a3:43:e4:df:af:1b:a2:ad:2c:d7:74:3f: aa:c7:0a:a4:fb:bb:34:84:ad:34:f6:a4:7d:a8:c6: 7e:24:ad:81:68:44:74:52:fd:6e:d4:85:58:9e:c6: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:30:B5:65:A7:1C:DF:29:89:1D:82:64:A4:8D:FC:2A:7C:37:93:FF X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e3:00:90:de:e4:ed:6c:a6:82:d6:ef:87:d1:a3:29:9c:76: be:b5:f6:79:77:ea:6f:86:44:a9:34:f6:a9:29:1b:d7:ad:a3: 2d:1a:86:77:84:f5:8b:54:ab:79:31:be:f7:20:45:4e:55:9d: 0b:c1:a5:79:ae:40:99:9f:ba:45:22:54:07:6f:25:1c:8f:de: 83:4f:d7:c9:50:3c:ef:bc:07:19:1c:55:58:9e:f1:cb:21:6c: bf:26:0f:9c:09:c4:46:8c:e5:50:9f:00:30:f4:48:42:5c:b4: 31:d4:e8:d2:39:79:ba:70:6e:7f:0a:c2:c3:58:99:3b:dc:a1: 35:2a:b2:9b:3c:06:21:bd:50:30:4f:0f:8c:ee:07:6f:b8:73: c7:95:78:67:f4:c4:2b:81:18:87:17:3a:2d:71:f2:67:c8:2c: e2:e7:0e:85:30:e3:fc:7e:4e:30:70:fe:5e:90:9c:f6:57:a3: 97:89:59:9a:7c:fc:c9:06:e3:33:5a:29:a4:37:ed:bc:b3:16: 4a:f7:05:55:df:60:ad:ef:39:0a:60:75:16:fd:9d:68:dd:c0: 89:43:7b:6f:b2:0e:4c:05:56:f7:99:65:f8:d9:62:97:0f:e4: 26:ed:68:5b:a7:b3:7c:40:d0:10:1f:05:27:a8:35:c9:16:0a: 11:d2:0a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjUwNjMwMjMyOTExWhcNMjUwNzA3MjMyOTExWjAYMRYwFAYD VQQDEw02ODYzMWRjNy00MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jfaycnSz2FqZ42+yKOjkwAHtzZjR7F5hihc6EsgxWXvQTNUsT21QcO/4YzZ JLV3KPKFFXDkgLlNS3GxYfh3ZrEEFc2lVoWi34zHuoCMNUsegbarLwff/OQdz6ex W30PJfKga4PYXcuFTHDiCvqLg1W5W0TErQ1P7IV46qn2o+RcniZe1JFbXA3phzFK 5V/6Rm5BzSxKGE8+6YPORpBrh5gXlpxEsL5PmUUxHAtTgbJnAwCwez8iwT4X+G0M 3WVaFXXR2y7e7FSUnkk80vSFU6/URMajQ+TfrxuirSzXdD+qxwqk+7s0hK009qR9 qMZ+JK2BaER0Uv1u1IVYnsYpdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUwtWWn HN8piR2CZKSN/Cp8N5P/MB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4wCQ3uTtbKaC1u+H0aMpnHa+tfZ5d+pvhkSpNPapKRvXraMtGoZ3 hPWLVKt5Mb73IEVOVZ0LwaV5rkCZn7pFIlQHbyUcj96DT9fJUDzvvAcZHFVYnvHL IWy/Jg+cCcRGjOVQnwAw9EhCXLQx1OjSOXm6cG5/CsLDWJk73KE1KrKbPAYhvVAw Tw+M7gdvuHPHlXhn9MQrgRiHFzotcfJnyCzi5w6FMOP8fk4wcP5ekJz2V6OXiVma fPzJBuMzWimkN+28sxZK9wVV32Ct7zkKYHUW/Z1o3cCJQ3tvsg5MBVb3mWX42WKX D+Qm7Whbp7N8QNAQHwUnqDXJFgoR0goj -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:39 2025 by rpki-client