$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: ek1664SH7/HkKxU1RkomFZbjVW/BWs2AiLgXFuqvayY= Subject key identifier: 19:AD:9B:D6:EB:B8:E8:E1:AB:B3:21:FF:53:AE:DB:10:E8:AF:E3:02 Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 3C Signing time: Tue 01 Jul 2025 08:28:15 +0000 Manifest this update: Tue 01 Jul 2025 08:28:15 +0000 Manifest next update: Tue 08 Jul 2025 08:28:15 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: e4S0uAdCT6QEGMvv+rKAy6INrqWh++0isBYLl9/w5WY=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: Hq759PuHcjxrqDO6XDqBKqYrfjX30gMufng1UMG6yPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Jul 1 08:28:15 2025 GMT Not After : Jul 8 08:28:15 2025 GMT Subject: CN=68639c1f-ab03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e5:c5:dd:36:3a:a9:1f:56:2e:84:31:4c:59: c5:59:91:46:87:83:9c:f5:4e:23:2c:5f:19:73:06: dd:a3:2e:c1:82:01:14:5e:29:d4:66:81:91:2a:4b: 4c:d4:56:d8:84:23:1d:6e:c6:16:9c:7e:a4:e0:c4: fe:95:9d:ed:59:a6:c8:ed:4c:37:d5:d2:63:d8:ff: a1:03:f9:57:a6:af:ca:03:1c:1d:56:d3:33:9f:b1: 49:f7:c6:42:74:a1:35:b1:db:48:76:3b:eb:d0:2a: 5c:c2:59:62:24:6b:60:fd:86:10:2f:15:fa:65:92: 4a:46:e9:8f:8a:80:77:db:1f:44:cf:98:10:30:39: b9:0a:b9:94:96:7f:65:c3:76:f7:5b:71:c6:81:48: af:b2:0f:32:fa:ec:a7:a2:d1:9c:be:a5:fb:8d:ac: d8:03:9d:d6:68:fe:8b:56:68:19:e0:a2:bd:ed:99: 99:03:0e:75:ee:15:39:8c:69:6b:66:bc:57:2c:e1: c8:a3:4e:a0:d8:d1:96:42:4b:db:da:d0:d7:6c:87: 37:d6:85:23:01:4c:96:e2:4a:c6:69:4c:50:e8:1d: 6e:e7:e4:ab:43:28:5c:bb:cb:f8:d4:3c:99:d2:e3: 17:84:29:c9:e4:13:66:96:c8:ff:46:e8:e3:25:f6: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:9B:D6:EB:B8:E8:E1:AB:B3:21:FF:53:AE:DB:10:E8:AF:E3:02 X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2a:86:97:1e:be:4c:63:70:be:d0:cd:c0:6c:a3:62:62:2a: 6a:4f:80:eb:7d:ed:c7:fa:7f:10:d4:43:9d:cd:7c:76:56:16: b3:e4:bd:5b:93:6e:35:1e:b1:b9:71:54:ed:30:22:3a:d6:47: 06:b8:3e:5a:a4:dc:43:0a:a0:ab:82:eb:6b:4e:69:74:07:51: 6b:9e:9d:6a:cc:3a:85:53:09:03:1d:d7:50:c6:fe:4a:3d:83: c5:bc:36:cd:f0:85:1a:7d:e4:28:0b:3e:73:b3:82:45:a4:80: 53:6e:c2:35:d0:aa:ec:f1:19:1e:09:ab:c0:c7:b4:97:f3:1c: 78:49:cd:90:07:69:6a:0b:9c:a8:3b:62:d8:e2:0b:d6:d4:b4: f8:d6:e8:05:0c:1f:af:1e:0b:ba:e8:16:18:f2:bf:44:e3:a2: 5c:67:42:31:7b:90:27:99:27:f5:1b:dc:52:0f:06:df:30:d0: b1:ee:c9:80:23:31:97:f8:0f:40:38:5e:c8:26:82:4f:47:8b: 2c:9a:ba:d2:e2:7e:15:3f:2f:83:2e:d8:74:21:15:f2:f6:68: 34:97:29:42:10:97:e9:a9:c3:1a:3d:42:81:de:69:cc:17:1a: e4:ab:b4:95:7f:03:ca:a8:c2:4c:fe:40:8a:17:4c:3d:2d:99: 3c:3d:d4:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoOTU3NDUyOTNDODhBMjcyNkUxMEE1N0Q1OEY0MkNDMzE2 OUI3QzkyMjAeFw0yNTA3MDEwODI4MTVaFw0yNTA3MDgwODI4MTVaMBgxFjAUBgNV BAMTDTY4NjM5YzFmLWFiMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj5cXdNjqpH1YuhDFMWcVZkUaHg5z1TiMsXxlzBt2jLsGCARReKdRmgZEqS0zU VtiEIx1uxhacfqTgxP6Vne1ZpsjtTDfV0mPY/6ED+Vemr8oDHB1W0zOfsUn3xkJ0 oTWx20h2O+vQKlzCWWIka2D9hhAvFfplkkpG6Y+KgHfbH0TPmBAwObkKuZSWf2XD dvdbccaBSK+yDzL67Kei0Zy+pfuNrNgDndZo/otWaBngor3tmZkDDnXuFTmMaWtm vFcs4cijTqDY0ZZCS9va0NdshzfWhSMBTJbiSsZpTFDoHW7n5KtDKFy7y/jUPJnS 4xeEKcnkE2aWyP9G6OMl9nyNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGa2b1uu4 6OGrsyH/U67bEOiv4wIwHwYDVR0jBBgwFoAUlXRSk8iKJybhClfVj0LMMWm3ySIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5Lzg0MkY5ODk0MEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFhSU2s4aUtKeWJoQ2xmVmowTE1NV20zeVNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5Lzg0MkY5ODk0MEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnli aENsZlZqMExNTVdtM3lTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4qhpcevkxjcL7QzcBso2JiKmpPgOt97cf6fxDUQ53NfHZWFrPkvVuT bjUesblxVO0wIjrWRwa4Plqk3EMKoKuC62tOaXQHUWuenWrMOoVTCQMd11DG/ko9 g8W8Ns3whRp95CgLPnOzgkWkgFNuwjXQquzxGR4Jq8DHtJfzHHhJzZAHaWoLnKg7 YtjiC9bUtPjW6AUMH68eC7roFhjyv0TjolxnQjF7kCeZJ/Ub3FIPBt8w0LHuyYAj MZf4D0A4Xsgmgk9HiyyautLifhU/L4Mu2HQhFfL2aDSXKUIQl+mpwxo9QoHeacwX GuSrtJV/A8qowkz+QIoXTD0tmTw91G4= -----END CERTIFICATE-----Generated at Wed Jul 2 13:40:29 2025 by rpki-client