$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: ZLcttIaL79+natwy1cUtkTvlVhj4L7EqyzVH9Ed28vc= Subject key identifier: 63:C3:3B:25:E7:59:46:6E:6E:34:BF:06:68:1F:20:F0:B9:97:FD:E4 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 015A Signing time: Sat 05 Jul 2025 04:19:16 +0000 Manifest this update: Sat 05 Jul 2025 04:19:15 +0000 Manifest next update: Sat 12 Jul 2025 04:19:15 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: vEPelNHwMd1zlmqSleXcZDbWon0s/5Q4heqRVUZ8xXc=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Jul 5 04:19:15 2025 GMT Not After : Jul 12 04:19:15 2025 GMT Subject: CN=6868a7c4-e64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:a6:e6:fd:fc:36:b5:ae:b7:9c:71:48:c5: 3f:fc:3f:ad:86:72:45:2a:c6:d3:17:e0:5a:09:9b: 76:51:9e:46:cd:15:8a:cb:a6:b4:c6:bb:37:3e:db: 49:ea:07:c1:5e:05:1d:e4:15:ce:4f:39:79:76:29: 1f:44:ce:bd:2f:80:ae:b4:47:c9:60:ee:1c:51:aa: 07:53:e2:39:52:37:3e:77:f1:01:a6:ae:84:4a:f9: 1b:9c:ab:a7:4b:7f:90:a3:f4:a6:a9:63:8d:f7:51: fd:df:e4:32:0b:82:c2:ae:66:4b:99:15:45:af:2c: 7f:b1:ff:d8:0e:af:8f:3b:22:67:e4:8e:2c:50:f1: 01:29:12:bc:23:d3:0f:ac:df:51:2e:b2:58:3c:5d: 39:12:e6:c4:aa:58:b3:31:37:27:04:61:13:2e:71: 1b:69:41:b5:6b:35:2d:6f:60:cd:99:8c:2c:6b:8c: 24:08:37:da:96:36:98:09:b3:24:86:4d:07:6e:84: d9:a6:7e:58:0e:a2:02:cd:6f:27:60:e9:64:43:42: 9d:ad:c3:28:3c:ec:43:76:2e:ae:23:84:61:5f:5a: a5:c8:32:e5:3f:b5:76:66:37:d2:0f:78:fb:7f:88: 28:23:8f:ec:11:06:96:70:7f:b6:2f:96:df:18:ab: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:3B:25:E7:59:46:6E:6E:34:BF:06:68:1F:20:F0:B9:97:FD:E4 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4b:75:8d:f1:ef:a2:62:c5:8c:fd:ed:14:42:b5:fe:e5:cd: 38:0a:af:9d:72:8e:97:f1:31:5a:d7:09:af:ca:5a:81:47:f2: ce:3e:98:9e:bb:94:87:e9:e0:83:49:e9:bc:3b:38:53:09:35: 5a:7a:ef:08:3b:79:dd:81:80:6c:0d:fc:28:40:08:ae:03:93: 4e:44:ed:76:91:07:db:c5:c4:b4:b0:14:08:de:d2:f8:18:82: 45:cf:fb:df:d4:be:ba:85:d7:aa:1d:97:10:4a:ef:60:fa:3a: d0:08:82:88:e3:4b:df:87:f1:a8:8e:0c:68:3d:51:99:09:05: d5:75:1b:28:5e:02:79:4a:e5:67:7d:87:e8:89:d4:6b:83:80: b7:bd:b1:82:13:0b:a1:cb:f6:2d:b5:04:04:e0:e4:c0:0c:2e: 15:69:48:40:6a:00:3d:4b:76:a7:d2:0d:7f:fc:a4:15:ba:ac: 4d:cf:7a:4b:70:44:a3:5f:af:be:c9:ab:2d:7c:eb:16:0a:f0: 64:0a:af:be:62:99:67:15:a5:a3:a6:32:c8:1c:e8:71:92:18: b7:d2:c2:ea:3a:a7:2a:be:81:0e:27:38:4e:cf:69:89:09:e1: 54:e9:eb:4c:09:1d:05:dc:a0:28:0f:97:a9:1d:56:c6:1f:ce: b4:7e:ba:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNzA1MDQxOTE1WhcNMjUwNzEyMDQxOTE1WjAYMRYwFAYD VQQDEw02ODY4YTdjNC1lNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmmm5v38NrWut5xxSMU//D+thnJFKsbTF+BaCZt2UZ5GzRWKy6a0xrs3PttJ 6gfBXgUd5BXOTzl5dikfRM69L4CutEfJYO4cUaoHU+I5Ujc+d/EBpq6ESvkbnKun S3+Qo/SmqWON91H93+QyC4LCrmZLmRVFryx/sf/YDq+POyJn5I4sUPEBKRK8I9MP rN9RLrJYPF05EubEqlizMTcnBGETLnEbaUG1azUtb2DNmYwsa4wkCDfaljaYCbMk hk0HboTZpn5YDqICzW8nYOlkQ0KdrcMoPOxDdi6uI4RhX1qlyDLlP7V2ZjfSD3j7 f4goI4/sEQaWcH+2L5bfGKtdUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPDOyXn WUZubjS/BmgfIPC5l/3kMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGS3WN8e+iYsWM/e0UQrX+5c04Cq+dco6X8TFa1wmvylqBR/LOPpie u5SH6eCDSem8OzhTCTVaeu8IO3ndgYBsDfwoQAiuA5NORO12kQfbxcS0sBQI3tL4 GIJFz/vf1L66hdeqHZcQSu9g+jrQCIKI40vfh/GojgxoPVGZCQXVdRsoXgJ5SuVn fYfoidRrg4C3vbGCEwuhy/YttQQE4OTADC4VaUhAagA9S3an0g1//KQVuqxNz3pL cESjX6++yastfOsWCvBkCq++YplnFaWjpjLIHOhxkhi30sLqOqcqvoEOJzhOz2mJ CeFU6etMCR0F3KAoD5epHVbGH860froT -----END CERTIFICATE-----Generated at Sat Jul 5 05:29:42 2025 by rpki-client