$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: O7v5gBkTZPKq+YEwLJsFVyfHz58kQlAV4PmMWx017jw= Subject key identifier: 0C:19:60:E4:64:D2:DC:F6:F1:83:E5:95:24:69:DB:59:44:1E:7A:6B Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01DF Signing time: Tue 01 Jul 2025 03:11:17 +0000 Manifest this update: Tue 01 Jul 2025 03:11:16 +0000 Manifest next update: Tue 08 Jul 2025 03:11:16 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: ktrZbqakIvQ+ncnAUJwhpOXEbDwhzNppz/67xSvTmPM=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Jul 1 03:11:16 2025 GMT Not After : Jul 8 03:11:16 2025 GMT Subject: CN=686351d5-3509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:7d:ea:fe:31:1d:88:93:74:3a:44:6a:73: fa:1a:77:e1:6b:3b:96:38:96:64:4b:c7:50:ba:9b: c9:f2:92:53:3a:11:81:73:ed:da:ae:27:33:49:30: 85:b9:5d:b1:7b:c4:0f:19:5b:15:1a:07:0d:43:7d: 0b:f9:d8:1e:3b:e4:a5:c9:c1:73:ea:53:86:e0:07: ae:94:1b:63:cc:22:fc:e5:f6:18:74:b7:91:d3:72: 06:1b:29:71:f7:88:ce:c4:b7:32:7c:97:8b:b7:00: b6:47:d5:7c:92:64:f0:eb:ed:05:e4:8c:1f:fa:e3: 17:c3:fc:71:52:bb:97:cb:a1:2b:9c:e2:f2:78:dd: 4f:11:7f:a1:77:56:1e:15:0c:6b:6d:b4:92:9f:85: 58:9f:51:4f:b9:be:20:a0:a1:a7:e8:6b:97:d3:c9: be:d3:4a:93:7b:d1:84:4d:9e:3a:fd:84:fe:d5:ae: 51:dc:7b:11:cf:8d:e6:9d:a4:d7:4c:44:dc:47:14: 72:0d:88:b2:cc:2d:b9:11:e8:96:89:6c:bb:1b:8b: c4:fe:21:41:d7:3a:45:d2:94:ae:3a:fe:d5:2f:3a: 22:a9:47:de:66:da:e1:58:51:68:33:ea:19:7e:31: 7c:8d:49:65:5d:82:a4:94:e1:a0:eb:36:60:ba:36: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:60:E4:64:D2:DC:F6:F1:83:E5:95:24:69:DB:59:44:1E:7A:6B X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:e7:03:68:e3:0c:cb:35:21:2e:38:64:b4:da:d9:57:1c: c6:43:ca:57:04:d0:90:9b:c0:f1:c4:1b:3b:7d:79:72:89:5a: a5:d2:5b:d1:a6:ec:9c:5a:df:24:0e:85:00:c9:e5:8c:e6:6a: 23:7d:85:e5:af:4a:82:c4:53:6d:72:57:80:af:a9:23:26:ab: b8:f0:25:7c:ac:70:f8:b1:1b:2f:ec:e5:6a:a0:4f:e9:87:2b: 30:bc:2c:47:80:2c:e8:eb:39:f8:7b:f1:c4:33:dd:28:81:f8: ae:e4:6f:32:18:30:70:99:3f:28:eb:bf:4c:b5:f6:01:fa:a4: 10:27:a4:58:ac:73:65:ab:7d:fa:ba:e2:b9:8d:16:a3:1c:77: be:2e:4f:04:86:be:16:09:f0:75:ca:5e:8a:48:13:c8:65:2f: 86:39:85:1a:4b:b9:b1:a1:54:f1:f9:0d:74:93:e4:ca:57:a2: e7:55:18:f9:5c:06:de:c2:2f:4c:72:c4:83:dc:3b:b9:74:a2: 12:2d:e1:d8:93:71:61:3b:ea:be:9b:81:db:9f:5b:f2:36:11: 14:1a:c0:13:dd:c2:0b:38:03:f0:63:9f:65:bc:8c:1f:f5:96: 6d:2c:14:b3:7c:fe:43:e4:69:0a:33:b6:5d:b6:cb:4c:b5:0f: 50:40:5e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNzAxMDMxMTE2WhcNMjUwNzA4MDMxMTE2WjAYMRYwFAYD VQQDEw02ODYzNTFkNS0zNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ft96v4xHYiTdDpEanP6GnfhazuWOJZkS8dQupvJ8pJTOhGBc+3ariczSTCF uV2xe8QPGVsVGgcNQ30L+dgeO+SlycFz6lOG4AeulBtjzCL85fYYdLeR03IGGylx 94jOxLcyfJeLtwC2R9V8kmTw6+0F5Iwf+uMXw/xxUruXy6ErnOLyeN1PEX+hd1Ye FQxrbbSSn4VYn1FPub4goKGn6GuX08m+00qTe9GETZ46/YT+1a5R3HsRz43mnaTX TETcRxRyDYiyzC25EeiWiWy7G4vE/iFB1zpF0pSuOv7VLzoiqUfeZtrhWFFoM+oZ fjF8jUllXYKklOGg6zZgujaKwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwZYORk 0tz28YPllSRp21lEHnprMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaRucDaOMMyzUhLjhktNrZVxzGQ8pXBNCQm8DxxBs7fXlyiVql0lvR puycWt8kDoUAyeWM5mojfYXlr0qCxFNtcleAr6kjJqu48CV8rHD4sRsv7OVqoE/p hyswvCxHgCzo6zn4e/HEM90ogfiu5G8yGDBwmT8o679MtfYB+qQQJ6RYrHNlq336 uuK5jRajHHe+Lk8Ehr4WCfB1yl6KSBPIZS+GOYUaS7mxoVTx+Q10k+TKV6LnVRj5 XAbewi9McsSD3Du5dKISLeHYk3FhO+q+m4Hbn1vyNhEUGsAT3cILOAPwY59lvIwf 9ZZtLBSzfP5D5GkKM7ZdtstMtQ9QQF7c -----END CERTIFICATE-----Generated at Wed Jul 2 15:01:21 2025 by rpki-client