$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: Bf/F6kLs0NZ71aOL0alM1gmLEhlygglEnA6p2V8/r2o= Subject key identifier: D1:97:71:2F:D5:AC:35:81:FC:8B:4F:EC:DE:99:99:5D:1F:DA:47:C3 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 068D Signing time: Fri 04 Jul 2025 22:50:45 +0000 Manifest this update: Fri 04 Jul 2025 22:50:45 +0000 Manifest next update: Fri 11 Jul 2025 22:50:45 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: AcEF0CtI6iTIksApu/ifeVg6nGX0sZxsbYXhcy4rW7s=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: iHNv1D4CuKh0MplUtgE1k/nBfju2p94sD6YSJueQYIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: Jul 4 22:50:45 2025 GMT Not After : Jul 11 22:50:45 2025 GMT Subject: CN=68685ac5-c634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:79:9e:e4:bd:fd:b0:0c:14:69:f3:8d:e5: 05:d6:d5:fa:b4:f8:77:91:55:9a:bf:a9:58:8c:0d: 27:80:d9:69:c2:91:42:ee:b7:80:e9:b2:80:22:9d: 48:6f:95:98:1c:08:b4:15:14:f4:fc:8b:3c:02:c8: 6f:d1:8e:c9:62:9e:e5:e1:e8:2d:10:a2:8a:81:6f: db:0e:2b:37:80:a9:b4:8a:62:90:20:63:64:8e:45: 90:20:c6:54:a4:6f:91:12:52:4d:62:5c:a5:17:0d: 8c:bf:9a:df:f5:e8:f4:d2:b3:f2:b5:c3:0e:84:4a: cf:51:05:21:0a:87:65:04:2b:b6:81:ce:d8:7a:e4: d2:2e:21:92:b9:fb:ce:c8:42:85:8f:7f:d7:90:73: 08:fd:04:93:65:04:c5:59:c8:3f:17:0d:ea:39:e1: b0:76:6d:14:47:c7:e8:86:42:d0:06:43:7f:d7:50: 81:18:47:62:fa:8b:65:6e:fa:18:e5:9d:38:cb:df: b4:07:a9:4a:57:f7:2c:dd:cb:02:9b:7f:e4:00:bd: c5:59:22:b1:aa:47:01:12:e9:8b:aa:41:1b:82:8d: 69:73:52:f3:80:d5:f0:33:12:22:c3:bf:f5:34:21: 17:79:ae:44:c7:f5:2e:3b:c4:1a:16:a8:e9:43:10: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:97:71:2F:D5:AC:35:81:FC:8B:4F:EC:DE:99:99:5D:1F:DA:47:C3 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:43:b3:89:f0:7e:8b:a2:2f:b5:68:9c:30:6d:63:af:28:c4: 22:3f:79:df:1f:fe:bd:f8:c0:64:84:a1:2a:72:d3:83:f9:1f: 86:1a:7f:a3:b5:07:76:cb:a6:38:fe:6b:80:d3:f1:9c:6f:10: 1a:89:35:2c:93:d8:91:6b:d6:a9:c7:f5:55:33:9a:d2:bb:0b: be:7d:fa:5f:37:ae:1c:1c:44:25:e9:86:37:cc:42:95:4a:4d: e6:7e:1e:5b:90:2c:be:6e:01:53:aa:a9:f8:b0:f7:71:30:03: 9c:1b:41:f4:81:38:fd:ea:e4:d9:2a:af:4e:28:a5:bc:e9:fb: 7a:a7:19:81:39:85:cf:fd:2e:34:0d:81:7b:5d:8c:a8:21:bd: f1:9c:9e:24:73:88:8b:91:3f:78:47:eb:f9:b3:01:9c:fb:ad: bd:69:bf:54:0f:0d:42:46:f0:ca:ae:2f:96:bb:3b:9e:eb:82: 4e:c2:0f:88:2a:47:0a:e8:33:8d:c3:df:1b:c5:45:80:03:a6: 5c:d2:a1:d3:07:9b:5e:40:b8:41:28:38:67:8f:3c:7d:43:08: 69:b3:28:03:b6:e7:09:ce:7b:1c:da:ec:e1:0d:68:72:e4:8d: 7c:38:ed:52:ab:8c:08:c9:f2:52:c9:69:83:e6:ec:7b:3a:1c: 89:0e:6a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUwNzA0MjI1MDQ1WhcNMjUwNzExMjI1MDQ1WjAYMRYwFAYD VQQDEw02ODY4NWFjNS1jNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kV5nuS9/bAMFGnzjeUF1tX6tPh3kVWav6lYjA0ngNlpwpFC7reA6bKAIp1I b5WYHAi0FRT0/Is8Ashv0Y7JYp7l4egtEKKKgW/bDis3gKm0imKQIGNkjkWQIMZU pG+RElJNYlylFw2Mv5rf9ej00rPytcMOhErPUQUhCodlBCu2gc7YeuTSLiGSufvO yEKFj3/XkHMI/QSTZQTFWcg/Fw3qOeGwdm0UR8fohkLQBkN/11CBGEdi+otlbvoY 5Z04y9+0B6lKV/cs3csCm3/kAL3FWSKxqkcBEumLqkEbgo1pc1LzgNXwMxIiw7/1 NCEXea5Ex/UuO8QaFqjpQxARKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGXcS/V rDWB/ItP7N6ZmV0f2kfDMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQ7OJ8H6Loi+1aJwwbWOvKMQiP3nfH/69+MBkhKEqctOD+R+GGn+j tQd2y6Y4/muA0/GcbxAaiTUsk9iRa9apx/VVM5rSuwu+ffpfN64cHEQl6YY3zEKV Sk3mfh5bkCy+bgFTqqn4sPdxMAOcG0H0gTj96uTZKq9OKKW86ft6pxmBOYXP/S40 DYF7XYyoIb3xnJ4kc4iLkT94R+v5swGc+629ab9UDw1CRvDKri+Wuzue64JOwg+I KkcK6DONw98bxUWAA6Zc0qHTB5teQLhBKDhnjzx9QwhpsygDtucJznsc2uzhDWhy 5I18OO1Sq4wIyfJSyWmD5ux7OhyJDmpg -----END CERTIFICATE-----Generated at Sat Jul 5 21:31:30 2025 by rpki-client