$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: Zjlovw7C3Cg2qdk4rThwMrVdIg/pGlISqVAHix3UphI= Subject key identifier: F6:4C:CC:66:77:24:63:92:AA:66:A4:E2:39:EF:FD:C2:8B:EA:34:FC Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 34A6 Signing time: Mon 30 Jun 2025 15:21:41 +0000 Manifest this update: Mon 30 Jun 2025 15:21:40 +0000 Manifest next update: Mon 07 Jul 2025 15:21:40 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: crFGCqmYhuuXnxe9h5yVh4N4s7dVo04pvaZG2wHqufg=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: INyUubVzyzPFDA6zTyRhkIRyBY0HoCb9vhAv2oVdZVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Jun 30 15:21:40 2025 GMT Not After : Jul 7 15:21:40 2025 GMT Subject: CN=6862ab84-cf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:4a:00:de:e6:1a:f6:13:78:7c:69:68:df: b7:f0:fa:86:54:c1:cb:bb:91:c1:d4:32:27:00:8f: 87:dd:1d:c4:d3:65:13:db:10:66:44:fb:24:95:db: 59:d1:c6:c3:40:13:23:d2:57:41:83:10:a3:7b:8a: 36:b0:45:b8:3a:f9:29:34:2c:3d:ac:7d:8e:3e:34: d3:c3:d7:e3:ff:2e:b9:48:b4:65:27:14:8c:8d:9b: 71:8b:66:96:2c:e1:fd:cc:03:ba:7c:db:9d:5a:e9: 33:60:5e:a4:dd:f3:29:b7:5a:2c:52:8f:5d:b7:b3: 35:13:13:e0:e7:89:fe:84:d5:3d:82:fa:82:0a:44: 1f:94:75:da:54:48:c4:35:ba:ad:b7:25:09:4b:43: e5:c7:f6:26:b1:3e:27:59:ee:ba:56:e3:8b:bc:c1: 7d:ef:f9:bf:77:73:fd:f6:56:32:ce:47:7a:7c:df: 0f:5b:a5:68:b9:9b:38:ca:b7:5f:c1:e6:ea:0f:6a: e5:48:77:a6:cd:64:2d:dc:5b:d8:eb:b2:cd:f1:f8: 3c:0b:7c:ca:d6:f1:e6:b6:de:97:07:89:5e:bf:9c: e0:dc:ca:04:3b:b4:9b:ba:79:83:15:b2:39:69:bd: 3d:ea:ed:2a:79:41:84:19:d0:79:f6:b4:04:c8:07: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:CC:66:77:24:63:92:AA:66:A4:E2:39:EF:FD:C2:8B:EA:34:FC X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d0:64:0e:e2:5c:a9:cf:02:a4:c7:80:1c:50:1d:d7:4a:4f: ea:b2:05:81:44:a2:11:cd:68:d0:84:5d:8e:ea:a4:01:9d:91: b5:b6:d3:cc:12:1a:f3:93:dd:2c:9c:d0:58:c4:d3:93:e2:69: 6e:41:23:f1:be:97:e7:bf:4a:a6:ec:ab:68:f5:e0:a2:4f:f5: 3b:05:da:a7:c1:6c:69:e2:e2:3f:e8:4d:a0:36:e9:6f:06:78: 24:be:05:1d:18:e7:e9:57:0a:a9:0c:23:51:59:f4:2a:c9:52: 2c:46:4a:f3:af:cd:0a:3e:99:3c:71:a4:c3:95:27:a7:da:2c: ef:48:36:a8:2d:9d:36:2b:00:ee:f4:79:3b:7a:ba:5b:98:75: cc:cf:1f:c5:6e:1c:95:f4:5a:08:a6:93:cc:87:31:ee:46:51: 40:b0:75:2b:19:0e:88:e5:6d:b2:47:dd:c4:35:a7:07:77:a7: f8:2d:aa:a6:3b:8e:6d:5e:0b:cd:b8:72:b1:29:55:37:b2:61: 02:7d:09:b6:02:06:4c:6a:4a:36:4f:19:c9:a4:44:d1:98:80: 39:84:b4:6b:43:a2:b0:75:c2:ad:84:5f:f7:ab:66:77:28:7a: 55:ca:53:e6:43:03:9d:bc:d4:57:73:d9:e3:93:9b:66:f5:be: d8:aa:d8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjUwNjMwMTUyMTQwWhcNMjUwNzA3MTUyMTQwWjAYMRYwFAYD VQQDEw02ODYyYWI4NC1jZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a9KAN7mGvYTeHxpaN+38PqGVMHLu5HB1DInAI+H3R3E02UT2xBmRPskldtZ 0cbDQBMj0ldBgxCje4o2sEW4OvkpNCw9rH2OPjTTw9fj/y65SLRlJxSMjZtxi2aW LOH9zAO6fNudWukzYF6k3fMpt1osUo9dt7M1ExPg54n+hNU9gvqCCkQflHXaVEjE NbqttyUJS0Plx/YmsT4nWe66VuOLvMF97/m/d3P99lYyzkd6fN8PW6VouZs4yrdf webqD2rlSHemzWQt3FvY67LN8fg8C3zK1vHmtt6XB4lev5zg3MoEO7SbunmDFbI5 ab096u0qeUGEGdB59rQEyAfXPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZMzGZ3 JGOSqmak4jnv/cKL6jT8MB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50GQO4lypzwKkx4AcUB3XSk/qsgWBRKIRzWjQhF2O6qQBnZG1ttPM Ehrzk90snNBYxNOT4mluQSPxvpfnv0qm7Kto9eCiT/U7BdqnwWxp4uI/6E2gNulv BngkvgUdGOfpVwqpDCNRWfQqyVIsRkrzr80KPpk8caTDlSen2izvSDaoLZ02KwDu 9Hk7erpbmHXMzx/FbhyV9FoIppPMhzHuRlFAsHUrGQ6I5W2yR93ENacHd6f4Laqm O45tXgvNuHKxKVU3smECfQm2AgZMako2TxnJpETRmIA5hLRrQ6KwdcKthF/3q2Z3 KHpVylPmQwOdvNRXc9njk5tm9b7YqtjQ -----END CERTIFICATE-----Generated at Wed Jul 2 13:07:28 2025 by rpki-client