$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: 880FdcuLUreDLcVpnZLrnYYFEeLba8by0VGAzgwjAME= Subject key identifier: 52:23:13:BC:49:1D:3F:7D:09:0D:AA:34:E5:64:1B:E7:E2:64:FB:D6 Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 3515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 34DA Signing time: Mon 30 Jun 2025 14:15:35 +0000 Manifest this update: Mon 30 Jun 2025 14:15:34 +0000 Manifest next update: Mon 07 Jul 2025 14:15:34 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: 6H+STY07pheb8+shlp8rtVyATrekABJ3fMvEE3lifQc=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13589 (0x3515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Jun 30 14:15:34 2025 GMT Not After : Jul 7 14:15:34 2025 GMT Subject: CN=68629c06-b5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:4d:5b:35:51:68:52:94:51:9b:a8:e1:d1: cb:65:a0:cb:28:4c:43:67:46:c5:02:3a:69:6e:06: 56:a7:1b:a6:e5:b1:c5:4a:52:cc:d3:01:b1:b5:f4: fc:ab:bb:e1:12:75:e6:f6:43:2a:7a:eb:09:ce:dd: 22:73:d4:7d:70:58:e4:ad:cf:5a:a6:c2:53:ed:7f: 44:22:78:cb:52:43:66:3f:ba:fe:71:b7:bf:4f:1f: 17:9c:24:a5:b0:08:1c:82:60:b8:ca:84:d0:87:ce: 99:6b:27:cb:27:7c:85:b4:f9:bb:39:9c:7e:5b:11: 60:c5:93:e6:41:32:f0:10:9e:85:95:19:20:6b:01: 18:63:78:f3:6a:16:cf:5c:54:13:d5:0f:13:96:f9: 8b:45:3e:61:8a:f4:48:7d:a3:db:6e:b7:79:ab:5c: cb:b6:da:08:49:40:d1:6b:b3:34:0f:0c:6a:64:af: 93:b3:41:a8:c2:fd:07:0a:ce:e6:d4:f2:41:f9:89: 41:31:5d:ad:e0:de:2f:19:d2:dd:a2:61:da:12:f4: 55:25:f7:ed:47:48:d8:c0:f3:7c:a3:38:79:3d:d5: c9:17:36:7c:94:2f:12:b0:0d:a8:23:75:7f:f0:89: 6b:db:8e:29:50:b9:f2:1d:40:62:a3:31:d2:a6:33: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:13:BC:49:1D:3F:7D:09:0D:AA:34:E5:64:1B:E7:E2:64:FB:D6 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6d:ba:eb:14:57:68:15:fe:38:80:f9:29:d2:f4:36:56:4a: f7:51:54:e0:1e:d6:8f:57:83:0d:df:11:47:42:52:8a:44:09: f3:b7:7e:44:43:5a:77:26:53:36:b6:b1:6c:6f:2f:8b:07:1f: 37:66:72:a3:10:6d:73:e7:50:58:db:d5:51:ba:ae:7d:84:c8: 32:6e:d6:22:6a:6a:23:fe:4c:a9:7e:02:25:67:26:fa:07:a5: 43:34:77:84:7e:ab:ec:3d:9e:9b:93:6c:e9:95:dc:b5:4c:4c: 31:a6:75:7c:70:35:37:6b:48:3e:71:2b:e9:31:ab:f6:53:e9: d0:fe:d1:d3:ed:f9:ee:e4:74:58:d7:a6:b2:10:58:83:2b:c5: db:d3:0b:e2:b6:05:ea:58:be:33:a4:5a:45:3f:7e:18:e0:eb: 91:f2:f3:2b:5f:41:32:b4:a2:1a:53:56:1e:02:46:e3:f0:6c: f7:90:37:3a:62:19:cd:71:8f:af:0b:0a:1e:ca:85:ea:e6:74: d7:48:b4:d4:46:35:c3:b8:63:d3:6f:0b:eb:19:d9:46:3a:3f: f6:ff:eb:6e:26:1f:e7:0b:a8:4a:cf:7c:22:2f:15:e2:90:dd: cc:a6:24:65:c1:70:d2:d3:14:78:d2:a0:45:56:47:87:0a:01: c9:ca:69:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUwNjMwMTQxNTM0WhcNMjUwNzA3MTQxNTM0WjAYMRYwFAYD VQQDEw02ODYyOWMwNi1iNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GdNWzVRaFKUUZuo4dHLZaDLKExDZ0bFAjppbgZWpxum5bHFSlLM0wGxtfT8 q7vhEnXm9kMqeusJzt0ic9R9cFjkrc9apsJT7X9EInjLUkNmP7r+cbe/Tx8XnCSl sAgcgmC4yoTQh86ZayfLJ3yFtPm7OZx+WxFgxZPmQTLwEJ6FlRkgawEYY3jzahbP XFQT1Q8TlvmLRT5hivRIfaPbbrd5q1zLttoISUDRa7M0DwxqZK+Ts0Gowv0HCs7m 1PJB+YlBMV2t4N4vGdLdomHaEvRVJfftR0jYwPN8ozh5PdXJFzZ8lC8SsA2oI3V/ 8Ilr244pULnyHUBiozHSpjOtzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIjE7xJ HT99CQ2qNOVkG+fiZPvWMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKbbrrFFdoFf44gPkp0vQ2Vkr3UVTgHtaPV4MN3xFHQlKKRAnzt35E Q1p3JlM2trFsby+LBx83ZnKjEG1z51BY29VRuq59hMgybtYiamoj/kypfgIlZyb6 B6VDNHeEfqvsPZ6bk2zpldy1TEwxpnV8cDU3a0g+cSvpMav2U+nQ/tHT7fnu5HRY 16ayEFiDK8Xb0wvitgXqWL4zpFpFP34Y4OuR8vMrX0EytKIaU1YeAkbj8Gz3kDc6 YhnNcY+vCwoeyoXq5nTXSLTURjXDuGPTbwvrGdlGOj/2/+tuJh/nC6hKz3wiLxXi kN3MpiRlwXDS0xR40qBFVkeHCgHJymmS -----END CERTIFICATE-----Generated at Wed Jul 2 13:05:51 2025 by rpki-client