$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: s02QkmWHolZNb4n16/ysdVOfY5889uGLXprMPIb4nfo= Subject key identifier: B1:BA:28:6A:9E:E5:3C:55:AE:6C:89:B8:BB:D1:BF:DA:B4:27:04:F9 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0324 Signing time: Sun 29 Jun 2025 00:42:40 +0000 Manifest this update: Sun 29 Jun 2025 00:42:39 +0000 Manifest next update: Sun 06 Jul 2025 00:42:39 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: MNKozCM1hmR2Zi45ADkhCN7yjIsTGbVpvPyNFCG6Uzo=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: MW8b0lzbn7akooUbZ8tV+oRNYmXktBHymwJPvbPr0T4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: pmgvt39f/aMkunvyVMO6rfLmljyqEtakdw2Wz0MGd3o=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: Vk4lMkqK5ng6B+iZp/Sl6mPlRDRoZ3QpBy8plRdehn4=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: RV0bq4XHGKUuOS8T3WS7G4aUlSWl2to/4furDRifxYQ=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: 6/3DevyJRKnv1xx6SHWcr3LVBgvTH0u4H55ECTrHATk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Jun 29 00:42:39 2025 GMT Not After : Jul 6 00:42:39 2025 GMT Subject: CN=68608bff-20ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:1d:5b:53:cf:06:f5:0e:87:fb:29:d1:c7: 5b:74:3c:7b:bb:ef:c0:3d:6b:34:c1:62:69:1c:b7: 59:37:40:c5:7e:1c:d8:87:24:c7:20:50:4e:36:36: 41:1e:5b:f7:27:21:54:cf:36:61:a2:44:9f:e9:6a: 87:a0:d5:d0:de:e8:7f:64:22:24:4a:11:8c:7b:19: c6:2a:76:0f:5a:da:58:21:1d:f6:7f:53:d3:36:79: 87:cf:3c:96:a2:38:c5:3f:f9:d7:d7:7f:69:a9:73: 26:90:27:a4:ad:12:e5:1b:1b:8c:a4:f1:3a:b0:01: 2c:07:ba:a3:fa:e9:a2:6a:3e:eb:bb:8e:41:6e:c0: 84:9e:cb:2c:af:75:84:26:d5:cf:2d:52:28:27:f6: 72:05:ef:16:7c:88:b8:c9:db:ee:dc:f0:31:4a:a2: ec:48:8c:f3:03:22:21:eb:a9:18:fd:ae:61:69:a3: 9a:1a:d2:25:59:0e:fa:55:01:5c:18:2c:06:86:89: 7a:cb:5e:a8:0f:c8:53:9c:cd:d7:4f:f3:60:07:bb: dd:b4:d7:02:0c:4f:83:09:51:4a:e0:ff:26:3b:b4: 48:ec:eb:d5:37:4f:5c:84:9a:2c:91:67:ec:fe:cd: e2:00:62:39:b1:8f:a3:ba:6b:eb:eb:bc:70:17:89: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BA:28:6A:9E:E5:3C:55:AE:6C:89:B8:BB:D1:BF:DA:B4:27:04:F9 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fb:b8:6c:37:81:85:86:8e:c9:59:b2:d7:24:63:43:24:3c: bd:79:54:40:d9:a1:bc:ba:7f:f5:c6:74:65:af:6d:36:7a:15: 01:72:2f:dc:97:bf:d2:81:25:10:df:fe:d1:ae:2e:0f:eb:89: a3:0e:e1:09:63:3a:19:72:d1:e9:dc:46:fa:60:4b:84:44:bf: 28:0c:b1:e2:9d:a5:30:9f:33:c6:dd:1a:f5:5e:f0:50:9b:ed: 80:cd:0a:7b:41:a0:cb:28:95:1d:62:13:1f:1f:ad:6a:88:b1: cb:26:68:81:97:e0:08:8c:d2:b6:e0:40:90:08:00:b9:fc:8e: fe:6b:b0:b2:15:18:2b:a2:00:2b:66:66:00:70:77:1c:d2:0b: bb:0b:f9:c2:9f:f2:b2:98:fa:4b:30:f4:37:d4:b5:7f:c1:e7: 07:05:ee:a0:71:55:3d:52:2e:1e:30:27:cf:03:22:87:0a:ba: 8e:23:08:00:4d:66:1d:fa:a8:fd:c6:12:7d:5f:63:fa:b5:d0: c1:22:5b:ef:8b:28:36:1a:07:fc:18:02:32:96:77:74:8c:44: b3:2a:bc:fa:36:be:20:ce:ee:37:d2:76:4d:5e:fa:77:7a:ba: d8:87:49:bf:25:0c:4a:03:d6:11:3b:cc:8f:e8:fe:00:8a:80: 50:2e:38:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUwNjI5MDA0MjM5WhcNMjUwNzA2MDA0MjM5WjAYMRYwFAYD VQQDEw02ODYwOGJmZi0yMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqgdW1PPBvUOh/sp0cdbdDx7u+/APWs0wWJpHLdZN0DFfhzYhyTHIFBONjZB Hlv3JyFUzzZhokSf6WqHoNXQ3uh/ZCIkShGMexnGKnYPWtpYIR32f1PTNnmHzzyW ojjFP/nX139pqXMmkCekrRLlGxuMpPE6sAEsB7qj+umiaj7ru45BbsCEnsssr3WE JtXPLVIoJ/ZyBe8WfIi4ydvu3PAxSqLsSIzzAyIh66kY/a5haaOaGtIlWQ76VQFc GCwGhol6y16oD8hTnM3XT/NgB7vdtNcCDE+DCVFK4P8mO7RI7OvVN09chJoskWfs /s3iAGI5sY+jumvr67xwF4ncAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG6KGqe 5TxVrmyJuLvRv9q0JwT5MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA++7hsN4GFho7JWbLXJGNDJDy9eVRA2aG8un/1xnRlr202ehUBci/c l7/SgSUQ3/7Rri4P64mjDuEJYzoZctHp3Eb6YEuERL8oDLHinaUwnzPG3Rr1XvBQ m+2AzQp7QaDLKJUdYhMfH61qiLHLJmiBl+AIjNK24ECQCAC5/I7+a7CyFRgrogAr ZmYAcHcc0gu7C/nCn/KymPpLMPQ31LV/wecHBe6gcVU9Ui4eMCfPAyKHCrqOIwgA TWYd+qj9xhJ9X2P6tdDBIlvviyg2Ggf8GAIylnd0jESzKrz6Nr4gzu430nZNXvp3 errYh0m/JQxKA9YRO8yP6P4AioBQLjh/ -----END CERTIFICATE-----Generated at Mon Jun 30 05:20:00 2025 by rpki-client