$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: QHwXdDfogndCLooKH+WAIqcTxzz4aw5EBl9LRkUT74s= Subject key identifier: 45:49:0A:50:4D:FF:DA:71:B3:1E:24:8D:7D:35:4F:F5:AE:98:68:2F Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0182 Signing time: Thu 03 Jul 2025 03:41:13 +0000 Manifest this update: Thu 03 Jul 2025 03:41:13 +0000 Manifest next update: Thu 10 Jul 2025 03:41:13 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: VvApTX075C117nUnH4csEfPH/mdNrraJ7DZwCqA2ajU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Jul 3 03:41:13 2025 GMT Not After : Jul 10 03:41:13 2025 GMT Subject: CN=6865fbd9-7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:d5:ef:ba:24:34:cf:41:a4:35:72:5f:e5: 08:b4:d0:a8:2f:57:ad:08:63:64:33:88:10:f3:6a: 66:cb:36:68:bd:bb:66:d6:74:e7:1c:d2:ed:c8:41: 5e:ce:cd:9b:5e:a2:e5:1c:96:e5:f1:63:0d:10:e2: 57:bf:ec:f1:c9:79:81:f2:b2:eb:c4:79:39:47:5e: be:a9:42:b5:6f:84:17:d0:16:53:12:06:a3:e8:70: 09:24:8e:c0:0f:29:69:c4:80:b7:62:f7:17:eb:4d: cb:f6:f3:1d:8d:7d:b4:9a:7a:15:f4:89:ec:4e:0f: cc:68:78:2d:99:fb:4e:55:bb:21:90:16:f9:90:5e: 8e:4d:62:9d:bd:69:52:d1:33:7c:2b:58:f0:82:aa: 11:e1:ea:29:62:2e:57:56:3f:1d:7b:b7:b7:c6:08: 32:be:c6:04:36:de:74:aa:08:92:f1:60:2c:98:e2: 41:92:39:19:4a:13:f6:6d:e6:51:14:7f:42:e4:19: 08:bd:fd:84:0d:42:b4:5d:17:02:dc:a9:88:13:59: 20:3f:1a:93:20:3a:1e:cc:87:eb:54:b3:ec:6c:2b: ae:22:b1:a8:d5:31:09:01:9b:4c:8b:08:64:61:76: 8a:c0:95:db:60:fe:b8:05:d0:27:1a:a5:2c:39:d0: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:0A:50:4D:FF:DA:71:B3:1E:24:8D:7D:35:4F:F5:AE:98:68:2F X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:10:0e:03:4a:a8:74:03:a2:c4:58:cb:d0:1d:fa:74:47:e3: 57:46:51:70:08:ab:01:79:a8:42:ca:54:57:b7:15:70:26:e5: 25:1b:48:66:5c:f3:6c:45:9f:95:ad:b3:e3:c7:a9:7f:c5:d4: 61:cd:47:89:de:81:1d:c4:18:3a:5a:3b:c6:6e:65:80:29:cf: 0d:65:69:51:b4:59:1e:8d:ef:d3:66:04:4b:53:28:cb:4c:36: b6:94:d2:9e:dc:87:fb:0b:bf:67:2f:45:bb:a9:22:11:28:b3: 29:35:29:43:2d:04:d5:cd:8d:59:ea:1a:d0:76:8b:63:06:68: ef:f3:25:57:db:dc:5c:c1:24:a0:6c:e2:b9:05:6f:d9:8a:3b: 32:b1:c3:f8:e2:4d:71:ba:9a:ab:dd:34:23:6f:99:79:cb:4d: b7:71:6b:16:bf:b2:46:06:e1:89:b8:88:af:f0:4b:f7:a4:69: e9:ed:8b:da:df:8a:be:20:ef:e0:3c:4e:64:36:46:35:2d:f5: e3:f8:b2:23:c4:a0:d3:5f:8b:74:6d:46:71:d3:7d:30:71:43: c4:03:43:ff:d5:4f:b5:4a:ac:f2:4b:ae:35:b0:0a:94:9a:9c: c9:85:f5:94:21:eb:5b:ef:29:b8:a3:f2:f6:bb:54:9f:4d:15: d1:2b:53:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwNzAzMDM0MTEzWhcNMjUwNzEwMDM0MTEzWjAYMRYwFAYD VQQDEw02ODY1ZmJkOS03NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BPV77okNM9BpDVyX+UItNCoL1etCGNkM4gQ82pmyzZovbtm1nTnHNLtyEFe zs2bXqLlHJbl8WMNEOJXv+zxyXmB8rLrxHk5R16+qUK1b4QX0BZTEgaj6HAJJI7A DylpxIC3YvcX603L9vMdjX20mnoV9InsTg/MaHgtmftOVbshkBb5kF6OTWKdvWlS 0TN8K1jwgqoR4eopYi5XVj8de7e3xggyvsYENt50qgiS8WAsmOJBkjkZShP2beZR FH9C5BkIvf2EDUK0XRcC3KmIE1kgPxqTIDoezIfrVLPsbCuuIrGo1TEJAZtMiwhk YXaKwJXbYP64BdAnGqUsOdADDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVJClBN /9pxsx4kjX01T/WumGgvMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaEA4DSqh0A6LEWMvQHfp0R+NXRlFwCKsBeahCylRXtxVwJuUlG0hm XPNsRZ+VrbPjx6l/xdRhzUeJ3oEdxBg6WjvGbmWAKc8NZWlRtFkeje/TZgRLUyjL TDa2lNKe3If7C79nL0W7qSIRKLMpNSlDLQTVzY1Z6hrQdotjBmjv8yVX29xcwSSg bOK5BW/ZijsyscP44k1xupqr3TQjb5l5y023cWsWv7JGBuGJuIiv8Ev3pGnp7Yva 34q+IO/gPE5kNkY1LfXj+LIjxKDTX4t0bUZx030wcUPEA0P/1U+1SqzyS641sAqU mpzJhfWUIetb7ym4o/L2u1SfTRXRK1P/ -----END CERTIFICATE-----Generated at Thu Jul 3 14:43:13 2025 by rpki-client