$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft File: LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft (raw, json) Hash identifier: Zx3QU6cvLGA/U5nf0rQ5+dFdZcD56Li6TRIF9eFWQ8M= Subject key identifier: BC:AD:C9:49:CC:0D:3F:EF:11:56:F4:DD:93:8B:52:58:7D:03:95:22 Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 Certificate issuer: /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft Manifest number: 0BC4 Signing time: Wed 02 Jul 2025 19:07:51 +0000 Manifest this update: Wed 02 Jul 2025 19:07:51 +0000 Manifest next update: Wed 09 Jul 2025 19:07:51 +0000 Files and hashes: 1: LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl (hash: jJYS6SPaYS7MzIVQ9wodYRuYaJnWC84F5YZAWomcYac=) 2: 4ABAD810208D11EAA05C7C3DC4F9AE02.roa (hash: IjPsFFHCvUaMlnUaOFvCNKSeXcsnIqpFaL3Dn7jwLDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9 Validity Not Before: Jul 2 19:07:51 2025 GMT Not After : Jul 9 19:07:51 2025 GMT Subject: CN=68658387-2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:3a:39:f8:4d:12:87:6f:8c:27:6a:88:3d: 3a:47:05:96:cf:a6:65:b4:6f:47:b7:07:0f:3f:c5: 40:5b:5c:91:dd:d5:63:2b:f8:c8:30:29:92:2b:1f: 43:3b:15:2a:84:f5:cd:2f:f4:7b:6c:c1:40:3c:f3: 0a:3b:1b:85:03:bb:b4:5f:d2:59:c9:36:29:71:62: 05:f1:40:1a:31:83:ce:39:66:c5:12:7e:42:cb:62: f6:7d:b7:d9:0c:4f:ba:4c:30:d6:a2:01:24:a4:5a: 92:c5:b7:01:21:e2:0d:2d:24:53:6f:f3:a9:51:15: b6:22:e3:bf:89:b1:88:12:6e:a4:ae:d9:4f:3b:f4: 5e:38:b3:18:21:20:a0:d8:08:2c:5b:32:d3:f7:9b: 48:c9:04:75:e2:9d:b5:07:0f:87:25:3a:42:a3:2b: b1:e2:50:ac:15:c2:af:93:f7:8a:fe:e3:c1:c8:2f: 25:a8:89:e2:74:75:1c:4b:a5:a6:da:fd:2f:b0:84: 52:e1:5b:93:b2:3f:b4:bc:67:6f:e9:04:f8:34:72: 2c:f7:77:1c:d3:44:88:75:7f:68:34:93:6a:42:b5: 20:7f:74:f9:e7:ee:00:0d:26:9c:1e:bd:d6:7b:a9: 90:29:55:23:cd:0e:3d:c4:31:72:0d:75:27:39:03: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:C9:49:CC:0D:3F:EF:11:56:F4:DD:93:8B:52:58:7D:03:95:22 X509v3 Authority Key Identifier: keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e9:cf:d4:9d:34:9f:91:84:c6:d2:af:55:67:39:7d:76:43: c0:4b:b7:26:58:a7:bd:f6:0d:ec:19:90:c1:00:c8:fe:b1:aa: 2c:b2:ac:4b:ed:10:41:d9:a3:fe:34:f6:8e:a9:0a:06:07:e0: f3:7f:0f:76:f6:83:84:21:67:be:eb:ec:c4:bb:22:6a:16:c7: 89:47:50:9d:f6:03:93:c7:a1:45:24:5b:4d:6b:45:a3:d1:d8: 4e:29:61:c8:cc:86:58:13:eb:d3:65:a0:74:49:a3:e7:39:e9: b3:cb:de:84:48:01:17:9e:dd:c7:42:06:12:58:cc:9e:ea:4f: 4e:c0:08:4f:40:99:92:71:5b:31:0a:5f:3c:95:cc:40:ba:7f: 91:03:d2:41:1b:1d:d7:da:7a:c6:cb:b1:02:31:97:69:23:f5: 5b:f6:62:70:37:5b:6f:7e:68:d7:83:98:f4:8c:4c:9f:1a:05: 07:64:c3:99:90:57:87:a0:2c:bb:f0:b5:1e:e3:3d:c2:d2:67: 99:26:c5:84:11:91:d8:a2:cd:ce:6f:f9:99:a3:bf:1c:e5:42: 89:39:2c:68:e0:bd:37:b2:44:47:32:6b:57:9f:9b:02:e7:8e: 3b:16:fd:8f:2c:fc:c4:54:83:0d:3a:20:fd:fd:4d:19:dc:d5: a9:37:ac:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4 OTQ1RkNBQjkwHhcNMjUwNzAyMTkwNzUxWhcNMjUwNzA5MTkwNzUxWjAYMRYwFAYD VQQDEw02ODY1ODM4Ny0yYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcc6OfhNEodvjCdqiD06RwWWz6ZltG9HtwcPP8VAW1yR3dVjK/jIMCmSKx9D OxUqhPXNL/R7bMFAPPMKOxuFA7u0X9JZyTYpcWIF8UAaMYPOOWbFEn5Cy2L2fbfZ DE+6TDDWogEkpFqSxbcBIeINLSRTb/OpURW2IuO/ibGIEm6krtlPO/ReOLMYISCg 2AgsWzLT95tIyQR14p21Bw+HJTpCoyux4lCsFcKvk/eK/uPByC8lqInidHUcS6Wm 2v0vsIRS4VuTsj+0vGdv6QT4NHIs93cc00SIdX9oNJNqQrUgf3T55+4ADSacHr3W e6mQKVUjzQ49xDFyDXUnOQPf+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLytyUnM DT/vEVb03ZOLUlh9A5UiMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5 cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS80NzMzOTU2NjIwOEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4 eHd4a1lsR2Z4dldKUmZ5cmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC26c/UnTSfkYTG0q9VZzl9dkPAS7cmWKe99g3sGZDBAMj+saossqxL 7RBB2aP+NPaOqQoGB+Dzfw929oOEIWe+6+zEuyJqFseJR1Cd9gOTx6FFJFtNa0Wj 0dhOKWHIzIZYE+vTZaB0SaPnOemzy96ESAEXnt3HQgYSWMye6k9OwAhPQJmScVsx Cl88lcxAun+RA9JBGx3X2nrGy7ECMZdpI/Vb9mJwN1tvfmjXg5j0jEyfGgUHZMOZ kFeHoCy78LUe4z3C0meZJsWEEZHYos3Ob/mZo78c5UKJOSxo4L03skRHMmtXn5sC 5447Fv2PLPzEVIMNOiD9/U0Z3NWpN6xd -----END CERTIFICATE-----Generated at Fri Jul 4 01:25:59 2025 by rpki-client