$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft File: llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json) Hash identifier: qW26dRWQwk4TbL7lDOE7FSUgwsISQ4eB4KCMU7cJtZc= Subject key identifier: D2:FC:3C:37:98:5B:0E:C8:78:99:6C:AE:0D:C4:AE:96:13:6A:77:97 Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 Certificate issuer: /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft Manifest number: B6 Signing time: Thu 03 Jul 2025 06:07:52 +0000 Manifest this update: Thu 03 Jul 2025 06:07:52 +0000 Manifest next update: Thu 10 Jul 2025 06:07:52 +0000 Files and hashes: 1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: AFgprF9WmbT1hRk1FVSTRxhndjKG2KMaD2O31637OZU=) 2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: i8BI9IvwuikO1+xMVefOXZH2ufnANITPzuMSdPax+Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491 Validity Not Before: Jul 3 06:07:52 2025 GMT Not After : Jul 10 06:07:52 2025 GMT Subject: CN=68661e38-5c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:60:8b:b3:42:bb:98:2b:0f:11:5d:e0:4c:58: 60:75:d1:36:ce:5b:a5:77:41:1d:4e:80:13:fc:d6: 91:03:2d:c3:65:e3:82:bc:7b:38:e7:c8:84:35:fe: 28:bf:15:47:9b:ac:48:cd:58:33:27:e1:21:c7:d9: 18:9d:48:a0:09:91:27:1c:6a:c6:4c:35:05:47:1c: d4:5f:a4:7e:db:3c:70:4e:3f:08:d1:5a:78:b1:07: 82:29:75:71:de:0e:f4:06:86:cc:61:b2:86:5e:2f: 99:b5:5c:4f:c0:06:2e:c8:a7:86:60:b7:de:32:29: b7:88:4e:3e:85:76:04:80:cc:db:81:ad:d3:81:a7: 49:7e:ca:f8:60:7e:da:a1:58:30:18:37:11:3f:3f: de:66:b0:c3:33:1e:21:1f:15:86:f7:00:67:02:25: 6a:aa:c2:84:42:e9:09:45:83:d1:7f:44:1e:d5:f5: ab:51:37:77:f1:db:c9:a5:f0:04:e1:43:0b:e3:57: ec:3b:7b:24:95:eb:1c:1b:b4:7a:85:1b:35:ea:69: fd:c1:b6:46:91:20:e9:d8:c6:ba:11:f3:89:47:10: 44:96:f1:f6:75:7b:2e:21:04:84:6f:0a:cb:d1:b1: 12:f5:38:16:10:70:7e:86:08:de:fa:ef:6d:1c:9b: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FC:3C:37:98:5B:0E:C8:78:99:6C:AE:0D:C4:AE:96:13:6A:77:97 X509v3 Authority Key Identifier: keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f2:3c:70:50:b7:50:7b:ba:37:d0:44:3e:ce:44:e6:b7:2d: b7:ba:b6:b8:a7:9b:52:30:e8:c3:9b:98:00:4f:8d:03:98:d2: fb:29:d2:9b:c1:8e:ee:d1:de:6e:35:ca:a3:87:94:10:18:b1: 18:9c:8c:93:29:8e:c6:93:05:04:47:5b:0e:36:65:cb:78:90: 8e:88:f7:3b:29:32:42:bf:00:31:54:e7:1a:63:45:61:fd:e3: 7c:b0:ce:4c:86:b1:85:ba:3d:7f:b3:09:90:e0:7f:e6:34:6f: b3:c5:73:fd:c4:87:b4:07:da:b8:1b:6c:75:29:12:3c:a4:0c: b7:da:fd:bf:59:21:8b:ee:de:33:11:5f:7b:03:99:ed:25:10: cc:01:8e:73:24:fc:52:19:bc:36:1d:31:d3:68:70:59:3c:85: 86:ce:49:5b:be:16:33:3f:4b:f0:c2:e0:d5:00:e3:43:8e:bb: d5:a6:e3:61:e9:b9:88:7e:e3:88:9b:4b:04:81:22:d4:eb:08: 38:a9:59:90:b7:ea:f3:66:c0:8a:32:6d:d1:a4:7b:a3:06:12: bb:3a:a2:32:41:e1:09:dc:79:ca:64:86:a2:ca:89:b3:a6:8e: 74:cf:97:de:83:f3:5c:53:b2:b0:b2:a3:78:01:b6:ff:67:65: 05:cc:0e:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDk2NTRBMkYwODQ1OTdBMkI5MUFDMDAyQTc2MDdFMTND MTVEMDk0OTEwHhcNMjUwNzAzMDYwNzUyWhcNMjUwNzEwMDYwNzUyWjAYMRYwFAYD VQQDEw02ODY2MWUzOC01YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42CLs0K7mCsPEV3gTFhgddE2zluld0EdToAT/NaRAy3DZeOCvHs458iENf4o vxVHm6xIzVgzJ+Ehx9kYnUigCZEnHGrGTDUFRxzUX6R+2zxwTj8I0Vp4sQeCKXVx 3g70BobMYbKGXi+ZtVxPwAYuyKeGYLfeMim3iE4+hXYEgMzbga3TgadJfsr4YH7a oVgwGDcRPz/eZrDDMx4hHxWG9wBnAiVqqsKEQukJRYPRf0Qe1fWrUTd38dvJpfAE 4UML41fsO3sklescG7R6hRs16mn9wbZGkSDp2Ma6EfOJRxBElvH2dXsuIQSEbwrL 0bES9TgWEHB+hgje+u9tHJvIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL8PDeY Ww7IeJlsrg3ErpYTaneXMB8GA1UdIwQYMBaAFJZUovCEWXorkawAKnYH4TwV0JSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy84MEJGMUE2MjNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVpdVJyQUFxZGdmaFBCWFFs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsU2k4SVJaZWl1UnJBQXFkZ2ZoUEJYUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy84MEJGMUE2MjNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9sbFNpOElSWmVp dVJyQUFxZGdmaFBCWFFsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS8jxwULdQe7o30EQ+zkTmty23ura4p5tSMOjDm5gAT40DmNL7KdKb wY7u0d5uNcqjh5QQGLEYnIyTKY7GkwUER1sONmXLeJCOiPc7KTJCvwAxVOcaY0Vh /eN8sM5MhrGFuj1/swmQ4H/mNG+zxXP9xIe0B9q4G2x1KRI8pAy32v2/WSGL7t4z EV97A5ntJRDMAY5zJPxSGbw2HTHTaHBZPIWGzklbvhYzP0vwwuDVAONDjrvVpuNh 6bmIfuOIm0sEgSLU6wg4qVmQt+rzZsCKMm3RpHujBhK7OqIyQeEJ3HnKZIaiyomz po50z5feg/NcU7KwsqN4Abb/Z2UFzA7W -----END CERTIFICATE-----Generated at Sat Jul 5 03:51:44 2025 by rpki-client