$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json) Hash identifier: EnW+IxDodek5PMxq5p7cXF3U9d5ZE19XZUvdvAYTTgE= Subject key identifier: 27:03:19:28:63:24:70:69:4B:6C:A1:F2:6A:DB:3B:75:7B:C8:A5:8A Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Certificate serial: 17A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft Manifest number: 1FAF Signing time: Mon 30 Jun 2025 16:44:21 +0000 Manifest this update: Mon 30 Jun 2025 16:44:20 +0000 Manifest next update: Mon 07 Jul 2025 16:44:20 +0000 Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: LTEYWLw066Nw48qPcDmKMG3Dqo30XrBFJUflgxqc7RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6051 (0x17a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Validity Not Before: Jun 30 16:44:20 2025 GMT Not After : Jul 7 16:44:20 2025 GMT Subject: CN=6862bee5-9938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:f3:6e:7d:c1:9c:4c:a5:82:25:da:df:08: 8a:bf:51:e2:39:11:ea:fc:40:3b:a5:4a:77:1b:e9: 23:9b:32:e9:de:70:86:53:9e:b4:d1:81:59:bd:a1: 59:e1:9b:00:c3:83:19:d3:cc:e3:20:e2:9c:f7:fb: 6a:ad:00:51:4a:b0:9f:1c:8c:71:6f:72:91:f1:32: 19:06:7b:8a:f2:52:6a:bc:7a:9c:2c:7c:4a:eb:fe: b3:1b:b5:68:60:63:19:63:0b:eb:c8:3c:7c:71:76: e3:a9:e9:a8:93:dd:9b:d3:da:29:d8:2f:ed:8c:df: 41:af:1c:3e:9b:3d:41:e3:1f:c7:37:1c:bf:03:a4: e1:71:2d:23:a3:4f:40:26:5a:6c:99:7d:a9:46:8a: 75:63:7a:a8:b3:56:3c:3f:31:a9:1f:52:24:76:e6: 9b:7c:6d:6d:d9:be:2e:2d:4c:c9:d1:e0:ba:ab:59: 3c:dc:67:ba:2f:17:3d:77:9f:ae:20:a2:0f:65:fa: e0:b2:dc:91:21:a2:e6:d7:02:1b:bf:15:ec:6f:d1: 1d:36:d2:56:c5:87:cb:3f:63:90:ff:fa:0a:0b:98: 71:4a:8f:4c:d2:cb:6f:67:ff:2d:d4:37:a4:9e:a2: 90:8b:9f:f0:fe:14:d1:e5:e2:5a:11:c5:4b:8f:9d: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:19:28:63:24:70:69:4B:6C:A1:F2:6A:DB:3B:75:7B:C8:A5:8A X509v3 Authority Key Identifier: keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:72:b3:f1:7e:00:65:29:32:f1:de:dc:30:fa:a0:4b:0d:2f: 08:44:f9:ae:33:2c:ce:4d:fc:8f:a4:71:39:a8:10:1d:13:c1: 98:77:b8:d8:4b:13:4a:49:51:28:fc:75:d8:53:0f:96:75:a0: 3b:ce:9b:fd:b6:1f:ef:93:34:3e:04:c5:38:02:8d:2e:16:ea: 4b:52:79:d6:f8:a5:f8:54:98:10:71:e7:e4:94:7c:80:51:1b: df:1d:e7:ad:0b:63:3d:ef:e3:ee:e4:d5:81:be:ec:20:95:16: c5:54:3f:66:1d:de:db:1a:ea:dd:dc:9c:93:32:db:95:c2:6b: e6:92:4b:a6:86:1e:09:6b:ff:8c:dd:3a:4d:e9:01:93:cc:e0: eb:21:5f:a4:99:be:58:0b:1b:ea:e7:c6:5d:5f:db:e0:0a:99: c9:9b:e4:25:ea:c3:1e:67:d7:55:4b:f8:05:cb:d6:73:52:25: ee:9c:1f:54:99:0f:86:15:95:e2:e0:a2:cf:c1:a3:1e:c4:10: ce:66:6c:9f:c3:c0:06:a4:e7:53:8d:e1:f9:9e:42:eb:73:25: b9:1d:30:5f:d7:74:51:6e:03:f3:38:02:38:10:e9:a1:c3:77: 98:0b:4d:95:cd:aa:37:bc:e1:5e:a2:03:b9:6f:8d:83:7b:0c: 2e:0d:f9:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDk0M0I4MTQyRTE1NTNFQzk0NjI1QTQ3MjRFNTY5ODJB MTU1OEZFOUMwHhcNMjUwNjMwMTY0NDIwWhcNMjUwNzA3MTY0NDIwWjAYMRYwFAYD VQQDEw02ODYyYmVlNS05OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxXzbn3BnEylgiXa3wiKv1HiORHq/EA7pUp3G+kjmzLp3nCGU5600YFZvaFZ 4ZsAw4MZ08zjIOKc9/tqrQBRSrCfHIxxb3KR8TIZBnuK8lJqvHqcLHxK6/6zG7Vo YGMZYwvryDx8cXbjqemok92b09op2C/tjN9Brxw+mz1B4x/HNxy/A6ThcS0jo09A JlpsmX2pRop1Y3qos1Y8PzGpH1IkduabfG1t2b4uLUzJ0eC6q1k83Ge6Lxc9d5+u IKIPZfrgstyRIaLm1wIbvxXsb9EdNtJWxYfLP2OQ//oKC5hxSo9M0stvZ/8t1Dek nqKQi5/w/hTR5eJaEcVLj52inQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcDGShj JHBpS2yh8mrbO3V7yKWKMB8GA1UdIwQYMBaAFJQ7gULhVT7JRiWkck5WmCoVWP6c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBzbEdKYVJ5VGxhWUtoVllf cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xEdUJRdUZWUHNsR0phUnlUbGFZS2hWWV9wdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBz bEdKYVJ5VGxhWUtoVllfcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgcrPxfgBlKTLx3tww+qBLDS8IRPmuMyzOTfyPpHE5qBAdE8GYd7jY SxNKSVEo/HXYUw+WdaA7zpv9th/vkzQ+BMU4Ao0uFupLUnnW+KX4VJgQcefklHyA URvfHeetC2M97+Pu5NWBvuwglRbFVD9mHd7bGurd3JyTMtuVwmvmkkumhh4Ja/+M 3TpN6QGTzODrIV+kmb5YCxvq58ZdX9vgCpnJm+Ql6sMeZ9dVS/gFy9ZzUiXunB9U mQ+GFZXi4KLPwaMexBDOZmyfw8AGpOdTjeH5nkLrcyW5HTBf13RRbgPzOAI4EOmh w3eYC02Vzao3vOFeogO5b42DewwuDfnf -----END CERTIFICATE-----Generated at Mon Jun 30 22:07:33 2025 by rpki-client