$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: obv6xiWPKs+SaK8zYGPULjphUNCMep2izoxYrO9pvRM= Subject key identifier: 7F:80:D0:58:15:03:C5:D1:82:C5:49:8E:A2:58:22:12:FB:C4:C6:9B Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 6A Signing time: Thu 03 Jul 2025 07:27:00 +0000 Manifest this update: Thu 03 Jul 2025 07:27:00 +0000 Manifest next update: Thu 10 Jul 2025 07:27:00 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: Lgq6Q3r4QUMH05o3eJK31Vf2wp0jwny2qxWLvWyPwuA=) 2: 519D1CA8564011F0A9940527C4F9AE02.roa (hash: 2Xg6JEl78Uj3jqoj0Urk3McIDQ4jcsDQ9onugoqGtpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Jul 3 07:27:00 2025 GMT Not After : Jul 10 07:27:00 2025 GMT Subject: CN=686630c4-01c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:72:35:9f:6a:91:82:34:66:c4:2b:5c:da: 1a:4f:96:f8:c0:eb:9a:72:ac:95:c8:5d:d4:09:0b: 11:02:a8:19:b0:03:c5:b5:b6:3e:ff:b6:53:bf:d4: 02:69:09:3c:04:a2:b5:2a:6d:87:f4:61:51:6c:b0: ab:a1:d2:18:4a:73:61:33:1b:e3:39:91:e1:fc:7a: 0b:d9:11:fd:c6:c9:87:1a:1a:29:0e:92:e2:38:be: 74:f9:35:6b:55:98:ef:e2:59:99:fc:65:34:18:58: b1:f2:38:2e:9a:70:c0:c7:80:fb:42:23:b2:d2:70: d0:b6:99:73:96:b1:a5:e3:92:33:c1:ea:72:be:8a: f6:7c:4d:86:f9:97:8f:d6:ea:af:d6:c8:14:3f:79: 28:46:33:c6:17:7d:90:79:e5:44:f6:1b:89:fa:2f: 8c:db:7d:de:31:a8:8f:24:46:49:a5:0e:cd:92:52: 73:7b:86:1c:a7:7b:8c:5d:a8:10:3f:e6:29:23:52: 85:b7:bc:e0:81:03:e5:93:7d:71:5b:31:d4:9d:f7: 30:4f:5b:da:74:f2:40:8f:70:63:54:06:00:fe:db: ec:b1:2f:9a:5d:3c:c8:ca:04:4a:8f:db:f7:63:93: d0:0b:65:2c:07:26:d6:b3:7e:26:30:97:56:11:00: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:D0:58:15:03:C5:D1:82:C5:49:8E:A2:58:22:12:FB:C4:C6:9B X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:34:79:24:12:60:e6:4f:b9:6f:c1:7f:37:3b:c3:64:e6:74: fc:d0:bd:60:1d:e4:7c:f0:e1:8c:b1:3f:c0:d2:7b:c2:1e:ef: f5:3a:99:1e:09:b1:8b:8d:58:17:20:41:fa:eb:d6:f9:f3:18: fb:41:7f:e7:2f:39:b6:7a:5a:c6:b0:b7:09:11:48:2f:5a:4c: 3a:d2:70:41:86:87:83:65:93:25:38:46:fc:bb:ba:ce:a2:05: fd:fe:f7:16:63:44:ab:35:c6:32:15:68:d9:0a:4b:91:1e:43: 06:12:2d:5d:d1:c5:47:61:e1:30:28:3f:34:76:4f:cf:c7:bb: ac:d4:b3:f8:ce:af:5f:13:c6:a4:40:26:aa:d0:23:d9:fa:d5: bc:3e:02:95:84:6f:a2:2c:61:fd:81:38:1e:25:e4:7e:e4:67: f9:d5:61:cc:c9:a3:b1:c9:ce:c7:ef:31:4e:b8:4f:47:cb:b7: b5:66:b5:1d:8f:f6:df:6a:62:5b:77:6b:26:13:ec:4a:77:b1: aa:bf:f9:25:3b:42:66:7c:ec:92:96:a3:a7:9c:0d:92:27:92: 29:cc:78:84:7a:60:bb:2e:65:cc:a5:65:36:a4:15:4e:54:dc: c0:40:1e:c9:66:cf:fc:18:2d:fe:bc:15:fd:2e:70:d8:e4:0c: 1b:59:f2:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3RTRDNUY5MEQ5 ODEzODA1ODAeFw0yNTA3MDMwNzI3MDBaFw0yNTA3MTAwNzI3MDBaMBgxFjAUBgNV BAMTDTY4NjYzMGM0LTAxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDONXI1n2qRgjRmxCtc2hpPlvjA65pyrJXIXdQJCxECqBmwA8W1tj7/tlO/1AJp CTwEorUqbYf0YVFssKuh0hhKc2EzG+M5keH8egvZEf3GyYcaGikOkuI4vnT5NWtV mO/iWZn8ZTQYWLHyOC6acMDHgPtCI7LScNC2mXOWsaXjkjPB6nK+ivZ8TYb5l4/W 6q/WyBQ/eShGM8YXfZB55UT2G4n6L4zbfd4xqI8kRkmlDs2SUnN7hhyne4xdqBA/ 5ikjUoW3vOCBA+WTfXFbMdSd9zBPW9p08kCPcGNUBgD+2+yxL5pdPMjKBEqP2/dj k9ALZSwHJtazfiYwl1YRAFW9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf4DQWBUD xdGCxUmOolgiEvvExpswHwYDVR0jBBgwFoAUlnuX2eMRJQ2ClC0n5MX5DZgTgFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0I2MjJGQThBRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG51WDJlTVJKUTJDbEMwbjVNWDVEWmdUZ0ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0I2MjJGQThBRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEy Q2xDMG41TVg1RFpnVGdGZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFY0eSQSYOZPuW/Bfzc7w2TmdPzQvWAd5Hzw4YyxP8DSe8Ie7/U6mR4J sYuNWBcgQfrr1vnzGPtBf+cvObZ6WsawtwkRSC9aTDrScEGGh4NlkyU4Rvy7us6i Bf3+9xZjRKs1xjIVaNkKS5EeQwYSLV3RxUdh4TAoPzR2T8/Hu6zUs/jOr18TxqRA JqrQI9n61bw+ApWEb6IsYf2BOB4l5H7kZ/nVYczJo7HJzsfvMU64T0fLt7VmtR2P 9t9qYlt3ayYT7Ep3saq/+SU7QmZ87JKWo6ecDZInkinMeIR6YLsuZcylZTakFU5U 3MBAHslmz/wYLf68Ff0ucNjkDBtZ8pk= -----END CERTIFICATE-----Generated at Fri Jul 4 18:01:07 2025 by rpki-client