$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: aCIbOa5P0cerzm72Kwl1IGiYzmeSIfDPkfe09SYdGvY= Subject key identifier: 43:4C:B6:B1:66:36:B3:68:02:E0:F7:2F:D1:7C:70:46:D1:12:2A:A7 Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 060F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0609 Signing time: Mon 30 Jun 2025 23:12:15 +0000 Manifest this update: Mon 30 Jun 2025 23:12:15 +0000 Manifest next update: Mon 07 Jul 2025 23:12:15 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: K8hg2IDfX6LDyIogNt9Nq6uGVDabH+SfoIbC4HDJuzQ=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: QkDFL/xy4lOpxq+tsUM4M0gw7c6hQli8tCJHPGWWDlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1551 (0x60f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Jun 30 23:12:15 2025 GMT Not After : Jul 7 23:12:15 2025 GMT Subject: CN=686319cf-1f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:3e:18:b6:b6:6b:58:ab:ac:98:71:e2:85: f8:3d:fb:7e:01:6a:da:ed:47:a8:74:d1:7d:e0:f3: 19:8c:74:bd:71:ee:73:4b:4f:bb:ae:6d:99:a7:81: 5d:69:4c:1f:62:b8:24:5a:b7:ad:91:f7:4a:63:fb: 55:c4:cd:60:05:41:02:17:1c:13:ab:01:ae:7b:30: b0:ec:34:85:36:0d:fc:9a:86:8c:9d:87:f7:34:0c: 71:25:50:83:6d:64:d0:30:d5:92:1b:9a:92:f6:31: a7:0a:f0:c8:97:02:4c:d4:82:55:de:32:36:8d:9a: 47:d6:15:b8:8b:61:41:2c:e3:b9:b9:df:1b:e6:9c: 3e:8d:c8:54:5e:b4:83:be:85:10:f7:63:fe:74:1b: cb:7e:7f:2d:71:90:d9:70:76:0e:1d:67:db:8c:fe: d6:78:83:12:9e:6e:8f:11:99:57:74:9e:14:b7:9b: 20:2a:d0:89:27:0c:47:ba:df:b9:e7:6b:41:92:27: de:24:31:ff:b3:b4:8d:52:e2:ec:c3:a9:83:c8:cf: a1:18:ee:a2:ca:75:fa:e2:f7:18:f4:37:db:30:88: 58:4c:bf:59:02:0b:11:3f:9e:44:22:5b:d2:d6:10: 45:dc:c3:75:c1:ab:91:b3:82:be:d0:97:0b:c2:b6: d8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:B6:B1:66:36:B3:68:02:E0:F7:2F:D1:7C:70:46:D1:12:2A:A7 X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1b:fb:e3:ec:8d:87:64:0f:e1:76:76:05:57:88:08:17:39: 86:c6:78:c5:b2:05:6f:b1:39:b0:d4:db:62:e4:3f:6d:cf:e5: ff:eb:09:99:12:99:c8:a3:0a:da:d7:94:7e:b8:0a:0b:ca:38: 86:35:4d:6d:f5:99:84:c0:75:c4:f0:83:48:0b:f4:c4:8a:77: d4:23:6e:bc:98:8c:c8:0f:2d:29:55:8c:c6:c6:2c:7f:37:d1: 16:07:95:26:f6:4f:a0:da:ab:15:20:94:1e:7c:fc:8f:75:21: a9:d9:5f:ca:0e:96:0d:2e:f0:8a:2f:5f:e7:31:9f:87:9d:84: f1:5f:64:95:e5:be:64:c3:e5:0e:d5:ec:bf:6f:d2:c4:a9:57: 53:43:11:aa:db:d0:a9:bb:16:bd:54:34:ba:b6:77:cb:72:90: 33:63:f2:25:b7:d3:62:b4:ab:bc:31:0c:7b:11:bd:af:32:cf: bd:c0:63:ea:2c:04:2d:6d:2f:30:50:85:23:fb:ec:8d:d2:f0: ba:fd:75:8a:26:7e:6f:04:54:ee:4e:78:ba:b9:d1:0d:89:dc: e9:7b:f6:fd:14:f8:71:3d:fa:1e:33:a4:8a:85:4a:fd:50:82: 5d:b9:44:50:36:d7:e4:3c:14:20:b4:e2:b1:c5:ec:e8:c3:0e: 69:d8:8f:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwNjMwMjMxMjE1WhcNMjUwNzA3MjMxMjE1WjAYMRYwFAYD VQQDEw02ODYzMTljZi0xZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnME+GLa2a1irrJhx4oX4Pft+AWra7UeodNF94PMZjHS9ce5zS0+7rm2Zp4Fd aUwfYrgkWretkfdKY/tVxM1gBUECFxwTqwGuezCw7DSFNg38moaMnYf3NAxxJVCD bWTQMNWSG5qS9jGnCvDIlwJM1IJV3jI2jZpH1hW4i2FBLOO5ud8b5pw+jchUXrSD voUQ92P+dBvLfn8tcZDZcHYOHWfbjP7WeIMSnm6PEZlXdJ4Ut5sgKtCJJwxHut+5 52tBkifeJDH/s7SNUuLsw6mDyM+hGO6iynX64vcY9DfbMIhYTL9ZAgsRP55EIlvS 1hBF3MN1wauRs4K+0JcLwrbY/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENMtrFm NrNoAuD3L9F8cEbREiqnMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0G/vj7I2HZA/hdnYFV4gIFzmGxnjFsgVvsTmw1Nti5D9tz+X/6wmZ EpnIowra15R+uAoLyjiGNU1t9ZmEwHXE8INIC/TEinfUI268mIzIDy0pVYzGxix/ N9EWB5Um9k+g2qsVIJQefPyPdSGp2V/KDpYNLvCKL1/nMZ+HnYTxX2SV5b5kw+UO 1ey/b9LEqVdTQxGq29Cpuxa9VDS6tnfLcpAzY/Ilt9NitKu8MQx7Eb2vMs+9wGPq LAQtbS8wUIUj++yN0vC6/XWKJn5vBFTuTni6udENidzpe/b9FPhxPfoeM6SKhUr9 UIJduURQNtfkPBQgtOKxxezoww5p2I9s -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:02 2025 by rpki-client