$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: TzM3PvxuWXx2HrpK2H6d+mo0YmFA+yrege71eKQb0CA= Subject key identifier: 0E:16:B0:BA:AE:45:FF:84:AC:B9:D3:8A:7F:F6:B2:DD:D3:CF:6C:F3 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 3497 Signing time: Wed 02 Jul 2025 15:22:28 +0000 Manifest this update: Wed 02 Jul 2025 15:22:28 +0000 Manifest next update: Wed 09 Jul 2025 15:22:28 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: I0GvyuE5J/15S6fb6Y6XqDVpaZ9PNPcT83PkcPt1SMg=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Jul 2 15:22:28 2025 GMT Not After : Jul 9 15:22:28 2025 GMT Subject: CN=68654eb4-1f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:09:71:37:12:ac:14:f2:a9:9f:0d:b7:60: aa:9a:81:4a:fa:d5:4d:00:04:c1:98:73:64:1a:b6: e6:c1:6a:a5:14:08:73:2a:9a:29:3d:cc:59:23:0e: c1:19:77:1c:82:db:2a:f9:0a:cb:7e:19:0b:31:12: 63:a6:cb:1f:82:24:87:93:21:ee:d0:72:e0:39:b0: 12:ec:b9:fc:83:72:3b:84:da:d1:84:05:48:a5:21: b6:37:9f:61:e5:3c:05:a4:7e:16:03:a7:71:de:45: 0c:8c:f7:9d:95:71:6e:78:91:3f:89:a4:15:ac:3f: a1:7d:4e:06:fe:af:12:ab:11:ad:fe:c5:cc:85:8b: d0:f1:6f:5e:d5:96:1e:8e:96:bc:a7:ae:90:49:54: 70:f7:02:8c:81:6d:88:26:b9:0e:f8:52:28:44:2c: 39:18:8c:ef:a4:cb:e2:be:dd:60:88:da:d5:01:ce: f6:cb:15:16:a7:03:6c:b1:eb:d6:bb:ad:6c:94:c9: b7:b1:17:df:49:24:60:9e:b6:4c:4e:77:c6:74:7f: 44:29:1a:ab:29:ac:b5:53:41:3e:1b:d4:1a:69:0b: c3:16:01:3f:b0:5f:a7:64:06:d4:59:e5:e0:e1:c2: d8:fc:2f:ed:fc:8a:98:17:00:2e:31:bc:fa:9d:b0: 22:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:16:B0:BA:AE:45:FF:84:AC:B9:D3:8A:7F:F6:B2:DD:D3:CF:6C:F3 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:d3:1b:18:0b:40:8a:1c:02:2c:29:3e:15:18:f5:1d:35:a2: e4:91:ef:4a:70:76:8f:32:1a:d9:47:9f:d3:47:5e:2e:34:e6: a9:7c:bf:b9:60:a0:a4:9a:da:ae:57:87:bf:1c:59:79:ab:48: b3:bf:b9:f6:8b:b3:ff:09:56:1a:e6:f5:76:31:6f:9d:f7:b8: dc:06:86:0e:94:35:27:d9:8d:86:0c:5c:38:8c:c1:40:c0:19: 89:8d:57:9b:7c:01:e2:26:df:0b:c2:ce:fe:a8:70:9c:dc:7d: 00:f9:80:01:db:9c:51:eb:7c:47:b8:36:a4:4f:96:6b:4f:1a: 3b:76:48:9e:3e:12:97:4e:8f:54:6e:5d:4a:cb:f7:bb:52:cb: af:f8:a7:67:af:29:3a:2c:fb:39:d4:6f:5a:d1:45:4d:95:d5: 7d:40:14:67:ae:7f:b4:a1:01:b0:c3:a9:b1:ac:56:b2:2f:f9: 9d:05:25:c0:ea:61:66:30:df:df:58:0b:91:f7:1d:9f:1a:cf: a0:af:5e:e8:16:0a:6f:de:f5:7b:cc:66:19:e4:47:70:cc:ae: aa:97:bb:3c:01:80:91:19:9d:0b:65:7d:1b:46:08:9a:97:bc: 9f:dc:59:c8:b6:56:0a:13:b3:f7:09:91:c4:79:fd:74:2e:30: 1d:e4:03:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUwNzAyMTUyMjI4WhcNMjUwNzA5MTUyMjI4WjAYMRYwFAYD VQQDEw02ODY1NGViNC0xZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobAJcTcSrBTyqZ8Nt2CqmoFK+tVNAATBmHNkGrbmwWqlFAhzKpopPcxZIw7B GXccgtsq+QrLfhkLMRJjpssfgiSHkyHu0HLgObAS7Ln8g3I7hNrRhAVIpSG2N59h 5TwFpH4WA6dx3kUMjPedlXFueJE/iaQVrD+hfU4G/q8SqxGt/sXMhYvQ8W9e1ZYe jpa8p66QSVRw9wKMgW2IJrkO+FIoRCw5GIzvpMvivt1giNrVAc72yxUWpwNssevW u61slMm3sRffSSRgnrZMTnfGdH9EKRqrKay1U0E+G9QaaQvDFgE/sF+nZAbUWeXg 4cLY/C/t/IqYFwAuMbz6nbAiewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4WsLqu Rf+ErLnTin/2st3Tz2zzMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDm0xsYC0CKHAIsKT4VGPUdNaLkke9KcHaPMhrZR5/TR14uNOapfL+5 YKCkmtquV4e/HFl5q0izv7n2i7P/CVYa5vV2MW+d97jcBoYOlDUn2Y2GDFw4jMFA wBmJjVebfAHiJt8Lws7+qHCc3H0A+YAB25xR63xHuDakT5ZrTxo7dkiePhKXTo9U bl1Ky/e7Usuv+Kdnryk6LPs51G9a0UVNldV9QBRnrn+0oQGww6mxrFayL/mdBSXA 6mFmMN/fWAuR9x2fGs+gr17oFgpv3vV7zGYZ5EdwzK6ql7s8AYCRGZ0LZX0bRgia l7yf3FnItlYKE7P3CZHEef10LjAd5AP7 -----END CERTIFICATE-----Generated at Thu Jul 3 17:36:41 2025 by rpki-client