$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: swyMQdTMXRJkDCIwCx+thxSZZHN8pkScETLzr9Ewy/I= Subject key identifier: 9F:CD:50:6F:79:C8:BF:9F:BE:49:F3:20:D1:34:43:51:4F:C4:B3:6A Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 02BF Signing time: Sat 05 Jul 2025 02:00:07 +0000 Manifest this update: Sat 05 Jul 2025 02:00:06 +0000 Manifest next update: Sat 12 Jul 2025 02:00:06 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: ERAPrXYFD3xoxAHm1gSQMIzq97D+5XT+ZnSUM9WGtmk=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Jul 5 02:00:06 2025 GMT Not After : Jul 12 02:00:06 2025 GMT Subject: CN=68688727-18bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:b6:7b:87:c9:21:fb:f7:88:70:b3:41:dc: c5:6f:d4:ab:cc:7c:e0:c8:ca:59:b1:13:bd:0c:04: 94:3b:d7:f9:04:2a:66:0c:c7:5c:d1:ed:44:47:41: a0:d4:b9:5e:fb:3f:19:2c:ca:50:9e:f3:2a:76:46: ca:bc:64:fe:1a:80:9c:79:00:9e:3d:30:66:59:35: 47:1f:e8:9b:78:85:53:a9:be:85:23:ee:9b:bc:29: ae:ca:56:0b:69:4a:93:6f:e3:a1:5a:09:f8:a5:04: 8f:53:72:55:81:c5:d1:10:92:10:de:38:50:a3:1e: 9b:3d:76:b9:ed:a8:f3:f8:bc:85:d0:4d:72:2d:a4: 06:eb:a2:7d:9a:d2:f4:c7:f1:8b:1f:3d:98:31:e9: dd:5e:a0:5d:a9:86:60:22:09:5c:0f:8d:3d:0b:fb: 77:cc:02:13:40:f1:1b:a1:5c:0f:91:59:34:75:60: 22:bc:23:58:9e:c1:c1:a4:81:a3:21:a2:c3:00:83: a9:f8:1b:da:1f:e7:7f:50:54:1a:cf:7f:9b:e8:02: 28:6e:84:86:8d:ec:4b:26:99:45:56:27:03:c2:4c: 1f:6d:4c:05:d1:6e:15:71:07:05:df:d1:b8:49:3b: fb:ad:72:d1:28:bb:11:0c:ca:95:cc:c6:09:f4:e2: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CD:50:6F:79:C8:BF:9F:BE:49:F3:20:D1:34:43:51:4F:C4:B3:6A X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c0:2a:0d:a0:70:01:6f:37:f3:89:06:43:5b:ae:05:38:9b: 89:1e:6b:e7:35:1c:5b:13:32:2f:4b:07:b3:cb:e0:49:5a:fc: 56:d2:74:71:bc:a0:23:20:85:c7:cb:ad:a3:9b:90:52:c0:10: 94:94:ef:b7:2e:22:6e:b0:c2:bc:76:10:ff:b4:2a:14:94:4e: 2a:19:0a:cc:cb:bc:23:1c:66:2f:c2:8b:0d:92:1e:e2:8d:b8: 53:ab:fd:dc:c9:92:ba:99:8a:17:0c:3e:ef:3a:ec:ff:5f:7b: 41:6a:5f:e2:b2:98:5c:2f:f3:6d:31:3e:00:57:0f:0c:89:ec: d1:35:6e:31:7d:4b:b4:82:e2:31:7d:64:45:34:43:b5:11:77: 22:f8:fd:d1:82:1b:38:2c:62:cc:28:8b:72:81:4f:b5:c3:32: f2:9c:c1:c8:5f:82:fc:59:92:3a:c0:40:d1:49:4b:3f:1a:06: fe:60:d2:be:3a:b3:fd:20:f7:b1:2f:37:95:4b:2e:29:a0:52: b4:55:87:12:95:d2:2f:c1:a1:0b:94:47:cf:72:a8:e9:bd:1a: e1:c6:03:3b:54:87:73:96:9c:36:5f:42:a7:6d:a8:e4:9e:39: b2:29:4c:6c:1d:b6:7d:81:a7:0d:e1:23:32:be:72:50:8c:eb: e8:fa:a7:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwNzA1MDIwMDA2WhcNMjUwNzEyMDIwMDA2WjAYMRYwFAYD VQQDEw02ODY4ODcyNy0xOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVu2e4fJIfv3iHCzQdzFb9SrzHzgyMpZsRO9DASUO9f5BCpmDMdc0e1ER0Gg 1Lle+z8ZLMpQnvMqdkbKvGT+GoCceQCePTBmWTVHH+ibeIVTqb6FI+6bvCmuylYL aUqTb+OhWgn4pQSPU3JVgcXREJIQ3jhQox6bPXa57ajz+LyF0E1yLaQG66J9mtL0 x/GLHz2YMendXqBdqYZgIglcD409C/t3zAITQPEboVwPkVk0dWAivCNYnsHBpIGj IaLDAIOp+BvaH+d/UFQaz3+b6AIoboSGjexLJplFVicDwkwfbUwF0W4VcQcF39G4 STv7rXLRKLsRDMqVzMYJ9OK5cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/NUG95 yL+fvknzINE0Q1FPxLNqMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEwCoNoHABbzfziQZDW64FOJuJHmvnNRxbEzIvSwezy+BJWvxW0nRx vKAjIIXHy62jm5BSwBCUlO+3LiJusMK8dhD/tCoUlE4qGQrMy7wjHGYvwosNkh7i jbhTq/3cyZK6mYoXDD7vOuz/X3tBal/isphcL/NtMT4AVw8MiezRNW4xfUu0guIx fWRFNEO1EXci+P3Rghs4LGLMKItygU+1wzLynMHIX4L8WZI6wEDRSUs/Ggb+YNK+ OrP9IPexLzeVSy4poFK0VYcSldIvwaELlEfPcqjpvRrhxgM7VIdzlpw2X0Knbajk njmyKUxsHbZ9gacN4SMyvnJQjOvo+qcJ -----END CERTIFICATE-----Generated at Sat Jul 5 10:55:44 2025 by rpki-client