$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: cBlBtoLiVDUo4TzCgHML89FY36EPMkOLYPlBCywViNQ= Subject key identifier: 9D:95:E2:19:9C:1A:3A:E8:5F:72:18:BE:D9:FB:E4:18:63:01:F3:5B Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C41 Signing time: Wed 02 Jul 2025 18:46:43 +0000 Manifest this update: Wed 02 Jul 2025 18:46:42 +0000 Manifest next update: Wed 09 Jul 2025 18:46:42 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: q6m6C6CNhhFLcXrkps2uK7hfqsvhjW5hiiY7D4pWQDI=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Jul 2 18:46:42 2025 GMT Not After : Jul 9 18:46:42 2025 GMT Subject: CN=68657e93-5a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:cb:e2:8a:ba:ed:ac:7d:88:75:c9:e4:00: f5:25:51:94:52:a9:c3:f7:e6:72:ef:1b:76:a5:dc: ba:e5:98:ec:e3:b3:e8:ab:e2:50:41:5c:36:59:36: ac:0a:73:c7:88:c6:a7:3f:3a:8b:cc:70:96:06:19: 40:f0:2e:b3:df:4a:9e:34:03:72:44:c5:88:fc:f5: 9c:ac:f0:1e:02:33:c0:f6:1f:86:fc:b9:87:35:09: 78:62:6a:be:e7:42:3a:bf:46:8c:c6:60:f5:3d:e1: 24:27:9e:7f:2f:1e:bb:02:fc:2c:41:41:d8:3a:11: f5:20:f6:f7:54:b3:33:79:a2:f5:ec:60:b0:bd:e0: 9c:72:3d:af:3b:32:dd:8b:9c:b3:4c:2c:b4:dc:63: 02:a7:06:4f:ef:74:c2:d0:73:83:f5:8d:4d:34:64: d0:dc:d0:c7:e5:9c:0b:63:a4:cd:de:5b:5a:91:ef: 63:e3:d1:6b:ef:ca:ba:24:98:54:cf:77:83:54:3e: 8f:45:3d:b1:b9:90:a2:5a:e9:5b:94:41:d5:e6:df: cd:b8:b7:7d:43:4f:82:56:b8:31:69:a4:ee:a1:07: a7:38:2f:75:31:4a:fc:a9:8d:07:65:49:55:58:b5: 8e:93:f5:e1:db:47:77:f5:63:00:de:0f:bf:79:f8: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:E2:19:9C:1A:3A:E8:5F:72:18:BE:D9:FB:E4:18:63:01:F3:5B X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:e2:20:d8:d7:00:fe:2e:35:25:98:8b:4d:7a:aa:ee:4c: 0d:2b:3e:4b:4f:b9:c2:c1:ea:6f:e6:f5:3d:75:62:f4:c5:a1: 76:21:8a:c9:83:45:ba:ec:33:97:28:fd:cc:56:aa:da:f9:d7: 38:85:c8:81:93:b6:ac:37:10:75:24:7b:ac:1d:41:76:21:7d: 91:fd:af:9f:3a:cd:22:a3:11:7b:be:66:1f:8b:11:9a:ab:09: ea:cc:a1:63:fa:2c:4c:5e:57:3c:57:99:b8:91:ee:0c:36:c7: 4d:a8:14:7b:04:06:11:30:be:44:9b:a2:dd:47:48:76:d1:3e: 01:f1:bc:5a:9e:ee:4c:76:76:70:40:76:a0:80:ab:b3:f8:4c: 91:90:f2:d3:a4:8b:d3:de:36:4a:8e:38:63:23:16:66:c3:d0: 2e:94:13:57:a1:0f:8c:89:52:09:23:42:d0:51:b0:b3:e4:b6: 5f:a7:8c:47:82:eb:d3:05:e8:64:4a:13:ba:12:fd:55:77:06: b6:cc:8a:27:3a:40:4d:3c:fe:cc:e3:30:c4:e1:47:61:5b:48: 3e:f3:5b:4f:24:fe:41:1a:cf:a5:61:93:0e:aa:ce:fa:f1:f7: a4:9e:a9:56:1d:18:0d:e5:52:e5:81:27:de:65:0a:9b:60:e7: f1:3f:1c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUwNzAyMTg0NjQyWhcNMjUwNzA5MTg0NjQyWjAYMRYwFAYD VQQDEw02ODY1N2U5My01YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAPL4oq67ax9iHXJ5AD1JVGUUqnD9+Zy7xt2pdy65Zjs47Poq+JQQVw2WTas CnPHiManPzqLzHCWBhlA8C6z30qeNANyRMWI/PWcrPAeAjPA9h+G/LmHNQl4Ymq+ 50I6v0aMxmD1PeEkJ55/Lx67AvwsQUHYOhH1IPb3VLMzeaL17GCwveCccj2vOzLd i5yzTCy03GMCpwZP73TC0HOD9Y1NNGTQ3NDH5ZwLY6TN3ltake9j49Fr78q6JJhU z3eDVD6PRT2xuZCiWulblEHV5t/NuLd9Q0+CVrgxaaTuoQenOC91MUr8qY0HZUlV WLWOk/Xh20d39WMA3g+/efhKEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2V4hmc GjroX3IYvtn75BhjAfNbMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/eIg2NcA/i41JZiLTXqq7kwNKz5LT7nCwepv5vU9dWL0xaF2IYrJ g0W67DOXKP3MVqra+dc4hciBk7asNxB1JHusHUF2IX2R/a+fOs0ioxF7vmYfixGa qwnqzKFj+ixMXlc8V5m4ke4MNsdNqBR7BAYRML5Em6LdR0h20T4B8bxanu5MdnZw QHaggKuz+EyRkPLTpIvT3jZKjjhjIxZmw9AulBNXoQ+MiVIJI0LQUbCz5LZfp4xH guvTBehkShO6Ev1Vdwa2zIonOkBNPP7M4zDE4UdhW0g+81tPJP5BGs+lYZMOqs76 8feknqlWHRgN5VLlgSfeZQqbYOfxPxzU -----END CERTIFICATE-----Generated at Thu Jul 3 10:34:20 2025 by rpki-client