$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: ZkgxYoAVFOGjAgxDDQ/z/kiLD7M7d5+NnwrXwFWGHac= Subject key identifier: E7:93:7C:17:4C:77:69:91:78:23:9B:38:4F:97:E3:2C:9A:C7:FA:74 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: E8 Signing time: Sat 05 Jul 2025 05:41:21 +0000 Manifest this update: Sat 05 Jul 2025 05:41:21 +0000 Manifest next update: Sat 12 Jul 2025 05:41:21 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: BS2KEVMic7OymTAxAwIZTkxgkHQDFE8vlqzsUqGxv40=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Jul 5 05:41:21 2025 GMT Not After : Jul 12 05:41:21 2025 GMT Subject: CN=6868bb01-6686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:9e:cd:6a:dc:5e:0a:b2:fe:e0:e9:11:a4: e9:d3:db:ca:bd:c7:db:1f:cc:81:a2:01:92:15:7f: 69:68:2d:1c:16:76:81:3c:c9:a5:74:0b:76:47:9a: 64:cb:c0:19:74:a3:7a:e4:17:75:31:96:47:8c:fb: 69:82:8c:a0:92:ee:f5:e8:0f:e9:45:81:f0:54:54: 07:c1:32:11:ca:11:f9:ed:7d:8f:e9:5f:06:9a:2a: 88:d6:39:9f:51:47:93:fc:d9:9f:96:92:62:40:43: 44:78:a3:fa:ba:10:44:4f:2f:6c:19:8f:29:33:69: e5:6c:c8:92:e4:59:f8:0c:7e:22:5a:52:f5:b1:c1: 91:2f:c9:a6:fd:df:9e:4e:df:7a:d4:be:b5:d3:29: d7:c5:f2:0d:ae:28:d1:21:93:ae:3d:78:a0:2e:28: 8d:d5:fc:d9:a7:5c:d9:27:b0:69:ca:6a:3e:77:93: 59:41:3c:19:e7:02:6e:ec:08:61:a3:1e:4a:68:43: b3:51:88:58:1e:f9:f8:b3:41:a4:b5:0e:3b:d5:05: c3:10:ba:6b:0f:de:78:b8:9f:0f:af:32:8a:59:14: 64:ec:cc:ae:ef:bf:b8:92:fe:d9:12:e3:4d:d0:ad: a8:76:f6:28:9e:db:49:63:26:10:b4:0e:21:92:cd: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:93:7C:17:4C:77:69:91:78:23:9B:38:4F:97:E3:2C:9A:C7:FA:74 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:75:f1:8f:f9:6d:64:e6:f5:5b:a9:f4:b1:3b:df:3c:a8:16: 9e:50:d3:0d:43:77:69:ea:ae:54:0d:c3:36:36:35:d9:a1:15: 59:77:42:21:7b:e2:55:35:77:72:57:7a:f4:ec:7b:d9:13:f2: 07:f9:b7:86:c5:35:24:f0:b3:d9:91:7c:5a:a4:94:94:f3:2b: 76:00:b1:05:17:fc:43:11:d6:48:a4:44:d7:d4:ef:f5:98:93: 48:27:b5:45:fa:c3:ed:66:93:b9:45:b8:48:26:80:b9:4c:cb: 97:e9:f4:72:0f:ea:cf:c5:b3:64:6e:1d:ac:17:81:a1:d3:db: df:ca:f3:e6:79:56:84:da:73:da:73:71:57:64:cb:1e:94:e7: 8c:9f:04:d7:1a:f6:29:65:92:b6:7f:96:2f:24:49:01:aa:b1: b7:0a:b7:e4:a7:c3:5c:64:06:86:be:06:cd:d9:6c:b9:43:53: 82:bc:5c:ed:b2:6e:40:e4:f2:56:fc:77:91:5b:01:ff:67:4a: 38:d0:da:14:38:4e:51:00:67:6a:65:cc:53:6b:dd:45:d8:59: ba:6b:b2:40:06:b1:6c:be:82:cb:92:51:f5:d9:40:39:ed:59: 5b:30:88:a3:68:17:95:36:3f:dd:52:95:4b:0f:8d:ee:3e:b6: f2:69:fc:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwNzA1MDU0MTIxWhcNMjUwNzEyMDU0MTIxWjAYMRYwFAYD VQQDEw02ODY4YmIwMS02Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR6ezWrcXgqy/uDpEaTp09vKvcfbH8yBogGSFX9paC0cFnaBPMmldAt2R5pk y8AZdKN65Bd1MZZHjPtpgoygku716A/pRYHwVFQHwTIRyhH57X2P6V8GmiqI1jmf UUeT/NmflpJiQENEeKP6uhBETy9sGY8pM2nlbMiS5Fn4DH4iWlL1scGRL8mm/d+e Tt961L610ynXxfINrijRIZOuPXigLiiN1fzZp1zZJ7Bpymo+d5NZQTwZ5wJu7Ahh ox5KaEOzUYhYHvn4s0GktQ471QXDELprD954uJ8PrzKKWRRk7Myu77+4kv7ZEuNN 0K2odvYonttJYyYQtA4hks0jRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeTfBdM d2mReCObOE+X4yyax/p0MB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYdfGP+W1k5vVbqfSxO988qBaeUNMNQ3dp6q5UDcM2NjXZoRVZd0Ih e+JVNXdyV3r07HvZE/IH+beGxTUk8LPZkXxapJSU8yt2ALEFF/xDEdZIpETX1O/1 mJNIJ7VF+sPtZpO5RbhIJoC5TMuX6fRyD+rPxbNkbh2sF4Gh09vfyvPmeVaE2nPa c3FXZMselOeMnwTXGvYpZZK2f5YvJEkBqrG3Crfkp8NcZAaGvgbN2Wy5Q1OCvFzt sm5A5PJW/HeRWwH/Z0o40NoUOE5RAGdqZcxTa91F2Fm6a7JABrFsvoLLklH12UA5 7VlbMIijaBeVNj/dUpVLD43uPrbyafyK -----END CERTIFICATE-----Generated at Sat Jul 5 18:41:56 2025 by rpki-client