$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: cUer86eNJ4fRrl76WJzN4EqTkh2zpMqwX3NF8uYTS1E= Subject key identifier: 2E:25:8B:E8:22:E4:65:0F:EA:DC:D6:CC:98:79:4C:60:89:27:C9:08 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C62 Signing time: Wed 02 Jul 2025 18:42:51 +0000 Manifest this update: Wed 02 Jul 2025 18:42:51 +0000 Manifest next update: Wed 09 Jul 2025 18:42:51 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: i6NpxbppYzKilWI9wBepw0+QvUej7bPvllLflFI+hys=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Jul 2 18:42:51 2025 GMT Not After : Jul 9 18:42:51 2025 GMT Subject: CN=68657dab-688b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:96:63:f4:f4:45:03:2d:3a:1d:ce:62:25: f5:6c:e9:3f:dd:8e:33:74:ec:66:5b:43:9e:8a:d8: 39:15:44:10:45:71:44:e4:3e:be:9b:99:37:92:30: 11:76:75:2d:84:e4:50:8a:2d:f5:0a:72:98:46:38: 06:18:7c:25:38:ee:e7:a7:86:a7:f8:b3:43:19:54: e4:f6:4a:c6:71:be:dd:63:a8:da:9a:aa:6c:65:88: 41:7b:9f:83:ac:91:2c:07:0e:b9:ac:86:f8:ce:57: 5b:55:d0:12:4e:56:53:4d:94:ce:d8:d2:21:d3:e2: 6b:2c:b4:f6:46:3a:61:46:8f:b7:e6:a4:b3:8c:c2: a0:b5:58:6b:14:76:b2:37:f2:c0:4d:72:1b:d0:b3: 07:02:8f:40:86:61:bd:1f:8e:0b:0c:3b:35:d3:75: 55:c7:0f:a7:71:d1:77:dc:bf:90:31:8a:52:f8:77: 8b:ee:19:d0:a5:95:9c:0c:c4:96:6f:06:62:60:80: 0d:b7:d3:42:e5:81:ac:33:76:1d:ae:09:72:82:56: 40:38:19:6a:52:10:2d:b1:2d:69:88:e0:8a:da:d2: b0:7b:3a:df:71:d8:d6:f8:97:e4:a8:ee:0a:20:02: 1a:30:6c:1e:b6:8b:da:eb:38:99:26:06:41:ca:d9: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:8B:E8:22:E4:65:0F:EA:DC:D6:CC:98:79:4C:60:89:27:C9:08 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5a:bf:25:45:db:10:5b:f8:c6:fd:44:f7:f0:a6:3e:e0:0f: 5c:c3:75:34:e1:4c:65:ec:45:96:ea:1f:46:b7:3e:eb:6e:63: f7:71:d7:51:a0:d7:5d:65:17:82:ec:91:95:5c:cf:e9:f9:d8: 78:b7:b2:93:5b:5a:82:f3:1f:c8:04:b6:ad:9d:c7:46:63:d5: f7:12:89:43:4b:56:e9:91:80:de:c2:c3:49:13:29:86:39:da: 28:56:10:5b:4b:f1:85:ce:ee:ea:ce:55:d7:3c:fc:1a:12:73: 3e:7d:9e:95:c1:95:f1:5c:77:56:95:df:f4:9c:74:b2:4e:6d: 16:ec:2a:04:e0:d8:83:70:9b:52:60:5c:ac:5a:c3:cc:29:c5: 95:4c:d0:81:b3:5a:05:ff:1c:4b:51:76:83:0a:33:54:3b:87: 58:80:4d:c8:d7:9a:40:3e:9b:e4:0a:be:34:66:df:d9:3b:5a: e0:6d:ef:d1:62:e5:89:db:af:4a:07:c7:1c:0c:4e:6d:dd:30: 52:d5:a5:73:af:89:f1:78:b7:fc:a8:a7:30:9f:fd:2f:89:e9: 18:4a:f9:79:bb:b7:f4:c9:dd:fa:ce:c1:bf:92:1f:db:97:35: cc:a9:5e:de:26:41:ab:10:3a:a2:d4:19:ae:86:18:e8:92:e1: 49:ce:d0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwNzAyMTg0MjUxWhcNMjUwNzA5MTg0MjUxWjAYMRYwFAYD VQQDEw02ODY1N2RhYi02ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3J6WY/T0RQMtOh3OYiX1bOk/3Y4zdOxmW0Oeitg5FUQQRXFE5D6+m5k3kjAR dnUthORQii31CnKYRjgGGHwlOO7np4an+LNDGVTk9krGcb7dY6jamqpsZYhBe5+D rJEsBw65rIb4zldbVdASTlZTTZTO2NIh0+JrLLT2RjphRo+35qSzjMKgtVhrFHay N/LATXIb0LMHAo9AhmG9H44LDDs103VVxw+ncdF33L+QMYpS+HeL7hnQpZWcDMSW bwZiYIANt9NC5YGsM3YdrglyglZAOBlqUhAtsS1piOCK2tKwezrfcdjW+JfkqO4K IAIaMGwetova6ziZJgZBytkGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4li+gi 5GUP6tzWzJh5TGCJJ8kIMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEWr8lRdsQW/jG/UT38KY+4A9cw3U04Uxl7EWW6h9Gtz7rbmP3cddR oNddZReC7JGVXM/p+dh4t7KTW1qC8x/IBLatncdGY9X3EolDS1bpkYDewsNJEymG OdooVhBbS/GFzu7qzlXXPPwaEnM+fZ6VwZXxXHdWld/0nHSyTm0W7CoE4NiDcJtS YFysWsPMKcWVTNCBs1oF/xxLUXaDCjNUO4dYgE3I15pAPpvkCr40Zt/ZO1rgbe/R YuWJ269KB8ccDE5t3TBS1aVzr4nxeLf8qKcwn/0viekYSvl5u7f0yd36zsG/kh/b lzXMqV7eJkGrEDqi1BmuhhjokuFJztAD -----END CERTIFICATE-----Generated at Wed Jul 2 22:31:23 2025 by rpki-client