$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: OF/j8fvwNNK9/eYoInMk1Y7Dt3tBuZecFWBZ5RSHAh0= Subject key identifier: 10:6A:6E:3F:BE:79:F4:F1:2B:D9:FB:08:DE:67:1D:11:B7:5B:02:9C Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C7E Signing time: Mon 30 Jun 2025 18:26:05 +0000 Manifest this update: Mon 30 Jun 2025 18:26:05 +0000 Manifest next update: Mon 07 Jul 2025 18:26:05 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: bPxJqwr6O7Zrlrkl4Lgy1nhqfWy6T+JVU2YZpvSfOmY=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Jun 30 18:26:05 2025 GMT Not After : Jul 7 18:26:05 2025 GMT Subject: CN=6862d6bd-639e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:e8:8a:32:97:27:38:0a:e9:97:74:4a:58: b0:b8:f3:c8:45:33:a4:77:57:c2:09:4b:fe:7e:1d: a4:99:90:f9:5e:90:bf:43:25:cb:50:12:88:c1:28: 01:c2:75:f3:ca:95:cc:63:53:12:0e:e5:88:25:4a: 72:23:ba:c3:73:f4:c2:32:89:b8:22:ad:11:b0:14: 4e:13:b2:5b:a0:3b:03:24:a4:05:2a:21:07:b7:95: 22:d6:15:d2:33:63:54:23:e1:c1:72:6a:94:24:40: 32:6b:74:87:1b:16:c4:5b:e7:ab:f5:24:75:ce:b4: e6:a5:7b:b6:26:bd:e3:1a:5e:68:d2:8c:e6:22:4b: 92:df:fd:41:1e:02:35:d3:49:d4:36:26:4f:69:32: 3c:aa:3f:b4:1a:bf:f4:a1:90:29:81:a3:0c:ef:5e: 9f:c5:a7:1c:80:b9:4b:68:8f:b8:e8:62:a9:d6:34: c8:ce:6b:dc:50:d4:de:21:f7:25:a9:71:b6:72:5d: 50:88:c9:97:1a:88:26:14:dc:17:c4:6d:a9:35:29: 52:50:4d:cb:ac:ab:b4:02:74:50:f4:9c:28:f5:32: a9:6a:97:ba:d8:68:50:64:96:68:d9:eb:dd:49:66: 85:60:11:94:46:04:5e:f2:af:90:eb:69:12:62:1f: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:6E:3F:BE:79:F4:F1:2B:D9:FB:08:DE:67:1D:11:B7:5B:02:9C X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:e0:eb:44:a7:3e:da:ff:cb:96:7c:ed:d0:8b:e5:b3:20: 09:3e:1f:8a:5e:68:81:25:fa:43:0d:a5:c0:5d:b6:ae:99:09: 73:1d:e0:49:64:c0:a6:56:ce:e0:6f:1c:e6:d3:80:77:80:8e: f4:39:17:ed:8d:b5:fb:0d:7a:55:58:80:92:49:aa:18:40:fa: 28:53:ff:ba:a1:fa:21:b8:2e:45:a2:70:03:16:e0:ac:40:e3: 5b:31:5f:a9:75:b0:3d:0c:2e:5a:6c:6f:b1:c7:bf:4a:ed:b0: ed:79:0c:2a:6c:3d:05:1e:de:4d:46:90:be:e0:0f:b3:84:02: 40:4a:b3:34:c3:97:99:8a:e7:8b:d0:08:02:a8:f0:b8:bf:74: 3b:21:a8:b9:f7:b7:ed:48:40:53:72:26:6a:1f:80:1c:c5:d9: a2:56:a4:c5:d1:24:c7:0d:85:62:4a:4e:29:8b:f0:c1:01:64: 8b:57:7d:3a:2e:00:91:f1:19:3b:f5:c8:84:ab:22:46:73:cd: 9d:d9:77:4d:77:01:5b:c4:15:37:17:67:ea:b3:54:39:50:43: 63:6c:d8:f3:68:6d:94:6e:53:b5:42:94:fe:76:a6:24:d0:59: a5:d7:54:29:f4:16:50:90:c0:46:77:d2:1c:52:3b:60:74:17: 4c:05:a4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwNjMwMTgyNjA1WhcNMjUwNzA3MTgyNjA1WjAYMRYwFAYD VQQDEw02ODYyZDZiZC02MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUroijKXJzgK6Zd0SliwuPPIRTOkd1fCCUv+fh2kmZD5XpC/QyXLUBKIwSgB wnXzypXMY1MSDuWIJUpyI7rDc/TCMom4Iq0RsBROE7JboDsDJKQFKiEHt5Ui1hXS M2NUI+HBcmqUJEAya3SHGxbEW+er9SR1zrTmpXu2Jr3jGl5o0ozmIkuS3/1BHgI1 00nUNiZPaTI8qj+0Gr/0oZApgaMM716fxaccgLlLaI+46GKp1jTIzmvcUNTeIfcl qXG2cl1QiMmXGogmFNwXxG2pNSlSUE3LrKu0AnRQ9Jwo9TKpape62GhQZJZo2evd SWaFYBGURgRe8q+Q62kSYh9W7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBqbj++ efTxK9n7CN5nHRG3WwKcMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUuDrRKc+2v/Llnzt0IvlsyAJPh+KXmiBJfpDDaXAXbaumQlzHeBJ ZMCmVs7gbxzm04B3gI70ORftjbX7DXpVWICSSaoYQPooU/+6ofohuC5FonADFuCs QONbMV+pdbA9DC5abG+xx79K7bDteQwqbD0FHt5NRpC+4A+zhAJASrM0w5eZiueL 0AgCqPC4v3Q7Iai597ftSEBTciZqH4AcxdmiVqTF0STHDYViSk4pi/DBAWSLV306 LgCR8Rk79ciEqyJGc82d2XdNdwFbxBU3F2fqs1Q5UENjbNjzaG2UblO1QpT+dqYk 0Fml11Qp9BZQkMBGd9IcUjtgdBdMBaRb -----END CERTIFICATE-----Generated at Tue Jul 1 13:43:47 2025 by rpki-client