$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: T0FhKnVMMNbZ4BwekrWULgqR/wj5kezVMqSWFByD/3M= Subject key identifier: 58:61:B6:A1:58:FF:B0:E2:62:E9:FA:40:58:81:A3:D1:09:B0:F5:8D Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 0681 Signing time: Mon 30 Jun 2025 22:38:42 +0000 Manifest this update: Mon 30 Jun 2025 22:38:42 +0000 Manifest next update: Mon 07 Jul 2025 22:38:42 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: XVh6Inb1DoDV3GomtjRQjRSxRJm//c7fIJCDRaLrZIk=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Jun 30 22:38:42 2025 GMT Not After : Jul 7 22:38:42 2025 GMT Subject: CN=686311f2-4633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:a6:16:9d:c5:a5:77:68:3c:a7:69:e9:6f: 10:1b:24:68:28:4c:9f:30:34:44:b1:91:e7:bd:85: 04:b6:0f:e9:0f:ff:84:77:ff:2f:68:fd:28:65:5a: d7:6c:0c:b3:68:e5:e7:b5:11:7b:db:d1:92:95:cc: d7:78:14:86:9c:73:73:3b:3a:29:b7:d5:1b:81:fd: 19:25:fe:c1:c1:d8:1c:f8:90:f0:1c:99:04:3f:44: 09:50:20:63:77:04:88:42:4c:9d:59:84:90:99:08: 34:1a:95:25:82:28:d5:18:4f:d8:f6:72:ec:f9:b8: d2:c5:2a:8b:cc:85:66:b8:f0:d0:6d:44:18:8f:09: f5:a3:a7:ae:e3:82:e2:f6:e0:04:3c:f9:c2:92:3b: c4:61:7c:52:88:c7:cb:b9:79:fc:dc:44:5b:23:f1: 1f:9f:b8:dc:a0:47:61:8e:ab:d2:f3:eb:c9:4b:fb: 82:31:1f:e0:b4:55:19:23:a8:73:1f:a1:8a:89:7c: 00:ff:5f:a4:20:a8:7d:2c:a0:c5:45:57:3e:80:49: 64:0e:f7:5c:bc:4c:57:f0:fe:ea:e7:3a:21:ee:00: b8:e3:0e:b8:e8:d3:21:a9:32:2a:a2:94:d6:54:29: 0f:3e:1f:ed:39:94:a1:c3:cf:95:98:44:f0:bc:63: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:B6:A1:58:FF:B0:E2:62:E9:FA:40:58:81:A3:D1:09:B0:F5:8D X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b8:5f:35:7f:7b:7c:2c:6b:7b:49:d9:98:f6:2d:24:dd:74: 26:83:88:7e:6a:ab:3b:27:c0:9e:25:94:ca:2c:68:34:e8:dc: 1f:81:c9:94:fd:fc:75:6a:32:34:d8:bb:ba:42:ad:a1:2f:74: 94:ab:46:ff:9e:db:5b:91:dc:17:a7:01:f3:94:db:2d:b1:ff: 7b:fe:9f:bb:a8:9a:d9:71:70:03:b5:fa:f7:53:d5:28:c9:78: ce:9e:cc:57:91:8c:15:ec:98:72:34:6f:f9:20:29:48:31:ab: 15:28:d6:cf:96:eb:1b:48:48:fa:95:c7:b0:72:d1:45:cc:99: 2f:19:a6:5c:09:4f:4b:c9:d9:4f:e7:c8:82:fe:86:51:2a:93: ab:26:85:3c:10:3a:b8:99:b5:59:ea:97:a6:24:34:00:9b:39: 6f:d2:46:be:ec:7c:90:a9:b1:3f:75:07:da:2e:5f:f1:a1:0d: 46:d9:d9:41:46:0e:90:4f:af:da:3b:8a:91:a7:ea:df:fe:ee: 98:9c:75:1b:6f:2e:91:4b:c6:06:c8:d0:75:7b:fa:22:3e:47: cc:96:0c:ae:3e:d5:64:24:45:53:26:e7:65:63:2a:59:eb:5a: 5c:3c:64:b7:8f:94:41:04:e1:35:59:fb:e3:3b:73:a5:b2:a1: 1a:42:66:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUwNjMwMjIzODQyWhcNMjUwNzA3MjIzODQyWjAYMRYwFAYD VQQDEw02ODYzMTFmMi00NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YKmFp3FpXdoPKdp6W8QGyRoKEyfMDREsZHnvYUEtg/pD/+Ed/8vaP0oZVrX bAyzaOXntRF729GSlczXeBSGnHNzOzopt9Ubgf0ZJf7Bwdgc+JDwHJkEP0QJUCBj dwSIQkydWYSQmQg0GpUlgijVGE/Y9nLs+bjSxSqLzIVmuPDQbUQYjwn1o6eu44Li 9uAEPPnCkjvEYXxSiMfLuXn83ERbI/Efn7jcoEdhjqvS8+vJS/uCMR/gtFUZI6hz H6GKiXwA/1+kIKh9LKDFRVc+gElkDvdcvExX8P7q5zoh7gC44w646NMhqTIqopTW VCkPPh/tOZShw8+VmETwvGNHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhhtqFY /7DiYun6QFiBo9EJsPWNMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAduF81f3t8LGt7SdmY9i0k3XQmg4h+aqs7J8CeJZTKLGg06NwfgcmU /fx1ajI02Lu6Qq2hL3SUq0b/nttbkdwXpwHzlNstsf97/p+7qJrZcXADtfr3U9Uo yXjOnsxXkYwV7JhyNG/5IClIMasVKNbPlusbSEj6lcewctFFzJkvGaZcCU9LydlP 58iC/oZRKpOrJoU8EDq4mbVZ6pemJDQAmzlv0ka+7HyQqbE/dQfaLl/xoQ1G2dlB Rg6QT6/aO4qRp+rf/u6YnHUbby6RS8YGyNB1e/oiPkfMlgyuPtVkJEVTJudlYypZ 61pcPGS3j5RBBOE1WfvjO3OlsqEaQmaV -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:04 2025 by rpki-client