$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: kCJ+kjM7gKppsLaKUSHPLxt/77K980A7+Lp2UkkeOV0= Subject key identifier: 43:94:D2:F7:FE:21:DE:A8:23:89:78:22:B6:A0:BD:C9:94:17:C8:46 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: C4 Signing time: Tue 01 Jul 2025 06:27:55 +0000 Manifest this update: Tue 01 Jul 2025 06:27:55 +0000 Manifest next update: Tue 08 Jul 2025 06:27:55 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: ZXX/UPXWZmkZuPHXsec+iU5g7SpeUV8gHkcgo5hbvms=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Jul 1 06:27:55 2025 GMT Not After : Jul 8 06:27:55 2025 GMT Subject: CN=68637feb-83c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:c2:99:e1:45:75:3d:1d:e9:94:92:18:88: 99:32:74:d3:c8:e5:c0:11:80:8b:eb:fa:7f:bd:c0: cc:68:d0:46:9d:77:0d:17:ad:36:b8:f1:fa:a0:32: 0a:c0:d0:35:50:53:e0:7b:95:cc:ff:89:77:04:31: fd:a9:0d:18:f1:1b:0e:2c:74:ca:f8:c1:7a:30:10: a8:f5:27:cb:6b:7a:b8:ed:08:ef:3a:bb:7b:a5:85: 93:f2:84:ef:87:6f:c2:67:21:a2:b1:53:64:9b:4b: 6a:3f:33:32:77:c0:37:45:ba:72:55:ca:4f:1b:8d: 25:4a:12:8a:b8:0a:05:ca:02:97:be:a3:2d:a3:26: aa:7a:95:2a:65:da:be:30:b2:2a:8a:bb:e2:a1:e0: 5c:a2:3c:3b:10:11:ad:be:cb:6f:e2:63:22:4d:2b: 82:ab:b1:9a:71:fb:66:b2:46:94:49:fb:a6:1c:47: 79:e7:85:f0:2a:c1:43:8f:9f:a3:4b:e5:a5:dd:f0: f8:cc:19:2f:ec:ee:00:de:9d:2c:ea:4d:d2:ad:7f: 99:ef:25:d2:8d:38:88:1c:b0:16:a9:84:88:2c:19: 36:8a:c5:0c:a4:0b:c5:8a:a5:cf:24:82:ce:c4:4e: 7b:64:85:d8:d4:f0:de:59:07:29:af:f6:07:d2:b9: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:D2:F7:FE:21:DE:A8:23:89:78:22:B6:A0:BD:C9:94:17:C8:46 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:bb:80:59:ee:7b:89:b4:a8:78:1a:7f:f4:2f:e2:6f:2e: 41:d0:cb:85:1a:ed:cb:19:fe:0a:c3:72:4a:ab:9c:2c:58:cd: da:29:1d:3c:2e:2e:d0:c5:b8:2a:d6:19:38:a9:45:08:1d:a8: a8:49:f4:74:7d:e1:63:0b:7e:54:b5:5c:53:6a:80:2b:cd:cd: fa:f3:0c:36:86:6e:43:e1:02:e0:9e:58:cb:d4:c2:5e:31:a8: 9d:dc:40:f0:08:01:21:9a:04:71:86:83:3a:f2:df:95:ea:d7: 0c:6e:a1:41:10:59:b1:39:af:0f:78:0c:70:71:ec:10:7a:e1: dd:68:f8:c2:78:6e:33:51:8b:b2:26:a8:98:61:0b:ae:47:57: 61:34:95:ff:c8:ea:1a:55:b6:42:40:bc:76:78:eb:c3:80:76: 20:67:2f:91:7a:13:a7:82:9e:eb:ec:1e:c3:fa:c9:0c:4b:32: ba:b7:7b:a5:a0:52:c7:e5:3c:f6:11:23:8a:d8:ca:24:42:01: df:fd:c5:1e:a8:6f:49:35:e8:2a:09:89:c9:a2:96:40:fc:46: a6:62:60:cd:78:c9:31:58:60:f4:ba:9d:c7:26:6e:de:d1:69: f6:eb:4a:d1:21:0a:69:9a:8f:42:53:b9:4e:8f:d9:86:89:07: 92:d7:f6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwNzAxMDYyNzU1WhcNMjUwNzA4MDYyNzU1WjAYMRYwFAYD VQQDEw02ODYzN2ZlYi04M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuejCmeFFdT0d6ZSSGIiZMnTTyOXAEYCL6/p/vcDMaNBGnXcNF602uPH6oDIK wNA1UFPge5XM/4l3BDH9qQ0Y8RsOLHTK+MF6MBCo9SfLa3q47QjvOrt7pYWT8oTv h2/CZyGisVNkm0tqPzMyd8A3RbpyVcpPG40lShKKuAoFygKXvqMtoyaqepUqZdq+ MLIqirvioeBcojw7EBGtvstv4mMiTSuCq7GacftmskaUSfumHEd554XwKsFDj5+j S+Wl3fD4zBkv7O4A3p0s6k3SrX+Z7yXSjTiIHLAWqYSILBk2isUMpAvFiqXPJILO xE57ZIXY1PDeWQcpr/YH0rncuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOU0vf+ Id6oI4l4IragvcmUF8hGMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVbuAWe57ibSoeBp/9C/iby5B0MuFGu3LGf4Kw3JKq5wsWM3aKR08 Li7Qxbgq1hk4qUUIHaioSfR0feFjC35UtVxTaoArzc368ww2hm5D4QLgnljL1MJe Maid3EDwCAEhmgRxhoM68t+V6tcMbqFBEFmxOa8PeAxwcewQeuHdaPjCeG4zUYuy JqiYYQuuR1dhNJX/yOoaVbZCQLx2eOvDgHYgZy+RehOngp7r7B7D+skMSzK6t3ul oFLH5Tz2ESOK2MokQgHf/cUeqG9JNegqCYnJopZA/EamYmDNeMkxWGD0up3HJm7e 0Wn260rRIQppmo9CU7lOj9mGiQeS1/Yx -----END CERTIFICATE-----Generated at Wed Jul 2 22:36:00 2025 by rpki-client