$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json) Hash identifier: yNn5mZvdWcdhJHQCNDuRYiZtvlKGBQbGxrkVmUNoxjY= Subject key identifier: D7:FE:8B:77:BC:24:C0:36:9F:2C:09:B5:85:34:68:CD:28:20:72:F7 Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft Manifest number: 0666 Signing time: Wed 02 Jul 2025 22:47:13 +0000 Manifest this update: Wed 02 Jul 2025 22:47:12 +0000 Manifest next update: Wed 09 Jul 2025 22:47:12 +0000 Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: ESKhsw5nKz0TP9uFep16cUv33IcHCY8ajaVZp/+AJ60=) 2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=) 3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Jul 2 22:47:12 2025 GMT Not After : Jul 9 22:47:12 2025 GMT Subject: CN=6865b6f0-2197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:60:65:d1:dc:e7:bf:5f:e7:f7:06:52:9d: 5d:f5:06:e4:78:b6:94:a9:5f:a0:74:ce:b9:3f:34: fd:cc:7b:95:9d:5c:5a:ab:84:4f:ac:65:04:e8:76: a6:2e:f9:41:92:e1:6f:84:c3:00:2a:d9:dd:4f:dd: 79:e1:47:7d:3f:0f:4e:a3:21:8d:95:73:05:e8:a9: 6c:d0:64:7e:ca:fc:d9:27:8c:98:31:dd:51:25:43: e9:be:7a:76:2f:c3:3c:ed:7b:cc:39:1d:21:4f:67: c2:e2:c3:f6:ed:33:f0:73:fd:e8:24:66:93:f5:d3: 9e:23:4a:cf:7b:66:40:6b:6c:41:5e:87:2b:b0:e0: 33:2a:99:36:ef:d7:88:ea:a1:3e:7a:2b:e8:10:68: bf:02:7b:8b:90:f0:e9:82:29:25:bc:a1:26:bd:e7: 4f:35:31:01:3a:fb:d0:ed:26:be:84:83:cf:27:0e: c6:46:ce:aa:13:85:4e:5c:61:7b:fe:47:be:ef:68: 7a:68:b3:ff:92:88:d5:5d:78:cf:f7:e2:76:36:27: be:7e:c5:e2:b6:68:55:36:5d:d3:29:72:45:ce:bc: f5:bf:0b:45:c2:c8:a5:78:e3:e8:2a:9a:a3:b6:4c: 6e:83:21:96:96:e9:7f:ca:53:30:ce:8b:48:1a:8b: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FE:8B:77:BC:24:C0:36:9F:2C:09:B5:85:34:68:CD:28:20:72:F7 X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5a:40:2c:aa:4b:59:47:bb:e3:c7:5c:c0:bf:b4:0f:19:71: c1:b4:99:a2:f0:c0:6c:f0:df:16:00:99:35:0f:70:58:dc:28: 13:39:41:4f:ae:c9:ba:0c:e1:56:b6:df:bb:84:30:44:10:67: af:9c:81:67:d4:ee:6e:98:4b:ef:81:44:d2:4e:e9:ff:69:aa: f6:f8:1c:8b:76:c9:86:fb:be:86:1d:ff:fa:d2:67:14:e8:90: 16:37:f9:b1:87:63:17:3c:54:3f:d8:b3:30:f6:01:77:3d:16: 6e:dc:9d:75:ce:c6:44:ae:74:af:2f:67:25:99:55:83:f9:92: 09:17:48:ae:77:5f:55:1b:7e:2e:7b:10:a7:df:05:59:82:33: 7e:07:a7:4e:e7:7d:4a:30:fe:57:1a:52:c9:50:16:9a:3b:cf: 6e:26:e2:18:87:df:de:a7:1f:1a:04:60:19:0d:3e:d2:7b:2d: eb:25:16:28:44:a8:ff:a5:78:82:9f:5f:b5:8e:2a:c2:97:02: 14:e3:b4:04:95:73:ea:e4:02:4c:c7:e4:7c:82:21:ad:a4:0d: df:3a:d9:be:80:06:51:11:c3:e1:1a:e3:5a:c5:e9:c1:e8:ed: ef:f6:4b:96:a3:4d:0b:3b:41:27:b6:da:7d:fa:5a:dc:80:96: f2:5c:ae:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUwNzAyMjI0NzEyWhcNMjUwNzA5MjI0NzEyWjAYMRYwFAYD VQQDEw02ODY1YjZmMC0yMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqNgZdHc579f5/cGUp1d9QbkeLaUqV+gdM65PzT9zHuVnVxaq4RPrGUE6Ham LvlBkuFvhMMAKtndT9154Ud9Pw9OoyGNlXMF6Kls0GR+yvzZJ4yYMd1RJUPpvnp2 L8M87XvMOR0hT2fC4sP27TPwc/3oJGaT9dOeI0rPe2ZAa2xBXocrsOAzKpk279eI 6qE+eivoEGi/AnuLkPDpgiklvKEmvedPNTEBOvvQ7Sa+hIPPJw7GRs6qE4VOXGF7 /ke+72h6aLP/kojVXXjP9+J2Nie+fsXitmhVNl3TKXJFzrz1vwtFwsileOPoKpqj tkxugyGWlul/ylMwzotIGotQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf+i3e8 JMA2nywJtYU0aM0oIHL3MB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEWkAsqktZR7vjx1zAv7QPGXHBtJmi8MBs8N8WAJk1D3BY3CgTOUFP rsm6DOFWtt+7hDBEEGevnIFn1O5umEvvgUTSTun/aar2+ByLdsmG+76GHf/60mcU 6JAWN/mxh2MXPFQ/2LMw9gF3PRZu3J11zsZErnSvL2clmVWD+ZIJF0iud19VG34u exCn3wVZgjN+B6dO531KMP5XGlLJUBaaO89uJuIYh9/epx8aBGAZDT7Sey3rJRYo RKj/pXiCn1+1jirClwIU47QElXPq5AJMx+R8giGtpA3fOtm+gAZREcPhGuNaxenB 6O3v9kuWo00LO0Enttp9+lrcgJbyXK4+ -----END CERTIFICATE-----Generated at Thu Jul 3 17:39:25 2025 by rpki-client