$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: ySbOLIGdx1pcHpsqIfpWSG/jDGaMOjXdeTbnvQa7RjM= Subject key identifier: 88:6F:37:9A:33:00:88:8F:D9:6C:CE:0E:7E:F2:0F:EC:EB:D5:6A:F1 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 012F Signing time: Sun 29 Jun 2025 03:37:07 +0000 Manifest this update: Sun 29 Jun 2025 03:37:06 +0000 Manifest next update: Sun 06 Jul 2025 03:37:06 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: 33NeHrlKgICsJ4DJXTnaELXMef/xKXEa/Z6Tnkrirk8=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: Mp31Dl4GGrwfX+s1p5DZGdrkWL4P3e5ufUEs+Tl9/MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: Jun 29 03:37:06 2025 GMT Not After : Jul 6 03:37:06 2025 GMT Subject: CN=6860b4e3-679c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:ed:bd:3d:35:25:2b:5c:41:45:72:f1:29: 40:ed:ac:18:87:9d:b5:56:8e:39:ff:b3:cb:a1:60: 02:71:76:e7:de:3d:09:25:b1:fb:20:26:1c:eb:27: 36:3d:f3:a2:89:3a:39:8c:d0:91:6f:e2:82:e3:f3: 67:9a:79:4f:c6:39:57:47:19:e8:62:ce:ee:b6:66: 1b:43:b5:fe:26:b4:67:f8:6e:8a:62:13:1a:01:77: bd:59:9d:e3:a0:3d:9a:53:7a:33:0f:85:2d:cb:d0: 88:52:e9:0b:8c:82:8d:5d:15:f5:a6:17:de:60:20: 8c:8f:6b:a9:ef:9a:b0:7c:1b:b8:d2:8d:22:26:0b: 5e:aa:4d:a6:3c:ab:d2:49:83:03:80:69:78:3e:8e: c5:77:04:24:8b:36:6e:ec:39:af:03:b3:a9:7a:3e: 3e:3c:dd:fb:5f:95:aa:f6:73:4b:79:07:15:4c:87: 0a:56:a0:0e:9a:32:46:37:23:5e:b8:fd:cb:00:ae: 22:4b:81:7e:7b:cc:97:bf:56:c1:16:95:80:e3:6c: 17:7f:74:c5:ae:40:99:77:a1:7d:ea:39:e1:a9:09: 94:83:1e:2d:b4:94:a5:8a:d4:eb:62:79:4d:92:bc: e7:de:02:e8:d8:91:aa:a2:a0:57:34:9c:f2:aa:53: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:37:9A:33:00:88:8F:D9:6C:CE:0E:7E:F2:0F:EC:EB:D5:6A:F1 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1b:1d:8e:0e:7e:db:9c:ca:c0:a5:8e:69:90:fe:49:e6:71: db:3c:6d:52:ed:38:6f:7f:34:e0:c2:52:f7:f5:cd:ca:4c:1f: 4e:5a:67:f9:44:99:8b:15:88:ff:8b:62:6a:d0:0f:78:60:ca: 96:88:a9:fd:42:14:4c:64:58:fa:a6:db:21:ab:c7:3d:f8:44: 64:6c:a3:cf:0f:08:10:a9:d7:49:10:62:91:ac:1a:ce:e7:18: 3c:cd:d0:5d:e0:ff:06:b8:de:1c:9e:03:84:9d:fd:ae:2b:7c: bd:a4:18:ce:a3:bf:ab:12:a2:e6:31:3b:fa:74:03:3d:16:87: c3:aa:0b:5c:52:cd:ff:a7:a2:20:5e:eb:b4:7f:eb:32:07:0a: ba:be:8e:b3:c0:29:58:a2:c2:9b:f4:88:09:ed:7e:02:b1:ed: 06:c7:3d:34:81:f5:8f:2e:6a:58:19:03:2d:3f:25:47:26:2c: ac:0e:72:71:ab:ff:08:a0:8a:1b:a4:ad:04:14:df:af:5f:d5: 68:f6:d2:13:f5:6a:80:50:ce:0d:3a:7e:b6:55:27:dd:92:e5: 36:7b:e6:6d:70:37:92:74:01:b4:01:4c:43:b1:98:b6:1a:60: bc:39:41:87:36:4d:ed:39:c2:a6:91:fb:52:50:b7:d2:50:02: d8:3c:5c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjUwNjI5MDMzNzA2WhcNMjUwNzA2MDMzNzA2WjAYMRYwFAYD VQQDEw02ODYwYjRlMy02NzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv/tvT01JStcQUVy8SlA7awYh521Vo45/7PLoWACcXbn3j0JJbH7ICYc6yc2 PfOiiTo5jNCRb+KC4/NnmnlPxjlXRxnoYs7utmYbQ7X+JrRn+G6KYhMaAXe9WZ3j oD2aU3ozD4Uty9CIUukLjIKNXRX1phfeYCCMj2up75qwfBu40o0iJgteqk2mPKvS SYMDgGl4Po7FdwQkizZu7DmvA7Opej4+PN37X5Wq9nNLeQcVTIcKVqAOmjJGNyNe uP3LAK4iS4F+e8yXv1bBFpWA42wXf3TFrkCZd6F96jnhqQmUgx4ttJSlitTrYnlN krzn3gLo2JGqoqBXNJzyqlN5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhvN5oz AIiP2WzODn7yD+zr1WrxMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmGx2ODn7bnMrApY5pkP5J5nHbPG1S7ThvfzTgwlL39c3KTB9OWmf5 RJmLFYj/i2Jq0A94YMqWiKn9QhRMZFj6ptshq8c9+ERkbKPPDwgQqddJEGKRrBrO 5xg8zdBd4P8GuN4cngOEnf2uK3y9pBjOo7+rEqLmMTv6dAM9FofDqgtcUs3/p6Ig Xuu0f+syBwq6vo6zwClYosKb9IgJ7X4Cse0Gxz00gfWPLmpYGQMtPyVHJiysDnJx q/8IoIobpK0EFN+vX9Vo9tIT9WqAUM4NOn62VSfdkuU2e+ZtcDeSdAG0AUxDsZi2 GmC8OUGHNk3tOcKmkftSULfSUALYPFw8 -----END CERTIFICATE-----Generated at Sun Jun 29 17:47:16 2025 by rpki-client