$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: QBnfdjcqG6ZqkadOpqqhNcRpIwTyMacu/HN4CY9VVqs= Subject key identifier: 2B:03:EB:25:9B:F0:1F:1F:94:16:25:CA:0A:31:9E:F6:B2:22:5B:CC Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 03A4 Signing time: Tue 01 Jul 2025 01:20:10 +0000 Manifest this update: Tue 01 Jul 2025 01:20:10 +0000 Manifest next update: Tue 08 Jul 2025 01:20:10 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: OU7k1h54NOjb49z18eVztKPa4dszXMDrrYC0Vhs0A1E=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: Jul 1 01:20:10 2025 GMT Not After : Jul 8 01:20:10 2025 GMT Subject: CN=686337ca-0885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:32:55:b8:f1:54:7e:5d:93:72:36:d4:f6: ef:c5:0d:34:86:aa:01:8a:44:61:c0:82:03:c7:34: 44:a7:e4:ac:be:bd:3f:93:a2:34:f3:ce:48:a3:1a: e6:2b:fd:fd:4c:ef:5e:fa:dc:b6:31:14:50:e8:6e: b5:bc:86:7b:36:b8:49:58:f1:35:99:30:95:e5:46: 20:73:6d:92:c6:2c:26:20:75:e4:7e:e7:75:eb:39: 9b:b4:43:e7:97:c7:8f:1c:75:73:91:b6:b3:1a:29: 74:1f:f6:37:ec:ba:8b:ba:6a:55:46:62:18:e9:91: d0:fc:90:2a:c0:44:82:bf:de:66:c7:ec:c7:93:9c: 67:d9:a1:5f:f9:3b:5e:0a:07:c6:0b:0c:dc:41:54: d6:a3:9e:8c:61:e4:30:b4:39:fc:4e:61:6d:c6:50: fb:ce:f8:23:6a:28:bf:87:0a:46:5e:e9:96:82:5b: 4f:c9:05:f1:62:d9:31:5e:7e:1e:30:73:e2:c4:76: 8e:70:32:9f:85:10:5f:43:85:9b:18:72:21:82:6e: a7:93:d7:62:a0:68:25:5e:8c:e5:32:3a:8f:45:98: 7e:25:0f:95:f3:75:ec:56:ae:69:00:d4:ad:cf:e5: a3:7f:13:a6:d7:0b:12:73:76:7f:03:cd:ba:41:0a: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:03:EB:25:9B:F0:1F:1F:94:16:25:CA:0A:31:9E:F6:B2:22:5B:CC X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:dc:89:9d:93:07:0b:7a:36:e8:93:ef:10:f5:ec:3c:c4:9b: b3:82:a4:69:af:5a:1f:3c:ea:a4:30:47:50:9d:c2:83:8d:91: f7:19:e5:78:c4:5e:eb:a0:15:b9:10:d9:25:60:77:02:a6:a8: 4f:01:1c:28:a0:46:e4:a0:63:4a:d5:fb:4e:03:15:bc:f1:db: c5:ff:97:87:88:2c:a6:40:7a:8c:0d:6f:ba:d2:2e:5f:06:23: b6:f9:02:83:77:e5:83:c3:26:da:1c:83:54:71:ca:1f:d1:33: 02:3c:2e:ee:6e:af:86:b4:f5:6e:79:51:f2:45:db:88:51:db: 0b:4e:16:9e:4d:f2:08:04:15:15:51:47:fd:21:47:94:df:5b: d6:1d:b7:30:91:b7:6e:a6:8a:17:d6:60:dc:f4:60:fb:88:27: 0d:3e:e2:48:d8:74:9d:29:ac:3f:0e:4d:26:6d:c1:69:23:83: b3:30:6d:a8:c5:4f:14:32:02:cb:0c:70:4e:e6:b2:fc:44:c5: 82:c2:79:9e:e3:28:d6:45:d3:76:2d:39:e0:a0:b9:e8:cd:e4: da:f2:df:67:9a:f9:63:e7:0c:87:dd:ca:d4:1d:d5:14:4c:22: 28:3d:a6:ea:52:3a:b8:d4:e1:3b:c3:e3:7c:9b:43:17:b9:71: 4d:e3:81:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjUwNzAxMDEyMDEwWhcNMjUwNzA4MDEyMDEwWjAYMRYwFAYD VQQDEw02ODYzMzdjYS0wODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0joyVbjxVH5dk3I21PbvxQ00hqoBikRhwIIDxzREp+Ssvr0/k6I0885Ioxrm K/39TO9e+ty2MRRQ6G61vIZ7NrhJWPE1mTCV5UYgc22SxiwmIHXkfud16zmbtEPn l8ePHHVzkbazGil0H/Y37LqLumpVRmIY6ZHQ/JAqwESCv95mx+zHk5xn2aFf+Tte CgfGCwzcQVTWo56MYeQwtDn8TmFtxlD7zvgjaii/hwpGXumWgltPyQXxYtkxXn4e MHPixHaOcDKfhRBfQ4WbGHIhgm6nk9dioGglXozlMjqPRZh+JQ+V83XsVq5pANSt z+WjfxOm1wsSc3Z/A826QQq7WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsD6yWb 8B8flBYlygoxnvayIlvMMB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA3ImdkwcLejbok+8Q9ew8xJuzgqRpr1ofPOqkMEdQncKDjZH3GeV4 xF7roBW5ENklYHcCpqhPARwooEbkoGNK1ftOAxW88dvF/5eHiCymQHqMDW+60i5f BiO2+QKDd+WDwybaHINUccof0TMCPC7ubq+GtPVueVHyRduIUdsLThaeTfIIBBUV UUf9IUeU31vWHbcwkbdupooX1mDc9GD7iCcNPuJI2HSdKaw/Dk0mbcFpI4OzMG2o xU8UMgLLDHBO5rL8RMWCwnme4yjWRdN2LTngoLnozeTa8t9nmvlj5wyH3crUHdUU TCIoPabqUjq41OE7w+N8m0MXuXFN44FD -----END CERTIFICATE-----Generated at Wed Jul 2 12:25:04 2025 by rpki-client