$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: bW5qThPsqSC0wrVcuUC5zuaNhGy7oC6vKv9Ja9zv0Ao= Subject key identifier: 26:D2:DF:B7:92:57:5F:2E:C8:0A:19:79:0B:39:B0:B6:EA:86:0C:AA Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34C7 Signing time: Wed 02 Jul 2025 14:24:42 +0000 Manifest this update: Wed 02 Jul 2025 14:24:41 +0000 Manifest next update: Wed 09 Jul 2025 14:24:41 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: Aui9ovq02AdrjrMXzCodcqR4BFxifLPEjWdomK5ivlw=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13607 (0x3527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Jul 2 14:24:41 2025 GMT Not After : Jul 9 14:24:41 2025 GMT Subject: CN=68654129-d2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:b5:bc:bf:cf:71:c2:95:c0:26:05:5a:3f: 9a:d6:a5:65:d0:bf:23:b5:3f:41:5a:8b:a1:73:ea: 9c:c0:96:51:45:35:5b:e1:5b:36:d3:4b:a0:7c:20: 14:d0:2a:dc:23:1a:69:27:10:3b:1f:c7:05:a4:90: 5c:ef:c7:f2:c1:11:ee:71:98:a0:25:c9:5d:8b:95: 10:f0:2d:99:fc:93:89:90:9f:33:53:43:6a:a7:6c: 0f:21:a9:3f:a8:8e:58:5f:02:31:f8:ae:b4:48:f0: 03:aa:b9:5d:9a:96:e9:9c:ab:74:c8:4a:f1:53:6a: 22:b2:19:06:ad:57:77:87:95:e5:1a:ee:bc:b7:6c: d0:c8:fb:d8:cb:23:72:e8:8d:46:4a:e7:2e:94:36: 36:a1:72:22:33:2f:b5:76:5c:d3:bd:0c:39:34:b0: b7:19:08:b4:29:00:3a:f7:03:15:58:ee:9c:0f:9e: 12:1b:57:15:8c:c1:22:2a:4e:87:c3:48:15:4c:33: a8:12:c5:f2:85:fd:f6:5d:f1:23:1b:66:8a:5b:2f: 1d:92:6e:90:49:98:31:65:85:99:52:3f:33:96:ca: 25:8c:20:9e:99:54:37:10:2c:50:cf:59:af:2a:2e: d0:62:25:af:e7:e6:8d:0f:1e:94:0b:a4:c4:3a:53: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:DF:B7:92:57:5F:2E:C8:0A:19:79:0B:39:B0:B6:EA:86:0C:AA X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fd:75:3d:33:23:c6:cc:87:76:5f:45:6b:d8:83:40:53:51: ab:d4:28:79:b1:08:d1:63:f6:9e:ed:b8:f2:1a:55:08:3c:09: 8f:df:9a:8e:dc:0e:d9:8f:44:8f:b6:5e:72:d0:7a:89:f8:b8: 00:a6:bb:17:fa:69:35:7f:42:4d:7d:16:41:11:3d:d1:48:5f: f5:10:a8:0e:e1:c3:76:ac:ea:bc:ed:e4:89:84:ce:2b:a2:df: b3:ac:2a:4b:9e:1e:41:47:3f:58:3a:43:aa:13:68:a9:10:00: 52:25:de:98:f3:87:81:55:23:e2:80:02:1e:cb:5c:83:5e:2c: b9:de:cb:02:81:59:da:18:58:a1:ba:26:ac:7d:c3:47:37:b1: 06:a7:0d:40:a3:3a:42:dd:3a:75:f0:22:09:87:1d:71:02:40: 5d:b9:9c:b8:c0:b7:39:60:7a:10:cc:71:58:f6:36:45:b5:84: 07:67:62:ff:19:b0:cf:86:52:e4:c2:cd:53:b6:d7:fd:33:0b: a7:42:73:6d:ef:df:79:de:61:b6:f4:a7:ef:31:a0:1b:5e:ad: 75:73:38:23:fc:97:ff:49:c7:60:ee:89:31:3a:f8:5d:c4:03: 09:72:28:71:a2:8c:ed:90:2e:ae:68:77:15:07:87:87:b3:c5: 58:ef:0c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNzAyMTQyNDQxWhcNMjUwNzA5MTQyNDQxWjAYMRYwFAYD VQQDEw02ODY1NDEyOS1kMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApku1vL/PccKVwCYFWj+a1qVl0L8jtT9BWouhc+qcwJZRRTVb4Vs200ugfCAU 0CrcIxppJxA7H8cFpJBc78fywRHucZigJcldi5UQ8C2Z/JOJkJ8zU0Nqp2wPIak/ qI5YXwIx+K60SPADqrldmpbpnKt0yErxU2oishkGrVd3h5XlGu68t2zQyPvYyyNy 6I1GSuculDY2oXIiMy+1dlzTvQw5NLC3GQi0KQA69wMVWO6cD54SG1cVjMEiKk6H w0gVTDOoEsXyhf32XfEjG2aKWy8dkm6QSZgxZYWZUj8zlsoljCCemVQ3ECxQz1mv Ki7QYiWv5+aNDx6UC6TEOlPVvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbS37eS V18uyAoZeQs5sLbqhgyqMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL/XU9MyPGzId2X0Vr2INAU1Gr1Ch5sQjRY/ae7bjyGlUIPAmP35qO 3A7Zj0SPtl5y0HqJ+LgAprsX+mk1f0JNfRZBET3RSF/1EKgO4cN2rOq87eSJhM4r ot+zrCpLnh5BRz9YOkOqE2ipEABSJd6Y84eBVSPigAIey1yDXiy53ssCgVnaGFih uiasfcNHN7EGpw1AozpC3Tp18CIJhx1xAkBduZy4wLc5YHoQzHFY9jZFtYQHZ2L/ GbDPhlLkws1Tttf9MwunQnNt79953mG29KfvMaAbXq11czgj/Jf/Scdg7okxOvhd xAMJcihxooztkC6uaHcVB4eHs8VY7wyc -----END CERTIFICATE-----Generated at Thu Jul 3 05:53:08 2025 by rpki-client