$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: ZheHy3f1/I/ZiaERIoo0qjxQ39fC027Q8BWDDKFntXA= Subject key identifier: 62:15:A2:7A:70:7C:FF:6A:5B:9E:7C:F6:0B:9E:2F:D8:97:D1:B8:DC Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 0147 Signing time: Tue 01 Jul 2025 04:44:22 +0000 Manifest this update: Tue 01 Jul 2025 04:44:22 +0000 Manifest next update: Tue 08 Jul 2025 04:44:22 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: CuhLPirOtBUdPE1ILRqE5xLjnuk7/HYmlb7EyizCpHc=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: K2l/EtZxWeLVYqj5ycNq5EmQOfjL5aHh+ijS2CAjoJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Jul 1 04:44:22 2025 GMT Not After : Jul 8 04:44:22 2025 GMT Subject: CN=686367a6-b140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:24:0b:54:6e:e2:9c:20:49:b6:d3:43:9b: e1:db:2a:da:f2:5e:ac:5a:a3:30:4c:d8:03:bf:b2: d7:ba:85:5d:c7:35:a0:6c:ff:52:52:e2:7b:7c:9c: 63:08:c1:28:55:75:2f:50:42:70:52:b4:ec:6d:46: d4:3a:0e:49:4a:be:c0:0e:4f:d4:c6:a7:41:6a:08: 1b:25:4e:4d:3f:15:d5:3e:da:4f:2b:17:48:3a:b1: 06:42:93:04:ad:ef:35:68:26:58:fb:6b:fc:71:f3: 3d:d9:c6:41:b2:0c:c7:0b:cf:c4:99:27:5b:87:3e: ea:c6:a6:ee:3e:65:1b:6f:e1:9d:f1:07:94:e0:1b: cc:a2:10:ce:eb:15:d8:df:37:bc:1b:a4:8f:67:59: 72:bc:b3:da:be:e5:cc:37:20:3e:c9:f8:74:c3:8e: 58:f2:77:40:a2:8f:e3:67:06:9e:49:22:a2:d4:94: f0:43:24:b9:09:67:07:61:b4:dc:a1:8a:6b:e7:93: 4e:13:c4:99:e5:7c:9f:f2:0d:a7:59:7f:9f:79:33: f8:04:61:1f:83:5a:44:b7:f7:ac:af:f5:4e:0a:0b: 81:98:49:0c:7c:d7:2c:40:51:04:68:52:ce:c9:67: 91:55:56:ea:de:16:fb:dc:4e:c4:c6:a7:c1:48:6a: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:15:A2:7A:70:7C:FF:6A:5B:9E:7C:F6:0B:9E:2F:D8:97:D1:B8:DC X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:15:07:74:ee:73:99:52:c3:c6:59:12:f4:a4:bd:e2:4b:bd: 0b:c3:78:06:09:c7:61:fc:c4:80:e6:5b:ae:0b:0a:c8:9f:10: f1:95:7a:8e:b3:4d:47:39:79:a4:05:ec:c8:56:00:75:1d:d5: 2d:ae:ab:96:a7:39:d2:5a:02:fb:84:28:5a:12:0e:12:ce:16: d4:9f:95:d2:3b:8f:c3:72:17:ca:40:1b:4b:56:bb:c8:89:51: 0d:fa:50:eb:37:d1:4c:2a:e1:c3:15:d7:b2:b7:2e:4d:c7:69: 4f:2d:5f:4f:52:47:9b:26:1e:aa:b7:5f:85:92:6e:5e:09:0c: 36:f9:30:73:59:bf:98:1b:29:32:b0:b9:b9:51:7c:bf:f1:67: 1c:34:f5:57:c2:9f:4d:fe:ae:09:8e:1a:09:b4:28:ef:dc:26: 8e:ba:c5:c7:e3:c7:66:41:c5:ae:99:09:2d:10:57:38:d1:96: 58:13:5f:02:a6:08:f3:a3:9b:06:6b:bd:aa:99:68:c6:c6:51: 13:99:48:22:27:c0:70:1c:72:0c:97:ad:58:3a:e1:08:bc:6a: cd:24:83:a9:57:3c:70:ab:0e:0b:31:55:13:c6:9d:97:3d:b3: f5:da:73:e3:5c:e6:18:38:25:76:d7:9b:58:ab:e8:d3:88:03: c4:1d:2b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwNzAxMDQ0NDIyWhcNMjUwNzA4MDQ0NDIyWjAYMRYwFAYD VQQDEw02ODYzNjdhNi1iMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy58kC1Ru4pwgSbbTQ5vh2yra8l6sWqMwTNgDv7LXuoVdxzWgbP9SUuJ7fJxj CMEoVXUvUEJwUrTsbUbUOg5JSr7ADk/UxqdBaggbJU5NPxXVPtpPKxdIOrEGQpME re81aCZY+2v8cfM92cZBsgzHC8/EmSdbhz7qxqbuPmUbb+Gd8QeU4BvMohDO6xXY 3ze8G6SPZ1lyvLPavuXMNyA+yfh0w45Y8ndAoo/jZwaeSSKi1JTwQyS5CWcHYbTc oYpr55NOE8SZ5Xyf8g2nWX+feTP4BGEfg1pEt/esr/VOCguBmEkMfNcsQFEEaFLO yWeRVVbq3hb73E7ExqfBSGpj2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIVonpw fP9qW5589gueL9iX0bjcMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6FQd07nOZUsPGWRL0pL3iS70Lw3gGCcdh/MSA5luuCwrInxDxlXqO s01HOXmkBezIVgB1HdUtrquWpznSWgL7hChaEg4SzhbUn5XSO4/DchfKQBtLVrvI iVEN+lDrN9FMKuHDFdeyty5Nx2lPLV9PUkebJh6qt1+Fkm5eCQw2+TBzWb+YGyky sLm5UXy/8WccNPVXwp9N/q4JjhoJtCjv3CaOusXH48dmQcWumQktEFc40ZZYE18C pgjzo5sGa72qmWjGxlETmUgiJ8BwHHIMl61YOuEIvGrNJIOpVzxwqw4LMVUTxp2X PbP12nPjXOYYOCV215tYq+jTiAPEHSuW -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:13 2025 by rpki-client