$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: 2GhehFYKNfVFxv1vpoIvPpKci0FR4IqIswpeUx5UV0M= Subject key identifier: 60:0D:CE:B2:E5:63:23:47:30:0B:58:1F:DE:1D:71:95:C4:93:A3:C5 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0BA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0B7C Signing time: Mon 30 Jun 2025 19:14:38 +0000 Manifest this update: Mon 30 Jun 2025 19:14:37 +0000 Manifest next update: Mon 07 Jul 2025 19:14:37 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: mFdUpRyP/7xkBSY/TDPxiCXPQM9GJBTqyrR6uHK8Y1I=) 2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: tyjFJevU8AODc6eNF2UQBkVwZ0moxe8IcDHkpfRnepA=) 3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: 2Y1qjCmLTaBuW+PY4V12Zh62AUY0iuAkYOwDBibrsjY=) 4: D9173AE459E811ED85614349C4F9AE02.roa (hash: 1x/xZd5ESf0eokaSQgyIvd0x7KIP8tNAt27myAiJemw=) 5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: ToUAACqSoKf4DVOKi8qBNbQLxDQKu5PGsZOisylfuaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Jun 30 19:14:37 2025 GMT Not After : Jul 7 19:14:37 2025 GMT Subject: CN=6862e21d-6266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:e6:f4:98:1e:a0:16:56:4d:6b:57:1c:4d: 9c:33:eb:18:28:0e:07:09:2a:e9:2c:1a:b4:8f:55: 8a:29:0f:16:75:ee:74:29:ae:7a:95:f3:16:ac:e4: 10:57:18:35:0a:49:b3:df:c6:6d:2a:ad:07:5c:1b: a5:31:66:1e:9b:a3:68:2d:b4:66:bd:99:40:44:2d: f7:63:8a:6a:23:20:67:9e:b8:0f:1f:01:31:d6:c0: 01:b6:5e:55:17:b4:fd:51:83:3d:fd:75:fd:42:53: 81:95:ba:42:2c:e5:73:79:af:88:33:b5:03:fe:34: 71:11:65:96:5d:a6:24:26:d1:59:af:4b:aa:60:7f: 84:c6:9a:df:ce:ef:85:42:ea:65:01:b8:31:f7:38: 35:3f:59:f1:94:74:06:c5:4a:10:97:1d:8d:f3:4a: 1d:7a:a4:ac:f4:b2:5d:8f:92:de:3f:50:63:00:5d: c5:2a:1e:93:ce:81:f8:aa:bd:1e:6c:7e:97:7f:fc: e2:73:b8:6e:64:2d:d0:10:e4:f8:f6:36:be:cd:ca: 23:48:4a:2b:e6:bc:8f:f3:c7:ff:fd:a8:32:9c:c6: b1:6f:3e:c0:37:97:4b:e8:c8:e3:b0:94:d4:43:3f: 94:c9:ea:30:d9:36:d0:63:bf:e5:4b:c9:2d:3f:23: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0D:CE:B2:E5:63:23:47:30:0B:58:1F:DE:1D:71:95:C4:93:A3:C5 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:34:7a:c4:7a:04:99:1b:a2:d8:7a:65:e9:b0:43:3b:f7: d1:ae:9e:41:e2:41:f6:2b:c4:30:37:a0:fb:c7:37:80:0d:1b: 48:1e:1b:14:2b:ff:3c:04:23:ac:ca:87:81:8e:60:05:0e:f8: 5b:a4:83:80:9d:2c:4a:52:66:ea:12:c3:76:18:79:26:22:2c: a6:7d:71:fa:33:c6:56:e4:d8:ee:d2:27:15:33:52:9c:c2:68: 2c:57:c0:e1:a9:11:29:c5:45:d3:d0:0a:c2:1d:ea:d0:25:b5: cf:46:2b:01:f9:a2:96:27:4d:68:d9:2c:a3:4c:e7:29:aa:61: 33:2c:0d:ca:6c:16:5e:1f:04:57:c3:28:bd:3e:47:79:b3:98: 48:05:f0:a0:e0:37:31:9b:f9:f6:2e:e5:f0:6d:87:6f:06:63: 71:46:8c:52:ef:36:e3:4f:a6:53:0f:9c:cb:35:52:20:af:3c: 0e:35:00:a8:43:77:9a:48:3b:a0:f4:a6:e6:cd:16:3c:88:ff: c7:cc:fe:60:55:f6:17:67:6e:13:1a:a1:19:22:82:b9:93:f6: a5:a6:05:1d:27:f0:a1:10:15:2b:55:3c:ae:65:82:ce:c8:e1: 07:ea:b2:93:6a:38:b1:43:41:f1:f0:16:0e:7e:a4:4b:55:50: be:60:13:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUwNjMwMTkxNDM3WhcNMjUwNzA3MTkxNDM3WjAYMRYwFAYD VQQDEw02ODYyZTIxZC02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrDm9JgeoBZWTWtXHE2cM+sYKA4HCSrpLBq0j1WKKQ8Wde50Ka56lfMWrOQQ Vxg1Ckmz38ZtKq0HXBulMWYem6NoLbRmvZlARC33Y4pqIyBnnrgPHwEx1sABtl5V F7T9UYM9/XX9QlOBlbpCLOVzea+IM7UD/jRxEWWWXaYkJtFZr0uqYH+Exprfzu+F QuplAbgx9zg1P1nxlHQGxUoQlx2N80odeqSs9LJdj5LeP1BjAF3FKh6TzoH4qr0e bH6Xf/zic7huZC3QEOT49ja+zcojSEor5ryP88f//agynMaxbz7AN5dL6MjjsJTU Qz+Uyeow2TbQY7/lS8ktPyOsLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGANzrLl YyNHMAtYH94dcZXEk6PFMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFZjR6xHoEmRui2Hpl6bBDO/fRrp5B4kH2K8QwN6D7xzeADRtIHhsU K/88BCOsyoeBjmAFDvhbpIOAnSxKUmbqEsN2GHkmIiymfXH6M8ZW5Nju0icVM1Kc wmgsV8DhqREpxUXT0ArCHerQJbXPRisB+aKWJ01o2SyjTOcpqmEzLA3KbBZeHwRX wyi9Pkd5s5hIBfCg4Dcxm/n2LuXwbYdvBmNxRoxS7zbjT6ZTD5zLNVIgrzwONQCo Q3eaSDug9KbmzRY8iP/HzP5gVfYXZ24TGqEZIoK5k/alpgUdJ/ChEBUrVTyuZYLO yOEH6rKTajixQ0Hx8BYOfqRLVVC+YBOV -----END CERTIFICATE-----Generated at Wed Jul 2 19:52:44 2025 by rpki-client