$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: GysJagDjjXwBBcT7RCJlF/M2kn7S7S14QY3vyx01V+8= Subject key identifier: 74:D0:D9:62:ED:99:E4:3B:6A:B9:92:37:FA:FB:09:C5:BD:A9:D6:5D Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 62 Signing time: Thu 03 Jul 2025 07:16:09 +0000 Manifest this update: Thu 03 Jul 2025 07:16:09 +0000 Manifest next update: Thu 10 Jul 2025 07:16:09 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: yAZc7OueKV3yxtX8qtIV+9GqCcFZ5JWHAZnTHTVK7PE=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Jul 3 07:16:09 2025 GMT Not After : Jul 10 07:16:09 2025 GMT Subject: CN=68662e39-39d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:e4:f8:17:5b:4d:ac:3a:61:c7:18:e7:7d: 23:dc:c9:a2:78:56:46:c7:60:95:8a:9b:90:94:4b: 60:ae:37:98:c4:13:87:93:33:0b:9b:bb:04:f4:50: 5d:a8:20:96:26:5b:ba:72:f9:91:c6:36:ec:2b:f2: 24:eb:23:1b:75:0f:f3:53:6f:c6:a8:99:ce:1e:78: 0a:ff:0c:5b:b2:61:92:3c:fe:06:60:98:04:06:65: 97:14:c6:f7:da:be:7e:28:cb:63:92:5f:78:7c:42: 0c:48:14:18:06:c9:ec:10:db:cb:b7:84:b4:bb:30: 0f:c4:b3:b7:e9:11:bc:74:c7:01:f1:2d:53:57:27: 4c:5e:e1:1a:33:90:b7:ef:5c:8e:35:ca:c1:75:c0: fe:e7:5a:79:29:36:f6:1e:b2:bb:ac:40:51:dc:b5: b1:d8:06:d2:6a:dd:b8:79:72:ff:7e:56:ad:86:5c: a8:dc:44:1c:48:d5:fc:30:71:1b:9a:80:b0:20:10: 6d:4f:d9:6c:eb:a4:61:ca:e7:e1:0d:49:32:63:82: 35:94:49:f9:8d:b3:e1:bd:be:5c:f0:ad:90:fc:85: 25:e3:bb:d8:ad:ad:ad:81:93:2b:fb:00:e8:b2:a1: 43:f1:ec:dd:40:5f:b7:15:53:d8:39:fd:3b:02:2d: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D0:D9:62:ED:99:E4:3B:6A:B9:92:37:FA:FB:09:C5:BD:A9:D6:5D X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:09:d0:dd:ac:dc:ee:bc:9f:47:05:eb:8c:22:5e:4f:3f:22: 03:1a:81:3a:f4:15:8c:a8:ad:01:6c:95:60:4e:c6:02:51:f4: 78:c6:70:91:9d:35:b2:0c:48:bf:10:4d:ab:ee:58:10:07:51: e9:b3:61:8e:e8:c2:69:ab:c5:11:6f:c3:9c:85:aa:0c:43:94: 05:69:ad:c4:f4:0d:0f:d1:6d:5d:f4:20:b6:87:91:21:92:05: d1:2a:fe:f4:21:44:45:3d:aa:58:99:ca:55:13:5e:5e:9a:80: 74:12:6e:03:3b:63:52:f2:ec:de:d2:ff:c2:2f:62:53:3e:4c: f8:5b:a4:87:54:fd:a4:ea:76:02:ef:ce:47:35:64:87:35:ca: af:97:ff:aa:d8:c9:43:98:f9:fe:a2:b3:8b:e4:a1:fe:69:c6: fb:f2:92:22:29:3f:f5:f3:cc:10:14:70:4c:7c:8b:8c:37:5a: a1:c5:c2:04:25:b1:0a:25:70:3c:c3:b4:b1:a8:93:ff:5e:29: 44:09:3d:c3:90:5d:b5:c3:8f:e8:d8:9b:b1:29:fc:4d:0b:4b: ea:64:a2:9f:c4:d8:84:c6:bc:14:7b:cb:1b:1a:ff:83:dd:87: d2:02:93:f6:f6:bc:79:60:06:c2:bb:38:09:2c:dc:19:51:5e: 1c:95:fc:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA3MDMwNzE2MDlaFw0yNTA3MTAwNzE2MDlaMBgxFjAUBgNV BAMTDTY4NjYyZTM5LTM5ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzh+T4F1tNrDphxxjnfSPcyaJ4VkbHYJWKm5CUS2CuN5jEE4eTMwubuwT0UF2o IJYmW7py+ZHGNuwr8iTrIxt1D/NTb8aomc4eeAr/DFuyYZI8/gZgmAQGZZcUxvfa vn4oy2OSX3h8QgxIFBgGyewQ28u3hLS7MA/Es7fpEbx0xwHxLVNXJ0xe4RozkLfv XI41ysF1wP7nWnkpNvYesrusQFHctbHYBtJq3bh5cv9+Vq2GXKjcRBxI1fwwcRua gLAgEG1P2WzrpGHK5+ENSTJjgjWUSfmNs+G9vlzwrZD8hSXju9itra2Bkyv7AOiy oUPx7N1AX7cVU9g5/TsCLVHhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdNDZYu2Z 5DtquZI3+vsJxb2p1l0wHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQJ0N2s3O68n0cF64wiXk8/IgMagTr0FYyorQFslWBOxgJR9HjGcJGd NbIMSL8QTavuWBAHUemzYY7owmmrxRFvw5yFqgxDlAVprcT0DQ/RbV30ILaHkSGS BdEq/vQhREU9qliZylUTXl6agHQSbgM7Y1Ly7N7S/8IvYlM+TPhbpIdU/aTqdgLv zkc1ZIc1yq+X/6rYyUOY+f6is4vkof5pxvvykiIpP/XzzBAUcEx8i4w3WqHFwgQl sQolcDzDtLGok/9eKUQJPcOQXbXDj+jYm7Ep/E0LS+pkop/E2ITGvBR7yxsa/4Pd h9ICk/b2vHlgBsK7OAks3BlRXhyV/FE= -----END CERTIFICATE-----Generated at Fri Jul 4 10:03:48 2025 by rpki-client