$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: 3e87fwRT1/1XBfGjFrbC69PesjaYtrSLiI2wSFzchlc= Subject key identifier: 03:0C:D2:C4:B3:87:C6:79:06:F4:8D:55:7C:8F:91:07:3F:B4:01:9D Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0C13 Signing time: Wed 14 May 2025 18:50:38 +0000 Manifest this update: Wed 14 May 2025 18:50:38 +0000 Manifest next update: Wed 21 May 2025 18:50:38 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: Xi7fqziKtl8WhvlFxuNLp78MSVgeOD3ywEtmlPjVvYs=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: May 14 18:50:38 2025 GMT Not After : May 21 18:50:38 2025 GMT Subject: CN=6824e5fe-cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:ff:56:84:49:c7:93:b2:f5:03:05:8d:19: 47:85:2c:15:17:1a:e5:09:9b:38:56:26:f8:01:ac: b6:37:13:a6:a4:d1:b6:7d:a0:0f:24:5c:9a:69:c3: 5a:d8:67:84:01:f7:e4:7c:e0:77:af:17:8b:40:40: 24:ec:d3:ae:e4:84:7f:7f:f7:65:aa:f8:d2:41:50: 94:d2:1c:6b:fc:70:72:fc:98:74:49:53:dc:ee:da: 96:da:a5:f5:ed:bf:06:55:58:0f:59:38:44:a5:24: 7b:2e:e2:e1:d2:9f:08:a8:36:b3:fb:4c:93:f3:31: 42:85:c4:57:d7:c1:d2:0f:fc:dc:22:dd:15:8c:6e: 69:d9:18:ce:ab:9d:33:5a:9c:0f:6c:10:bd:73:52: 11:e8:ed:2f:2e:ec:0e:d2:b1:28:56:31:63:18:c1: 33:fc:a3:11:c6:a0:1f:a7:2b:9c:e6:df:b8:c8:0c: b0:a4:e6:2a:3c:cf:6b:31:93:ec:3c:08:7c:0e:10: 7a:c7:f7:21:7b:30:cc:c4:73:d0:34:f9:3a:ff:46: e9:e5:fc:4d:c3:1d:8b:69:d1:75:5d:49:96:4b:4d: 2b:d4:b1:bf:8c:71:46:e1:4b:8c:22:d9:c9:95:82: 13:81:f7:0d:b8:ad:55:7b:7b:49:2f:df:9f:a0:43: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0C:D2:C4:B3:87:C6:79:06:F4:8D:55:7C:8F:91:07:3F:B4:01:9D X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f8:84:55:77:eb:1f:f5:fa:c6:94:71:75:7d:15:3b:2b:82: ee:ae:05:50:cc:28:41:ed:99:0e:20:4a:94:2f:15:02:ef:00: 19:cd:fe:bf:4b:98:8e:89:a4:cd:94:00:59:8e:93:2e:98:c4: d6:d8:60:84:03:9d:bd:c9:c1:1f:6a:d4:d3:b5:c4:26:c1:57: cb:12:4c:63:66:6e:88:1e:b6:00:bc:d1:6b:84:b0:27:65:3a: 28:e9:31:e4:ca:98:6d:6e:18:d9:dd:33:04:fc:ac:4d:ef:8c: 88:89:ac:1a:50:79:88:b6:a5:08:f1:f3:77:57:c5:66:68:7d: a6:d8:73:ef:3f:d3:e2:9a:57:81:ec:6f:38:ab:37:e2:88:9c: 80:d0:96:b1:76:fb:82:7b:4f:ef:56:cf:8e:01:70:b0:b7:da: 70:d5:5b:57:d2:bf:2d:61:49:79:bf:10:86:5f:29:33:11:be: 98:b8:d8:d7:96:bc:b4:c6:0b:02:f9:38:a6:20:e1:d4:20:34: 2d:4c:d8:a3:f7:1e:9a:1b:88:9d:66:02:6a:06:7b:a8:53:ba: 6a:eb:e9:6c:f1:7b:c7:68:de:50:01:7c:ef:a9:1a:06:e5:0d: 0b:f7:c9:fa:69:45:cd:49:fc:28:49:9f:70:00:40:67:f3:c2: 24:40:01:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwNTE0MTg1MDM4WhcNMjUwNTIxMTg1MDM4WjAYMRYwFAYD VQQDEw02ODI0ZTVmZS1jYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6j/VoRJx5Oy9QMFjRlHhSwVFxrlCZs4Vib4Aay2NxOmpNG2faAPJFyaacNa 2GeEAffkfOB3rxeLQEAk7NOu5IR/f/dlqvjSQVCU0hxr/HBy/Jh0SVPc7tqW2qX1 7b8GVVgPWThEpSR7LuLh0p8IqDaz+0yT8zFChcRX18HSD/zcIt0VjG5p2RjOq50z WpwPbBC9c1IR6O0vLuwO0rEoVjFjGMEz/KMRxqAfpyuc5t+4yAywpOYqPM9rMZPs PAh8DhB6x/chezDMxHPQNPk6/0bp5fxNwx2LadF1XUmWS00r1LG/jHFG4UuMItnJ lYITgfcNuK1Ve3tJL9+foEPyNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMM0sSz h8Z5BvSNVXyPkQc/tAGdMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs+IRVd+sf9frGlHF1fRU7K4LurgVQzChB7ZkOIEqULxUC7wAZzf6/ S5iOiaTNlABZjpMumMTW2GCEA529ycEfatTTtcQmwVfLEkxjZm6IHrYAvNFrhLAn ZToo6THkyphtbhjZ3TME/KxN74yIiawaUHmItqUI8fN3V8VmaH2m2HPvP9PimleB 7G84qzfiiJyA0JaxdvuCe0/vVs+OAXCwt9pw1VtX0r8tYUl5vxCGXykzEb6YuNjX lry0xgsC+TimIOHUIDQtTNij9x6aG4idZgJqBnuoU7pq6+ls8XvHaN5QAXzvqRoG 5Q0L98n6aUXNSfwoSZ9wAEBn88IkQAEc -----END CERTIFICATE-----Generated at Thu May 15 18:39:00 2025 by rpki-client