$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: eZ/j4atc6At2JrEaqQ8J1KjGO/8jrq67YOJkFac26F0= Subject key identifier: 97:2B:EE:CD:E7:44:4B:BC:A0:58:93:DD:DF:39:A7:F1:AB:66:6D:AA Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 017D Signing time: Sun 29 Jun 2025 02:45:14 +0000 Manifest this update: Sun 29 Jun 2025 02:45:13 +0000 Manifest next update: Sun 06 Jul 2025 02:45:13 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: Q0Aq4NzODDk0q3hB5A+1LlDvEiC/tt/9jBSlbuOhJK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Jun 29 02:45:13 2025 GMT Not After : Jul 6 02:45:13 2025 GMT Subject: CN=6860a8ba-b773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:00:9c:d5:f6:06:f3:28:ae:b5:d7:8d:27: 54:0f:53:22:63:3f:db:05:c4:74:ee:ff:3b:d6:7e: 3c:d4:36:06:df:33:be:2f:5b:43:b3:a9:8b:9b:5a: 20:63:79:64:86:2a:74:f1:3c:e0:0e:d7:08:4b:ab: 25:22:cd:93:7d:94:7c:bb:dd:72:78:3b:c8:83:23: dc:c2:17:e8:07:0b:57:0c:e2:79:0a:d7:28:61:b0: 17:3a:74:29:ac:5a:bc:23:3d:c5:1a:68:a3:fe:45: d6:ef:c6:60:e4:3e:4a:c7:e1:af:fb:7e:f8:9d:87: 1b:70:e6:96:35:79:27:61:71:c7:fd:46:0a:74:80: 23:2a:21:f1:50:cc:40:1a:b6:54:2d:95:a3:d1:2e: 1b:70:ef:f4:25:99:a1:96:ad:c5:61:03:9b:4a:51: 96:d6:65:88:ca:61:36:62:96:be:ce:e3:d7:01:3e: f7:c2:7e:b4:ba:bf:21:0d:9f:7c:5f:61:85:b3:2d: be:13:a6:59:58:0d:3e:8e:d3:08:7b:48:9a:da:1a: 26:1e:e5:6b:80:b3:11:a7:a0:61:2e:86:43:53:c8: 27:70:41:0d:48:ef:39:1c:fe:1a:ae:09:56:ff:f1: 81:54:83:63:06:ee:db:7b:bd:3e:1e:a6:34:52:b1: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2B:EE:CD:E7:44:4B:BC:A0:58:93:DD:DF:39:A7:F1:AB:66:6D:AA X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ec:10:fb:51:9b:3f:76:1c:3d:83:c1:d9:b0:5d:d8:12:43: c4:dd:e9:e7:9b:e2:6c:06:6f:a5:8d:e8:af:8a:42:d0:57:5a: 3a:2c:13:7d:d2:de:e2:5b:bc:52:ba:2d:2d:79:5d:69:6c:1d: 77:39:9b:87:8d:24:cc:80:04:3d:41:1f:96:25:c8:20:e8:8c: 2b:c9:aa:a9:0c:5c:04:9c:e4:0b:ab:ce:86:fc:74:c2:44:cf: 69:65:e1:e9:72:e2:6e:76:06:ba:04:af:98:e4:dc:22:d4:93: 5d:89:2d:a5:0b:bc:4e:6b:1a:b4:de:38:04:c5:1f:d2:a6:4c: fc:f8:73:72:98:67:0d:97:6a:a3:b0:88:ee:d7:0e:f2:23:b0: df:2e:a2:3e:26:27:61:88:9f:db:6d:d1:1d:17:c1:c0:e4:30: 61:e8:4c:3d:9b:cb:e5:7c:a3:2e:7e:88:93:b0:c5:f1:cc:03: 1b:24:0b:77:73:2c:e9:0c:59:f1:29:5d:54:96:29:b9:99:d9: fd:c3:a9:3d:e7:e1:23:24:13:66:3b:6f:00:55:6d:49:87:eb: a1:42:65:39:af:a1:f5:e0:dd:3e:03:80:4b:5c:67:9f:d7:30: 00:e8:e5:26:05:13:f6:87:63:c5:dc:32:b2:16:f6:1c:05:a7: ee:2a:1f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwNjI5MDI0NTEzWhcNMjUwNzA2MDI0NTEzWjAYMRYwFAYD VQQDEw02ODYwYThiYS1iNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcwAnNX2BvMorrXXjSdUD1MiYz/bBcR07v871n481DYG3zO+L1tDs6mLm1og Y3lkhip08TzgDtcIS6slIs2TfZR8u91yeDvIgyPcwhfoBwtXDOJ5CtcoYbAXOnQp rFq8Iz3FGmij/kXW78Zg5D5Kx+Gv+374nYcbcOaWNXknYXHH/UYKdIAjKiHxUMxA GrZULZWj0S4bcO/0JZmhlq3FYQObSlGW1mWIymE2Ypa+zuPXAT73wn60ur8hDZ98 X2GFsy2+E6ZZWA0+jtMIe0ia2homHuVrgLMRp6BhLoZDU8gncEENSO85HP4arglW //GBVINjBu7be70+HqY0UrFCLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcr7s3n REu8oFiT3d85p/GrZm2qMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7BD7UZs/dhw9g8HZsF3YEkPE3ennm+JsBm+ljeivikLQV1o6LBN9 0t7iW7xSui0teV1pbB13OZuHjSTMgAQ9QR+WJcgg6IwryaqpDFwEnOQLq86G/HTC RM9pZeHpcuJudga6BK+Y5Nwi1JNdiS2lC7xOaxq03jgExR/Spkz8+HNymGcNl2qj sIju1w7yI7DfLqI+JidhiJ/bbdEdF8HA5DBh6Ew9m8vlfKMufoiTsMXxzAMbJAt3 cyzpDFnxKV1Ulim5mdn9w6k95+EjJBNmO28AVW1Jh+uhQmU5r6H14N0+A4BLXGef 1zAA6OUmBRP2h2PF3DKyFvYcBafuKh9b -----END CERTIFICATE-----Generated at Sun Jun 29 12:13:45 2025 by rpki-client