$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: gu46ROVqloMoXQD6hf9iGx/n1kc7T72wUxeDRSCB9GU= Subject key identifier: 09:4D:47:9C:AA:BD:E0:D4:FB:F3:55:06:92:2E:B2:51:E6:97:CD:73 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: CB Signing time: Sun 29 Jun 2025 04:45:13 +0000 Manifest this update: Sun 29 Jun 2025 04:45:13 +0000 Manifest next update: Sun 06 Jul 2025 04:45:13 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: wSPqzqAVag/NXju+6HHTYRo6479rRyhYDmpGVzzDn9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Jun 29 04:45:13 2025 GMT Not After : Jul 6 04:45:13 2025 GMT Subject: CN=6860c4d9-cbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:5f:a4:2c:8f:93:cd:72:d4:23:99:eb:9d: aa:71:96:cf:fe:2a:b1:9c:47:b5:8e:7c:9c:0a:6f: cf:be:c9:3a:a6:63:e2:42:bd:69:a4:c6:ed:30:03: 04:e8:a2:3d:b2:6e:30:12:38:01:e6:ee:a3:6f:04: 18:b1:6e:68:5e:24:aa:d4:4e:34:cc:e8:2f:be:ab: be:7b:7a:a6:43:62:b5:d3:00:6c:ed:65:52:e6:b0: 2e:af:1f:8f:3e:c7:87:15:0d:fb:54:3b:0f:e2:c9: 3a:84:c7:3d:07:bf:32:36:46:4e:a1:c0:d2:a5:5f: 06:a7:e4:21:41:35:8b:62:8a:13:e0:b2:26:24:11: fb:68:1b:06:1d:6e:0b:c8:35:75:ac:80:53:e6:ee: 6f:99:f6:1a:c2:13:e5:b1:08:a4:12:c8:e1:a4:0e: b2:bf:e5:ea:71:b4:cd:20:b9:92:42:cf:c5:fa:68: 6a:70:d4:87:6e:76:ba:31:c9:d6:12:a1:c1:b4:0c: 92:25:99:65:fe:68:6a:e2:95:17:c1:d2:54:ec:a1: 0b:88:8f:41:77:41:23:b7:2a:ae:57:43:6e:52:f0: 32:bc:d6:8d:e1:e0:2c:95:dd:dd:c3:24:36:b2:57: 88:25:84:b1:cc:86:5a:46:5d:3f:b4:82:44:5b:6d: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4D:47:9C:AA:BD:E0:D4:FB:F3:55:06:92:2E:B2:51:E6:97:CD:73 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8a:91:ee:b2:01:13:b8:1e:e8:1b:29:60:12:99:c9:f5:70: 70:66:0d:3c:4a:88:b0:d7:e2:04:e5:f9:87:b9:58:53:96:ed: 34:74:28:57:0b:9d:51:bc:48:9b:39:90:7d:00:b1:01:68:94: bd:05:1e:b2:99:ae:0d:50:5f:72:06:41:6d:92:6e:67:62:a2: b9:cd:26:46:47:b9:fb:f6:10:41:11:00:2e:9e:f5:52:f8:b9: e9:85:e7:ec:4a:25:41:f5:59:ce:d8:7b:86:f0:28:ad:ea:32: 6c:04:be:18:ed:57:27:64:96:11:f0:75:30:02:69:6f:22:37: 6a:a3:b6:7d:bb:33:20:2a:b9:64:6c:60:70:53:a5:68:26:26: db:3f:7e:46:19:0f:f2:ee:6e:8b:f0:ab:6c:fa:55:9e:eb:c5: 03:91:9d:0b:b7:53:85:8f:5c:63:49:17:8c:a6:69:dc:12:ce: 01:b0:c0:12:13:91:50:b5:f5:c4:51:90:90:3c:ef:b8:f0:08: 07:ee:7d:ce:3b:35:25:48:a6:20:83:bf:46:3b:4b:14:8e:0a: 99:41:52:44:95:1b:4c:ec:48:23:b4:0f:02:8d:0d:7a:48:66: b5:f6:9a:52:d3:de:48:9c:58:e9:18:00:cd:9e:36:ec:bb:b2: f2:89:1a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwNjI5MDQ0NTEzWhcNMjUwNzA2MDQ0NTEzWjAYMRYwFAYD VQQDEw02ODYwYzRkOS1jYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh5fpCyPk81y1COZ652qcZbP/iqxnEe1jnycCm/Pvsk6pmPiQr1ppMbtMAME 6KI9sm4wEjgB5u6jbwQYsW5oXiSq1E40zOgvvqu+e3qmQ2K10wBs7WVS5rAurx+P PseHFQ37VDsP4sk6hMc9B78yNkZOocDSpV8Gp+QhQTWLYooT4LImJBH7aBsGHW4L yDV1rIBT5u5vmfYawhPlsQikEsjhpA6yv+XqcbTNILmSQs/F+mhqcNSHbna6McnW EqHBtAySJZll/mhq4pUXwdJU7KELiI9Bd0EjtyquV0NuUvAyvNaN4eAsld3dwyQ2 sleIJYSxzIZaRl0/tIJEW21FiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlNR5yq veDU+/NVBpIuslHml81zMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCipHusgETuB7oGylgEpnJ9XBwZg08Soiw1+IE5fmHuVhTlu00dChX C51RvEibOZB9ALEBaJS9BR6yma4NUF9yBkFtkm5nYqK5zSZGR7n79hBBEQAunvVS +LnphefsSiVB9VnO2HuG8Cit6jJsBL4Y7VcnZJYR8HUwAmlvIjdqo7Z9uzMgKrlk bGBwU6VoJibbP35GGQ/y7m6L8Kts+lWe68UDkZ0Lt1OFj1xjSReMpmncEs4BsMAS E5FQtfXEUZCQPO+48AgH7n3OOzUlSKYgg79GO0sUjgqZQVJElRtM7EgjtA8CjQ16 SGa19ppS095InFjpGADNnjbsu7LyiRqs -----END CERTIFICATE-----Generated at Sun Jun 29 14:06:02 2025 by rpki-client