$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: eolgkgps3638/N5GgFP7WsypYZ881sQHnusxysydpDo= Subject key identifier: AD:17:F0:52:2B:D5:E2:62:E5:66:5D:7D:80:9A:37:EF:2C:F0:C2:D7 Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 037B Signing time: Thu 03 Jul 2025 01:14:03 +0000 Manifest this update: Thu 03 Jul 2025 01:14:02 +0000 Manifest next update: Thu 10 Jul 2025 01:14:02 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: 0xQPcyenckGe4bjY+HHYKwmdTEAXl/b3BxmKUF08jiI=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2V4s60CBepyFsN4hkIBA1O5APSOWrUwQgr6qjDAHtko=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: PpnJ+skHtxU80Y62k+Cdmycu9izolR2+X8heLZ727nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Jul 3 01:14:02 2025 GMT Not After : Jul 10 01:14:02 2025 GMT Subject: CN=6865d95b-5f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:88:e4:66:7a:55:48:95:9a:21:a3:1f:2a: 68:c0:06:7b:f2:77:21:51:64:91:41:14:eb:80:e6: 35:29:ec:09:e9:6c:07:0a:48:d1:2d:94:46:5f:28: 53:b1:40:a8:3c:b2:c5:ab:b5:ed:f2:b5:aa:0e:38: 02:6a:23:cd:df:a7:54:43:c8:59:8c:f3:d6:1a:92: a0:bd:da:ae:1e:c5:7b:b4:47:5c:b4:c7:b6:e2:63: 87:4b:18:37:0e:99:c3:51:67:bb:a7:54:d3:47:3a: 3c:e5:9c:00:f8:fa:66:73:10:8b:51:7b:69:77:84: 19:b6:19:e8:a5:9f:bc:c8:3c:a9:a4:4a:93:23:d7: 1f:85:95:86:cc:fe:67:f0:83:71:18:ce:d1:d8:57: f7:93:65:0a:51:6d:f4:c9:f2:0e:89:7d:05:92:4e: d7:9b:37:5d:1f:10:f2:dd:40:e9:ee:cb:26:09:0a: 66:ba:59:97:ed:11:95:0e:f0:ef:3d:bc:1c:7e:2e: 2e:9c:32:40:96:fc:08:36:27:29:9b:a7:76:51:29: 73:83:0e:b3:6f:63:03:b1:69:36:b3:ff:77:f2:23: 72:6a:0a:d7:a9:92:17:c7:8d:64:60:72:05:bf:7b: 7b:d3:44:22:28:6f:41:21:5f:a2:41:c0:14:d5:ee: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:F0:52:2B:D5:E2:62:E5:66:5D:7D:80:9A:37:EF:2C:F0:C2:D7 X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:73:93:05:2a:b5:78:28:7f:b2:f1:6b:74:30:2d:56:18:40: aa:81:9a:b8:52:e7:76:a3:21:eb:4d:ff:aa:22:78:89:3a:28: fb:2f:a2:2f:8d:c4:12:2f:9c:4a:3c:ee:e6:1f:99:ba:65:e1: aa:99:65:ca:5f:b1:3c:b9:84:eb:44:c1:81:6b:b9:f9:7a:07: 93:71:5e:c7:35:45:4b:7c:4d:f3:0e:dc:00:11:b4:2d:21:10: 77:23:1c:59:bb:1d:18:db:65:ce:0f:91:01:7e:0a:24:e2:a8: dc:41:79:c7:97:c8:c5:62:7d:0a:f2:ef:ee:32:80:68:90:e4: 96:79:da:3a:17:cc:83:0c:d9:32:a5:ed:de:fd:2f:e3:ec:d4: 94:cc:a2:e2:a3:35:57:af:52:16:f2:70:4e:65:d4:01:08:bb: 60:ba:88:f7:07:17:4b:57:d3:33:49:c8:1e:99:2c:75:34:df: 00:94:d3:47:60:e3:01:40:ec:36:16:9a:90:b3:89:97:81:32: 19:3b:d4:88:23:ea:96:a6:fb:70:5b:66:c9:dc:20:a6:36:30: 7c:d7:48:3f:c1:88:49:c6:d0:e4:a5:d2:f5:58:e8:01:80:46: 50:04:54:58:d7:2e:db:6e:7e:57:63:9b:b2:d2:8a:07:36:52: 4f:dd:c2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwNzAzMDExNDAyWhcNMjUwNzEwMDExNDAyWjAYMRYwFAYD VQQDEw02ODY1ZDk1Yi01ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7uI5GZ6VUiVmiGjHypowAZ78nchUWSRQRTrgOY1KewJ6WwHCkjRLZRGXyhT sUCoPLLFq7Xt8rWqDjgCaiPN36dUQ8hZjPPWGpKgvdquHsV7tEdctMe24mOHSxg3 DpnDUWe7p1TTRzo85ZwA+PpmcxCLUXtpd4QZthnopZ+8yDyppEqTI9cfhZWGzP5n 8INxGM7R2Ff3k2UKUW30yfIOiX0Fkk7XmzddHxDy3UDp7ssmCQpmulmX7RGVDvDv Pbwcfi4unDJAlvwINicpm6d2USlzgw6zb2MDsWk2s/938iNyagrXqZIXx41kYHIF v3t700QiKG9BIV+iQcAU1e4LHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0X8FIr 1eJi5WZdfYCaN+8s8MLXMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZc5MFKrV4KH+y8Wt0MC1WGECqgZq4Uud2oyHrTf+qIniJOij7L6Iv jcQSL5xKPO7mH5m6ZeGqmWXKX7E8uYTrRMGBa7n5egeTcV7HNUVLfE3zDtwAEbQt IRB3IxxZux0Y22XOD5EBfgok4qjcQXnHl8jFYn0K8u/uMoBokOSWedo6F8yDDNky pe3e/S/j7NSUzKLiozVXr1IW8nBOZdQBCLtguoj3BxdLV9MzScgemSx1NN8AlNNH YOMBQOw2FpqQs4mXgTIZO9SII+qWpvtwW2bJ3CCmNjB810g/wYhJxtDkpdL1WOgB gEZQBFRY1y7bbn5XY5uy0ooHNlJP3cKe -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:22 2025 by rpki-client