$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: bsSZaUVfqaS3dIa+P/+1AnOvtkmaUfErbYx6UnjJmfo= Subject key identifier: FE:AA:8E:EE:6A:EA:B9:48:77:50:21:80:2B:D4:8C:51:6B:69:5B:34 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 09C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 09B3 Signing time: Wed 02 Jul 2025 20:17:58 +0000 Manifest this update: Wed 02 Jul 2025 20:17:58 +0000 Manifest next update: Wed 09 Jul 2025 20:17:58 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: cyhadvPoEHsA+RiLkf+aB7D4a418Lq2Iu4FwfJ9XjFY=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2501 (0x9c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Jul 2 20:17:58 2025 GMT Not After : Jul 9 20:17:58 2025 GMT Subject: CN=686593f6-39ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:ea:a3:b6:6f:a6:a9:19:68:ce:b3:72:52: 44:2d:e9:1d:99:61:4f:ca:47:46:17:f9:23:38:10: 7d:18:0e:a6:4d:cd:2f:ff:6f:b4:ea:d9:81:e1:15: 11:70:4a:fe:0f:f1:43:e3:9b:5a:d5:f0:ab:bf:02: e0:8b:c6:b5:a3:be:60:40:6e:98:9c:21:60:ce:ff: 09:4d:4b:b3:e6:b2:d1:8f:1a:a5:49:ba:9d:5d:ed: 58:68:30:28:57:73:05:92:56:73:96:1f:b8:f3:be: d5:e4:81:26:7f:e7:51:f8:8f:94:60:41:f6:5a:95: 1e:6f:91:0e:f5:d0:bb:4e:a9:b3:75:fa:c8:73:c6: 00:ae:78:0b:ec:97:44:07:17:3f:9c:14:23:54:d3: 44:a5:2b:6f:4d:5f:0e:1f:81:4f:3a:dc:c8:da:a7: bd:66:3a:a4:5f:de:46:82:b3:46:3c:33:3e:f1:41: 1f:9d:63:01:39:5f:41:40:74:63:2f:a7:c6:9c:85: 35:c8:c7:44:08:7f:4f:e0:84:48:19:59:de:10:6f: d6:77:b4:6d:d2:39:d4:19:16:8b:3b:1f:32:e8:27: e0:e3:51:6b:9e:16:89:3e:c3:16:ba:49:a3:87:ae: 7a:e5:44:9f:d2:f3:fc:f6:02:a3:ae:0f:63:6b:df: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AA:8E:EE:6A:EA:B9:48:77:50:21:80:2B:D4:8C:51:6B:69:5B:34 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0b:1d:1f:74:92:7c:65:6e:29:92:87:0e:4b:a4:71:34:22: f8:00:36:ec:e8:0e:b6:d5:70:0c:e1:6e:9c:d9:49:8c:ec:13: 7d:94:fe:47:43:f6:ba:48:fe:c0:5d:a4:32:7b:3b:fa:70:2a: a6:07:84:41:49:39:ac:a5:bd:e8:cf:41:f6:b4:55:a3:a1:4d: 38:8c:67:c2:fc:c9:16:50:69:3d:3a:b6:44:45:d4:b3:8a:9e: 5a:ad:76:f4:17:94:c1:45:ab:f9:a5:3b:a5:d6:5e:e8:aa:b3: db:96:df:ff:cf:ca:01:69:81:2b:af:2e:75:ec:28:1c:7e:07: 2c:81:54:3c:09:cc:d7:1e:ae:9a:77:b1:66:5b:5d:7c:d1:0d: 37:05:c0:56:00:ed:0b:55:2b:b6:a4:f2:3b:e5:7f:3e:f0:61: 2e:9a:1f:46:40:d6:a9:8f:51:89:d2:be:13:7d:22:6b:45:0d: cc:43:84:cb:28:b2:62:56:f2:03:18:4c:e1:85:b9:ae:2e:f8: ae:e9:35:6c:13:57:43:52:ac:59:c7:40:58:a4:99:ca:4b:cf: 28:10:29:ae:9f:a4:fc:16:6f:6c:f5:c3:bf:df:9f:fb:3c:41: 22:4c:89:79:82:c2:3b:a6:d5:a1:2b:f6:5b:6c:2e:5f:82:02: 55:75:eb:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwNzAyMjAxNzU4WhcNMjUwNzA5MjAxNzU4WjAYMRYwFAYD VQQDEw02ODY1OTNmNi0zOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHfqo7ZvpqkZaM6zclJELekdmWFPykdGF/kjOBB9GA6mTc0v/2+06tmB4RUR cEr+D/FD45ta1fCrvwLgi8a1o75gQG6YnCFgzv8JTUuz5rLRjxqlSbqdXe1YaDAo V3MFklZzlh+4877V5IEmf+dR+I+UYEH2WpUeb5EO9dC7TqmzdfrIc8YArngL7JdE Bxc/nBQjVNNEpStvTV8OH4FPOtzI2qe9ZjqkX95GgrNGPDM+8UEfnWMBOV9BQHRj L6fGnIU1yMdECH9P4IRIGVneEG/Wd7Rt0jnUGRaLOx8y6Cfg41FrnhaJPsMWukmj h6565USf0vP89gKjrg9ja98lrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6qju5q 6rlId1AhgCvUjFFraVs0MB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARCx0fdJJ8ZW4pkocOS6RxNCL4ADbs6A621XAM4W6c2UmM7BN9lP5H Q/a6SP7AXaQyezv6cCqmB4RBSTmspb3oz0H2tFWjoU04jGfC/MkWUGk9OrZERdSz ip5arXb0F5TBRav5pTul1l7oqrPblt//z8oBaYErry517CgcfgcsgVQ8CczXHq6a d7FmW1180Q03BcBWAO0LVSu2pPI75X8+8GEumh9GQNapj1GJ0r4TfSJrRQ3MQ4TL KLJiVvIDGEzhhbmuLviu6TVsE1dDUqxZx0BYpJnKS88oECmun6T8Fm9s9cO/35/7 PEEiTIl5gsI7ptWhK/ZbbC5fggJVdev5 -----END CERTIFICATE-----Generated at Thu Jul 3 01:09:51 2025 by rpki-client