$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft File: LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json) Hash identifier: JEuG/YKmYxFuVJX9KsT5CxazElf+4AeW3et8j4l3v4U= Subject key identifier: C5:76:EF:7D:1C:4F:67:28:BF:6A:0A:7E:93:B7:72:55:B9:A7:7E:1D Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D Certificate issuer: /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft Manifest number: 0B34 Signing time: Wed 02 Jul 2025 19:23:36 +0000 Manifest this update: Wed 02 Jul 2025 19:23:36 +0000 Manifest next update: Wed 09 Jul 2025 19:23:36 +0000 Files and hashes: 1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: JQHW7uZtOj46pSUtc/zIBgef2V227AokdGGpHchnAms=) 2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: nC2MCb31DN75ahkTYwNnww6l+ZVraZqBgRvw8nlhuTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D Validity Not Before: Jul 2 19:23:36 2025 GMT Not After : Jul 9 19:23:36 2025 GMT Subject: CN=68658738-eaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:00:23:39:e5:8e:ad:36:41:6c:20:7d:4a: b7:de:48:7f:fc:20:7b:c2:a7:0e:49:78:da:cc:0f: 99:6c:04:f4:5f:82:63:37:84:ee:fd:c1:0d:78:9e: 3b:44:e3:7c:bf:10:eb:a7:e0:86:a5:9a:df:9e:d8: 96:81:46:3f:57:dd:3a:bc:e1:c7:e4:3e:cc:e2:6d: 45:2a:7d:e2:29:5c:70:8a:fd:35:12:ad:26:cf:ab: ee:f1:88:02:ff:ab:f3:7c:49:c6:4b:51:e2:80:87: 02:96:31:a4:c5:76:6b:bc:28:25:70:c4:71:b1:ed: 40:c9:1d:6a:a6:21:79:0b:22:1f:df:18:62:03:c3: d4:b3:6c:8b:07:91:d8:fc:18:a7:e1:22:91:04:e6: fd:38:0d:aa:a3:6d:c4:9d:de:58:2b:6a:b7:55:5e: 02:3a:31:72:92:13:a0:94:c8:0c:53:08:5c:a8:49: 1c:2e:b4:5c:ad:5a:56:cf:6c:62:f4:f2:42:39:cd: c6:9f:6c:6b:33:53:d2:b4:10:6a:d5:2b:ef:91:3b: 30:15:c3:43:9a:af:f1:c1:c5:01:3f:d4:d9:d7:2e: 16:52:15:aa:fc:da:30:31:da:97:7f:a8:62:7d:ba: ad:4a:73:a6:3e:37:e6:1d:74:0e:79:e2:78:e0:38: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:76:EF:7D:1C:4F:67:28:BF:6A:0A:7E:93:B7:72:55:B9:A7:7E:1D X509v3 Authority Key Identifier: keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:db:95:64:c1:3b:3c:4f:4c:a2:0c:a7:00:a7:07:b6:f3:86: 7b:7e:27:36:bd:c5:04:9f:ad:97:50:cb:2f:81:25:c8:84:83: 05:07:2e:6d:df:fa:60:71:4b:e3:0a:14:c9:8c:8b:dd:31:9c: 2e:75:23:63:27:20:5d:e3:59:de:48:a6:5d:fd:35:52:89:4e: 85:88:59:3b:aa:f5:9b:33:81:19:fa:a6:24:01:25:04:f2:02: 36:c5:24:bb:90:b5:10:c7:aa:42:f9:a6:f8:4f:a9:70:8e:8b: 86:0e:5a:f4:15:2d:2b:4e:5a:70:5c:ca:2d:94:05:f9:0b:19: 90:59:18:1d:bc:17:a7:5a:70:00:1f:0f:84:b7:9a:55:29:49: c2:90:7b:57:1d:9c:c8:58:61:ed:bb:be:4f:14:17:9d:ed:4e: 12:ad:b8:28:94:5e:95:5d:d1:c3:ea:4a:3b:83:63:70:a1:d4: 33:82:7d:0f:f6:81:d0:c3:4d:73:6a:b7:27:52:b5:49:63:7f: 88:ca:61:40:58:ba:6d:9c:ad:8e:68:45:5b:8a:cd:9b:11:9b: 63:87:08:d8:0f:65:22:49:d9:c8:f8:de:2f:61:be:e2:cb:4a: b7:b7:66:8b:51:74:15:2c:40:6f:b8:a0:1a:f4:0a:2b:a1:18: 1f:b7:5d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFBNjAxMTAvBgNVBAUTKDJFODIzRDU5NDk2Q0ZBQzczNzhGQTgyQkY4NERERjY4 NEQ5MzJCOUQwHhcNMjUwNzAyMTkyMzM2WhcNMjUwNzA5MTkyMzM2WjAYMRYwFAYD VQQDEw02ODY1ODczOC1lYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQkAIznljq02QWwgfUq33kh//CB7wqcOSXjazA+ZbAT0X4JjN4Tu/cENeJ47 RON8vxDrp+CGpZrfntiWgUY/V906vOHH5D7M4m1FKn3iKVxwiv01Eq0mz6vu8YgC /6vzfEnGS1HigIcCljGkxXZrvCglcMRxse1AyR1qpiF5CyIf3xhiA8PUs2yLB5HY /Bin4SKRBOb9OA2qo23End5YK2q3VV4COjFykhOglMgMUwhcqEkcLrRcrVpWz2xi 9PJCOc3Gn2xrM1PStBBq1SvvkTswFcNDmq/xwcUBP9TZ1y4WUhWq/NowMdqXf6hi fbqtSnOmPjfmHXQOeeJ44DjwnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMV2730c T2cov2oKfpO3clW5p34dMB8GA1UdIwQYMBaAFC6CPVlJbPrHN4+oK/hN32hNkyud MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUE2MC84MDMxNEY4NjND RkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1zYzNqNmdyLUUzZmFFMlRL NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSTlXVWxzLXNjM2o2Z3ItRTNmYUUyVEs1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUE2MC84MDMxNEY4NjNDRkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1z YzNqNmdyLUUzZmFFMlRLNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM25VkwTs8T0yiDKcApwe284Z7fic2vcUEn62XUMsvgSXIhIMFBy5t 3/pgcUvjChTJjIvdMZwudSNjJyBd41neSKZd/TVSiU6FiFk7qvWbM4EZ+qYkASUE 8gI2xSS7kLUQx6pC+ab4T6lwjouGDlr0FS0rTlpwXMotlAX5CxmQWRgdvBenWnAA Hw+Et5pVKUnCkHtXHZzIWGHtu75PFBed7U4SrbgolF6VXdHD6ko7g2NwodQzgn0P 9oHQw01zarcnUrVJY3+IymFAWLptnK2OaEVbis2bEZtjhwjYD2UiSdnI+N4vYb7i y0q3t2aLUXQVLEBvuKAa9AoroRgft13o -----END CERTIFICATE-----Generated at Wed Jul 2 23:34:57 2025 by rpki-client