$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: jMyAQo0m/AbaiKi3ygl6lgOlUqnemjD0GiQmt5p4zec= Subject key identifier: E7:10:AF:20:CB:18:B1:D7:7B:3A:62:34:46:E2:27:B4:E9:B1:E7:E2 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 018E Signing time: Tue 01 Jul 2025 04:02:29 +0000 Manifest this update: Tue 01 Jul 2025 04:02:28 +0000 Manifest next update: Tue 08 Jul 2025 04:02:28 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: j81MTssKs9kPIB4llygQhvbg9P/ZSaQbeH14ilAfEKo=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Jul 1 04:02:28 2025 GMT Not After : Jul 8 04:02:28 2025 GMT Subject: CN=68635dd5-c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:41:8b:04:64:6c:0b:fe:0a:08:ab:ee:4a: 87:05:02:4f:da:f3:d5:46:da:06:13:ab:2d:b4:38: 98:2c:3c:f3:dc:a8:aa:85:8c:d7:2d:ee:13:e4:cd: 66:a5:78:5e:68:d2:8b:74:c4:2d:87:1d:9c:6d:bd: 66:2e:30:5b:da:34:ce:5e:11:e7:5c:ef:67:67:c3: 13:9e:f1:51:e1:1d:ba:8b:d0:b8:7d:50:b3:db:c7: 39:1e:95:0a:57:f0:49:21:42:5c:c4:36:79:e8:45: 94:d3:2c:f7:fc:23:5f:b3:1c:6e:d3:51:94:1e:9b: 4d:b5:4b:46:91:93:82:08:ec:de:d0:6f:05:6a:01: 56:24:07:43:09:6f:d1:04:91:e8:14:32:40:46:73: 37:f2:8b:b5:39:39:a3:ea:d3:a5:79:1b:39:a4:1e: 01:db:00:01:43:74:cd:45:98:c9:49:97:3a:0b:f3: 40:2f:3f:1c:a1:5d:43:97:76:79:45:aa:55:b6:47: 9f:0a:3d:7c:6b:52:70:e3:10:87:d5:cd:b3:2e:74: b6:be:e3:24:78:34:50:55:fc:ae:7c:2a:91:e9:68: aa:86:ab:4a:2d:2d:ba:91:c0:da:1b:34:e6:fa:05: 5d:1c:f6:b5:d6:76:8e:12:18:f1:eb:cf:fb:c1:4b: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:AF:20:CB:18:B1:D7:7B:3A:62:34:46:E2:27:B4:E9:B1:E7:E2 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:73:d8:e8:fb:96:99:66:01:81:66:8b:6d:05:a4:c6:19:77: 98:5c:b8:d3:96:49:ff:be:98:63:47:69:d3:a9:de:a8:ad:81: cb:91:87:fe:9e:8f:c7:34:50:64:98:4b:e5:4a:4d:f4:25:81: f8:21:72:d0:41:94:1e:fd:ce:35:d8:70:df:9d:ce:28:35:0b: 10:73:2d:fc:a4:eb:dc:2c:9b:7d:e4:ac:50:49:2d:48:83:db: 6a:0c:cf:7f:c8:36:d0:0e:32:c4:d4:54:ac:30:a2:62:ec:b7: fd:e9:80:fa:08:aa:98:15:b8:a5:c9:40:79:25:ec:56:d0:47: c2:2d:bc:77:5f:8b:71:a5:91:16:de:b0:f9:e7:5b:2a:57:d3: 9b:94:e0:49:26:07:a7:d9:dc:f2:ad:5b:c9:fc:d6:66:0d:a5: 34:58:f9:8a:ca:42:32:2c:8a:11:b4:21:31:dd:d7:f5:69:cb: 5d:ba:c1:87:52:0d:33:0c:bf:c6:75:c8:dc:37:b2:6e:e6:4e: 4d:a2:cc:04:53:20:d0:ba:16:82:0b:2c:18:1e:5f:dd:08:a4: 6f:b7:52:5b:4d:7a:37:3c:5f:65:38:24:29:1c:a7:ae:8f:82: be:a7:05:c8:0e:c1:d8:9e:de:3a:ad:b4:b0:41:c9:e2:d3:7a: 96:53:bc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwNzAxMDQwMjI4WhcNMjUwNzA4MDQwMjI4WjAYMRYwFAYD VQQDEw02ODYzNWRkNS1jOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ChBiwRkbAv+Cgir7kqHBQJP2vPVRtoGE6sttDiYLDzz3KiqhYzXLe4T5M1m pXheaNKLdMQthx2cbb1mLjBb2jTOXhHnXO9nZ8MTnvFR4R26i9C4fVCz28c5HpUK V/BJIUJcxDZ56EWU0yz3/CNfsxxu01GUHptNtUtGkZOCCOze0G8FagFWJAdDCW/R BJHoFDJARnM38ou1OTmj6tOleRs5pB4B2wABQ3TNRZjJSZc6C/NALz8coV1Dl3Z5 RapVtkefCj18a1Jw4xCH1c2zLnS2vuMkeDRQVfyufCqR6WiqhqtKLS26kcDaGzTm +gVdHPa11naOEhjx68/7wUtx/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcQryDL GLHXezpiNEbiJ7TpsefiMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3c9jo+5aZZgGBZottBaTGGXeYXLjTlkn/vphjR2nTqd6orYHLkYf+ no/HNFBkmEvlSk30JYH4IXLQQZQe/c412HDfnc4oNQsQcy38pOvcLJt95KxQSS1I g9tqDM9/yDbQDjLE1FSsMKJi7Lf96YD6CKqYFbilyUB5JexW0EfCLbx3X4txpZEW 3rD551sqV9OblOBJJgen2dzyrVvJ/NZmDaU0WPmKykIyLIoRtCEx3df1actdusGH Ug0zDL/GdcjcN7Ju5k5NoswEUyDQuhaCCywYHl/dCKRvt1JbTXo3PF9lOCQpHKeu j4K+pwXIDsHYnt46rbSwQcni03qWU7wA -----END CERTIFICATE-----Generated at Wed Jul 2 01:25:30 2025 by rpki-client