$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: d6/Vl2VZ1neFTredPaS8f/W1ixE/fQjFRa20ZKNttRM= Subject key identifier: 83:35:07:1A:D4:80:AD:9F:26:4F:8C:7C:3F:FB:38:FB:69:01:23:92 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B2E Signing time: Thu 03 Jul 2025 06:47:52 +0000 Manifest this update: Thu 03 Jul 2025 06:47:51 +0000 Manifest next update: Thu 10 Jul 2025 06:47:51 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 9r9BrbkWt3vSC9OK9mI/Vcr2o1WF+W6NTotJtwo56PE=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jul 3 06:47:51 2025 GMT Not After : Jul 10 06:47:51 2025 GMT Subject: CN=68662797-31ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:b0:ca:e1:62:fd:38:61:98:2e:93:e4:8a: 8b:ae:ac:76:c3:35:83:7c:86:95:4a:83:08:75:88: 42:a8:6b:75:fc:1b:c4:04:e1:c6:17:66:f5:23:cd: f8:4f:d5:e2:43:33:e5:de:2e:c7:e4:cd:e5:79:f2: 5f:51:76:54:09:5b:76:a3:9d:c8:82:2e:2a:21:03: ab:d4:9e:24:02:fe:87:37:63:53:11:de:9d:ed:86: 87:49:b7:bc:ab:11:00:58:52:e9:c0:55:7a:40:22: 46:a5:19:5b:6e:59:c5:bc:bc:35:1c:16:ba:c6:c1: db:46:3d:4c:2b:dd:4c:32:c0:fc:dd:bb:06:aa:5d: 57:de:5f:b3:c7:45:dd:3d:93:e0:47:e3:89:2d:e6: ec:b7:24:bb:09:22:15:a3:c8:f9:18:1e:ba:13:5a: 0b:3a:d3:1c:97:0e:f8:77:ef:ae:74:76:a3:8d:40: e5:82:15:3c:4d:b5:92:4e:00:20:80:22:36:d4:9d: 2e:e3:c5:3a:29:4d:11:dd:d8:c8:31:e3:fd:f6:f2: 26:e3:5a:9d:61:e4:5c:ed:e4:98:06:39:65:ae:24: 05:95:8c:b5:5c:6d:83:c3:c6:25:78:e0:c3:8e:be: 21:22:ef:56:95:5f:3c:69:79:ec:32:86:ec:00:59: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:35:07:1A:D4:80:AD:9F:26:4F:8C:7C:3F:FB:38:FB:69:01:23:92 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:26:de:84:90:96:af:09:c7:91:ba:b2:43:20:2d:1b:9e: d0:87:41:8c:aa:6b:09:8c:16:c0:0e:b4:d0:b3:fe:5e:e8:da: 82:e8:86:a5:2a:69:d4:6d:93:ba:0a:54:02:7e:a3:19:14:1f: 9e:6f:72:3a:67:65:94:bd:d6:c1:4f:2e:96:25:bc:b5:42:e4: 7e:b2:7a:9b:f2:43:e8:c6:ad:ae:67:ce:2a:b9:53:f0:34:ad: 53:45:cc:3b:d1:e2:d7:e3:02:5c:b7:ef:5f:87:5c:27:a7:01: a2:cc:78:61:c2:e5:23:3a:4f:80:af:20:7d:4a:86:5a:54:1d: 71:30:58:27:2e:7e:88:2c:18:db:a5:bb:a1:7c:70:9b:51:f8: 4e:98:47:05:8f:38:bc:e2:47:7d:f6:80:bd:eb:1c:57:86:12: 20:cb:b6:9d:f8:18:aa:eb:52:f4:d3:de:b1:b1:25:1e:9a:da: 08:4a:a7:2c:78:2f:12:d7:a8:89:1f:2d:46:95:75:fe:dc:07: b3:9d:c8:ad:b7:40:92:48:90:8e:2f:dc:f6:db:f5:c9:26:99: db:53:a3:01:8e:97:79:dc:97:03:63:81:c9:3d:f2:33:b7:86: f6:b1:3c:3e:de:6e:5c:b6:75:e0:b1:ed:05:04:55:bc:c2:27: cf:cc:4c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwNzAzMDY0NzUxWhcNMjUwNzEwMDY0NzUxWjAYMRYwFAYD VQQDEw02ODY2Mjc5Ny0zMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmSwyuFi/ThhmC6T5IqLrqx2wzWDfIaVSoMIdYhCqGt1/BvEBOHGF2b1I834 T9XiQzPl3i7H5M3lefJfUXZUCVt2o53Igi4qIQOr1J4kAv6HN2NTEd6d7YaHSbe8 qxEAWFLpwFV6QCJGpRlbblnFvLw1HBa6xsHbRj1MK91MMsD83bsGql1X3l+zx0Xd PZPgR+OJLebstyS7CSIVo8j5GB66E1oLOtMclw74d++udHajjUDlghU8TbWSTgAg gCI21J0u48U6KU0R3djIMeP99vIm41qdYeRc7eSYBjllriQFlYy1XG2Dw8YleODD jr4hIu9WlV88aXnsMobsAFksJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM1BxrU gK2fJk+MfD/7OPtpASOSMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA74ibehJCWrwnHkbqyQyAtG57Qh0GMqmsJjBbADrTQs/5e6NqC6Ial KmnUbZO6ClQCfqMZFB+eb3I6Z2WUvdbBTy6WJby1QuR+snqb8kPoxq2uZ84quVPw NK1TRcw70eLX4wJct+9fh1wnpwGizHhhwuUjOk+AryB9SoZaVB1xMFgnLn6ILBjb pbuhfHCbUfhOmEcFjzi84kd99oC96xxXhhIgy7ad+Biq61L0096xsSUemtoISqcs eC8S16iJHy1GlXX+3Aezncitt0CSSJCOL9z22/XJJpnbU6MBjpd53JcDY4HJPfIz t4b2sTw+3m5ctnXgse0FBFW8wifPzEze -----END CERTIFICATE-----Generated at Thu Jul 3 23:17:28 2025 by rpki-client