$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: Xy8dIOICG3eKIdFE+8J0aT7+L0ZpTCEYEtj8b2zv2bU= Subject key identifier: 05:FC:5E:53:04:81:52:61:5D:DF:F1:51:81:09:7E:6E:1B:F1:77:04 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 07B6 Signing time: Mon 30 Jun 2025 21:24:11 +0000 Manifest this update: Mon 30 Jun 2025 21:24:11 +0000 Manifest next update: Mon 07 Jul 2025 21:24:11 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: KRqcb73pzVIjhGlPUbOPtqIA+w9jLfK3ZFdu+5ikTKQ=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Jun 30 21:24:11 2025 GMT Not After : Jul 7 21:24:11 2025 GMT Subject: CN=6863007b-89e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:b6:ba:d7:fa:59:58:69:68:d9:b7:21:01: 53:94:1d:7f:29:67:42:3b:ad:11:0b:13:ef:11:86: 46:7a:11:7d:32:1e:f0:7f:0a:5a:6c:83:1a:d5:c5: 95:67:f7:00:e4:ff:d0:64:5a:f3:c3:d2:da:67:7e: 87:28:7d:0f:de:d0:fd:a3:81:cc:92:11:d6:96:64: 6a:df:c8:20:95:3d:9f:50:d7:f2:90:e8:55:34:75: 05:c2:07:9c:5a:61:df:08:19:c1:0e:54:bf:ff:d3: a6:55:48:fe:38:f6:88:10:9d:44:66:01:77:57:43: 65:09:66:64:b5:21:3d:ea:2d:54:9f:12:a8:49:7b: bc:17:9e:91:d9:f4:10:2e:a6:d3:96:c7:5b:b1:5e: 35:c6:bb:87:b1:e3:57:18:af:28:7d:b7:13:b6:9c: 18:80:92:04:8e:bb:e0:b2:06:d4:9c:0d:bb:88:ce: e3:54:26:a2:0a:dc:38:e4:b0:56:58:2e:dc:d7:e5: 93:2b:b4:2a:1d:5e:4c:4a:be:cd:73:bf:27:e1:e4: d7:c3:07:a9:8c:ae:27:33:03:81:12:ed:cd:19:c7: 03:78:9b:23:1e:7a:7b:0c:e0:2c:42:58:96:b0:ba: ac:9e:f5:50:bd:06:92:cb:5f:64:ae:2c:09:e7:42: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FC:5E:53:04:81:52:61:5D:DF:F1:51:81:09:7E:6E:1B:F1:77:04 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:19:0e:02:17:1c:83:87:df:c0:cb:b2:08:72:83:c8:01:8d: 73:a7:b4:70:54:40:e8:b7:17:e7:29:7b:8f:84:d9:4d:48:e4: 37:45:3b:dd:9b:d7:af:a8:cb:1c:28:f5:0c:b1:8f:af:34:70: f5:e4:ae:e7:5e:cd:20:09:f1:df:6b:41:3b:c7:89:4f:19:c1: 3d:31:db:c1:39:21:04:99:e1:1d:c3:0f:e7:9c:90:5b:a9:6e: b5:08:1d:cb:a4:95:5a:d5:ad:ab:08:3c:c7:d6:35:6c:0c:45: 8b:bd:9e:f1:65:d2:82:a5:4d:e4:ae:6c:af:05:c3:6a:93:b1: a0:a3:88:2a:ba:f2:6e:d8:d8:92:f3:24:76:6c:47:67:34:e1: 2e:3e:ad:f4:4d:56:bc:49:aa:fa:6d:42:94:03:e0:9e:b6:76: 74:6b:61:74:22:79:eb:d4:4c:82:1b:fe:d6:d6:80:82:99:bd: 01:4c:81:a3:c2:99:dc:81:81:b7:d2:b6:52:b9:d4:43:ae:86: cc:80:44:45:b2:13:45:b4:20:8e:7f:c5:a3:5c:6a:d8:da:0a: 80:bd:8f:e5:d7:e1:53:33:a1:73:b0:19:4c:91:aa:d2:33:be: 3b:40:bb:a7:1d:51:49:2d:f4:74:d9:83:9f:e0:8d:04:a9:84: 05:a7:ce:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUwNjMwMjEyNDExWhcNMjUwNzA3MjEyNDExWjAYMRYwFAYD VQQDEw02ODYzMDA3Yi04OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9y2utf6WVhpaNm3IQFTlB1/KWdCO60RCxPvEYZGehF9Mh7wfwpabIMa1cWV Z/cA5P/QZFrzw9LaZ36HKH0P3tD9o4HMkhHWlmRq38gglT2fUNfykOhVNHUFwgec WmHfCBnBDlS//9OmVUj+OPaIEJ1EZgF3V0NlCWZktSE96i1UnxKoSXu8F56R2fQQ LqbTlsdbsV41xruHseNXGK8ofbcTtpwYgJIEjrvgsgbUnA27iM7jVCaiCtw45LBW WC7c1+WTK7QqHV5MSr7Nc78n4eTXwwepjK4nMwOBEu3NGccDeJsjHnp7DOAsQliW sLqsnvVQvQaSy19kriwJ50Iw4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX8XlME gVJhXd/xUYEJfm4b8XcEMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GQ4CFxyDh9/Ay7IIcoPIAY1zp7RwVEDotxfnKXuPhNlNSOQ3RTvd m9evqMscKPUMsY+vNHD15K7nXs0gCfHfa0E7x4lPGcE9MdvBOSEEmeEdww/nnJBb qW61CB3LpJVa1a2rCDzH1jVsDEWLvZ7xZdKCpU3krmyvBcNqk7Ggo4gquvJu2NiS 8yR2bEdnNOEuPq30TVa8Sar6bUKUA+CetnZ0a2F0Innr1EyCG/7W1oCCmb0BTIGj wpncgYG30rZSudRDrobMgERFshNFtCCOf8WjXGrY2gqAvY/l1+FTM6FzsBlMkarS M747QLunHVFJLfR02YOf4I0EqYQFp86Y -----END CERTIFICATE-----Generated at Wed Jul 2 07:37:14 2025 by rpki-client