$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: xkc8dyQd8Co8vViVbWGSWzYsTiNyEEkuoAumPsdVl6M= Subject key identifier: 79:6A:1F:6C:11:8D:E5:9B:A3:09:0E:35:F0:D7:B3:8A:80:58:6D:87 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 25 Signing time: Tue 01 Jul 2025 08:38:01 +0000 Manifest this update: Tue 01 Jul 2025 08:38:00 +0000 Manifest next update: Tue 08 Jul 2025 08:38:00 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: hoXu+bZwKYfrp5YNix9KGAiXssLAViDW8UNz3cEtUik=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Jul 1 08:38:00 2025 GMT Not After : Jul 8 08:38:00 2025 GMT Subject: CN=68639e68-849e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:99:cc:a6:75:ba:d5:37:66:17:2e:2c:ef: d6:99:fe:28:4a:86:cf:ec:cc:2a:b0:0d:df:f3:29: 78:dd:b9:95:51:c2:e7:16:0c:8f:7a:e4:30:6f:6c: 54:9b:d1:55:15:ab:b3:46:07:9e:0e:eb:82:e9:2f: 71:97:17:29:2d:43:ea:d0:40:e3:a3:3a:60:2c:e5: 41:9b:23:cc:a0:68:08:19:53:f7:ae:de:06:b3:49: 0f:8f:c8:1e:7d:85:62:ad:99:e5:bf:99:56:a0:b7: eb:c9:2e:f5:e7:0f:ba:16:f6:db:27:30:a1:85:21: da:c0:55:4c:90:68:cf:c7:bc:02:0e:b2:ef:4d:48: b7:66:3b:25:92:10:6e:88:73:57:a5:f3:95:3e:7e: 98:83:b8:16:18:91:65:82:56:24:04:77:28:a7:74: 97:a7:85:ed:d9:ad:4b:be:45:13:2e:53:45:dc:9a: 8c:73:d3:2e:68:bc:70:7b:46:ca:c6:3f:0d:a8:56: fc:e5:1e:36:09:cf:bd:f6:7a:46:bb:25:2d:19:e4: 53:a2:fa:41:1e:21:5b:93:02:b0:69:61:f4:18:22: d6:3e:99:e3:8a:4d:0b:80:ef:16:b2:57:fb:1c:35: 0e:c0:e6:ca:92:a3:39:36:52:da:7a:22:88:20:91: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:1F:6C:11:8D:E5:9B:A3:09:0E:35:F0:D7:B3:8A:80:58:6D:87 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:30:d3:4c:ee:15:42:de:ff:96:37:74:2e:c3:cc:ca:35: 54:4c:bd:36:49:cf:09:e0:22:0d:5a:74:a2:44:bd:9b:45:5d: 0d:b9:86:d2:cf:2a:d0:b6:45:9a:02:a7:06:48:3d:6d:28:85: 3a:45:19:96:71:be:34:55:97:7c:49:4d:75:da:24:e9:db:0f: b5:fe:a0:0b:5f:f0:a7:f3:1a:f3:a1:8f:92:3e:69:f3:d5:bc: 67:13:11:a9:9f:f2:a0:79:49:09:72:f3:3b:82:3a:14:61:b6: 17:e9:0e:a5:88:26:46:3b:0a:95:db:c1:27:fb:e7:3e:24:59: 15:f4:d2:5a:8e:75:6d:20:73:b4:85:77:fb:79:ba:cc:68:06: 5e:49:b4:e8:ab:4b:e0:9f:0b:c0:98:e6:52:5a:88:c3:a9:25: 7c:fb:50:9b:a2:ce:7c:7f:c1:62:88:e3:73:57:98:2a:31:2b: 5a:62:99:05:96:a6:6a:f0:a7:df:0b:5c:ff:0b:a4:28:e4:1b: ac:05:e4:aa:8e:48:03:7e:66:fa:1d:ce:3c:1a:4e:af:dc:b2: ef:f6:ec:1f:23:e2:05:b7:77:b0:52:04:ba:7d:a5:1a:d3:f4: 50:a4:98:69:e2:13:d1:ac:cf:9e:dd:09:a5:0a:ea:ab:48:56: 26:22:a1:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA3MDEwODM4MDBaFw0yNTA3MDgwODM4MDBaMBgxFjAUBgNV BAMTDTY4NjM5ZTY4LTg0OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnKJnMpnW61TdmFy4s79aZ/ihKhs/szCqwDd/zKXjduZVRwucWDI965DBvbFSb 0VUVq7NGB54O64LpL3GXFyktQ+rQQOOjOmAs5UGbI8ygaAgZU/eu3gazSQ+PyB59 hWKtmeW/mVagt+vJLvXnD7oW9tsnMKGFIdrAVUyQaM/HvAIOsu9NSLdmOyWSEG6I c1el85U+fpiDuBYYkWWCViQEdyindJenhe3ZrUu+RRMuU0Xcmoxz0y5ovHB7RsrG Pw2oVvzlHjYJz732eka7JS0Z5FOi+kEeIVuTArBpYfQYItY+meOKTQuA7xayV/sc NQ7A5sqSozk2Utp6IoggkZ+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeWofbBGN 5ZujCQ418NezioBYbYcwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHizMNNM7hVC3v+WN3Quw8zKNVRMvTZJzwngIg1adKJEvZtFXQ25htLP KtC2RZoCpwZIPW0ohTpFGZZxvjRVl3xJTXXaJOnbD7X+oAtf8KfzGvOhj5I+afPV vGcTEamf8qB5SQly8zuCOhRhthfpDqWIJkY7CpXbwSf75z4kWRX00lqOdW0gc7SF d/t5usxoBl5JtOirS+CfC8CY5lJaiMOpJXz7UJuiznx/wWKI43NXmCoxK1pimQWW pmrwp98LXP8LpCjkG6wF5KqOSAN+ZvodzjwaTq/csu/27B8j4gW3d7BSBLp9pRrT 9FCkmGniE9Gsz57dCaUK6qtIViYiofQ= -----END CERTIFICATE-----Generated at Wed Jul 2 22:29:40 2025 by rpki-client