$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft File: LLYWECl31MkLI_OvA7iR6JuAXMM.mft (raw, json) Hash identifier: wqmIDaE+i9KdcuoiuGle5Jv8/gbCQ59YNebGaXWe/z8= Subject key identifier: B0:C7:BF:D7:33:C7:1B:C4:96:6B:8F:B7:1F:F5:7C:A1:C2:55:B3:EB Authority key identifier: 2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3 Certificate issuer: /CN=A91F9ADA/serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3 Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft Manifest number: 0308 Signing time: Tue 01 Jul 2025 01:50:37 +0000 Manifest this update: Tue 01 Jul 2025 01:50:36 +0000 Manifest next update: Tue 08 Jul 2025 01:50:36 +0000 Files and hashes: 1: LLYWECl31MkLI_OvA7iR6JuAXMM.crl (hash: xewL9pfUIHfrIJmpcsniWvyKVBnj5IYwcwGsHcPuTuM=) 2: A6389578DAD111ECA6DEA174C4F9AE02.roa (hash: jwHoQgOY9fRB3Dqb7u0CR2POMqXltdonHQARnzrE8nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ADA, serialNumber=2CB616102977D4C90B23F3AF03B891E89B805CC3 Validity Not Before: Jul 1 01:50:36 2025 GMT Not After : Jul 8 01:50:36 2025 GMT Subject: CN=68633eec-e674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a8:81:c1:82:fa:d2:fd:7d:ee:2b:8d:40:ea: fd:db:30:bb:a4:b6:f1:92:44:5a:ac:4c:a2:e3:c0: dd:bc:63:20:5e:7f:90:a3:9e:09:82:a5:13:0a:da: 44:a3:35:af:c8:73:47:d8:9e:a7:1a:b6:de:af:47: 03:9a:65:c4:7c:a4:83:cb:4a:83:fb:d2:5f:4e:c6: c4:32:5a:5f:0d:41:db:f6:bd:83:31:84:e3:a5:74: 40:94:3f:c4:47:a4:0a:4f:76:60:18:e1:e2:c7:9d: 4f:c2:bc:e1:42:23:1a:78:45:2c:b9:dc:7d:18:4f: 88:c8:92:6f:41:64:37:d1:41:24:6c:fd:65:9a:b0: 62:57:a0:c3:2b:da:6b:27:c2:20:c1:c6:ff:fd:4c: 53:fd:8a:32:55:b9:fd:20:08:88:a2:46:9d:d5:ea: 02:5d:cf:4f:14:16:ab:06:c3:7d:32:a6:98:41:66: c1:e5:79:d5:57:c8:18:9d:ac:2a:d0:c8:36:61:78: 0c:ce:4d:f4:50:d8:d0:8c:b2:4f:44:5e:a1:d8:88: ae:bb:89:c8:4a:32:53:90:e7:f0:36:70:c2:2f:63: 79:71:53:a7:69:d3:d3:32:71:21:e1:09:6c:8b:ca: 21:88:f3:f5:3e:31:9a:e6:d6:35:69:16:db:59:3b: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C7:BF:D7:33:C7:1B:C4:96:6B:8F:B7:1F:F5:7C:A1:C2:55:B3:EB X509v3 Authority Key Identifier: keyid:2C:B6:16:10:29:77:D4:C9:0B:23:F3:AF:03:B8:91:E8:9B:80:5C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLYWECl31MkLI_OvA7iR6JuAXMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ADA/0E9C7C72DAC511EC919A4C5AC4F9AE02/LLYWECl31MkLI_OvA7iR6JuAXMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a8:be:c7:a5:75:7d:3c:70:2f:ef:a6:48:ee:95:3b:72:37: 7d:09:e0:1e:8e:82:91:85:07:2a:64:4c:be:e7:7a:45:e6:f3: d8:53:a3:88:b7:ec:91:46:42:de:6f:65:ba:8b:8d:b3:37:17: 35:52:d7:28:04:e8:8c:ed:c9:f2:0b:be:f9:d8:b0:8f:8e:9a: 25:8f:70:24:43:dc:e8:d4:e7:37:78:a0:28:5e:26:7d:04:54: d4:70:af:52:95:dc:2b:d3:b7:92:a0:57:7f:8e:4c:2e:43:15: 33:4f:16:1c:23:f8:2e:cd:c6:30:f2:ee:cc:10:32:91:ca:2e: 7f:67:3c:e0:a7:e3:16:5f:eb:b2:61:d6:8a:d6:b6:6c:45:df: 05:5c:e9:8f:60:29:99:59:60:4b:24:d0:0c:ff:09:90:a8:a3: 74:4f:3a:da:c3:bc:aa:d0:23:3a:96:de:57:40:63:3f:20:12: 9b:71:99:ee:1e:18:78:4a:dd:51:b8:ec:db:1c:73:a6:98:95: ce:25:b1:cb:c5:22:26:f3:2b:8c:37:d5:8c:3a:ab:9b:10:ac: 28:56:fb:eb:f3:9d:8a:c5:29:21:91:e8:d8:be:4a:e4:bc:ba: fa:d3:ae:e0:77:54:dd:3f:da:a0:b8:89:00:9c:e2:c3:e6:30: b3:c0:84:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlBREExMTAvBgNVBAUTKDJDQjYxNjEwMjk3N0Q0QzkwQjIzRjNBRjAzQjg5MUU4 OUI4MDVDQzMwHhcNMjUwNzAxMDE1MDM2WhcNMjUwNzA4MDE1MDM2WjAYMRYwFAYD VQQDEw02ODYzM2VlYy1lNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KiBwYL60v197iuNQOr92zC7pLbxkkRarEyi48DdvGMgXn+Qo54JgqUTCtpE ozWvyHNH2J6nGrber0cDmmXEfKSDy0qD+9JfTsbEMlpfDUHb9r2DMYTjpXRAlD/E R6QKT3ZgGOHix51PwrzhQiMaeEUsudx9GE+IyJJvQWQ30UEkbP1lmrBiV6DDK9pr J8Igwcb//UxT/YoyVbn9IAiIokad1eoCXc9PFBarBsN9MqaYQWbB5XnVV8gYnawq 0Mg2YXgMzk30UNjQjLJPRF6h2Iiuu4nISjJTkOfwNnDCL2N5cVOnadPTMnEh4Qls i8ohiPP1PjGa5tY1aRbbWTttJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDHv9cz xxvElmuPtx/1fKHCVbPrMB8GA1UdIwQYMBaAFCy2FhApd9TJCyPzrwO4keibgFzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUFEQS8wRTlDN0M3MkRB QzUxMUVDOTE5QTRDNUFDNEY5QUUwMi9MTFlXRUNsMzFNa0xJX092QTdpUjZKdUFY TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xMWVdFQ2wzMU1rTElfT3ZBN2lSNkp1QVhNTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUFEQS8wRTlDN0M3MkRBQzUxMUVDOTE5QTRDNUFDNEY5QUUwMi9MTFlXRUNsMzFN a0xJX092QTdpUjZKdUFYTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClqL7HpXV9PHAv76ZI7pU7cjd9CeAejoKRhQcqZEy+53pF5vPYU6OI t+yRRkLeb2W6i42zNxc1UtcoBOiM7cnyC7752LCPjpolj3AkQ9zo1Oc3eKAoXiZ9 BFTUcK9Sldwr07eSoFd/jkwuQxUzTxYcI/guzcYw8u7MEDKRyi5/Zzzgp+MWX+uy YdaK1rZsRd8FXOmPYCmZWWBLJNAM/wmQqKN0Tzraw7yq0CM6lt5XQGM/IBKbcZnu Hhh4St1RuOzbHHOmmJXOJbHLxSIm8yuMN9WMOqubEKwoVvvr852KxSkhkejYvkrk vLr6067gd1TdP9qguIkAnOLD5jCzwIQa -----END CERTIFICATE-----Generated at Tue Jul 1 19:55:56 2025 by rpki-client