$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: vfGvrg8RXYW1qkej6WAjGa5Be9bpfwDqHhRYd030nYI= Subject key identifier: F1:55:C0:42:E0:AA:48:88:31:72:E2:91:90:DD:CC:DA:15:BF:09:90 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 0235 Signing time: Tue 01 Jul 2025 02:35:34 +0000 Manifest this update: Tue 01 Jul 2025 02:35:33 +0000 Manifest next update: Tue 08 Jul 2025 02:35:33 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: 7lSMci4P0BcOoncXg7o9Zuyu5f22PTfy/4jprA1EjpE=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: 4gZpKbAZ3PPZ8XY+4tRmnbJCoHSToqpiZD3Xw35DspI=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: lDaMLlKkOnOEtKB4HQw14YL4MByHOHikQc7Dy/TLNpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Jul 1 02:35:33 2025 GMT Not After : Jul 8 02:35:33 2025 GMT Subject: CN=68634976-a88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:f3:20:ea:9a:db:82:a2:6e:bd:a4:fb:e6: f3:b5:d8:d0:ea:6f:e2:4f:ea:46:46:dd:3e:e2:c5: c8:21:e3:db:cf:46:d3:52:7a:35:52:62:f4:af:0d: 1f:53:76:e0:33:8b:d9:f5:c8:20:cf:92:f3:c1:f4: 6f:ef:e5:84:7b:7f:72:66:71:bc:a3:da:16:9e:89: 7c:c5:bf:47:ef:56:cd:04:a1:4e:94:00:e0:0e:26: 96:32:b8:9e:8f:18:b7:2d:94:ba:59:60:d5:4f:44: 9a:73:03:b9:62:01:cb:75:87:be:41:53:4e:24:f8: 47:72:50:17:33:e6:6c:ac:1e:4b:c4:0c:50:55:e7: df:09:a6:2d:20:c9:4e:11:2e:ca:ca:f4:68:26:23: 59:2b:ff:f9:ac:f3:a1:47:ae:c8:c8:77:0f:9e:3a: c9:f3:72:ea:4b:3c:9e:4e:77:bf:e2:8a:a7:ba:30: e3:3a:c7:87:e1:cd:82:28:b2:5b:b2:fb:8f:2d:0a: 85:29:b8:ec:82:d2:ef:e8:f1:5b:58:95:47:b3:8c: 77:6e:9f:ed:75:66:47:26:00:f2:95:61:8f:64:84: 42:0d:0a:62:5f:1d:e0:60:45:f7:bb:ca:76:ab:1e: 55:7b:06:0b:5c:db:eb:d8:5a:7b:f6:6e:13:08:97: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:C0:42:E0:AA:48:88:31:72:E2:91:90:DD:CC:DA:15:BF:09:90 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8b:15:1e:34:4e:22:0d:fe:a4:e0:20:48:4e:d4:f3:16:2d: c1:4a:94:d5:5d:45:16:2b:0c:fa:a9:b0:ba:47:98:2d:26:f4: 05:87:37:d2:13:78:27:73:46:42:5e:c2:96:10:72:2f:8d:85: e1:ba:0e:74:eb:4f:4d:44:6b:aa:cd:6b:3a:cb:34:e2:8c:48: 1c:a5:ad:97:ee:de:1c:21:c7:a0:a0:a6:aa:6f:c5:c9:0d:25: cb:75:10:11:c2:c5:19:7a:cf:06:44:d6:f0:e5:bb:92:cb:ed: 29:4f:0c:01:8b:7d:df:46:c1:ea:ae:cb:8b:f5:48:55:9f:50: 93:63:2a:75:a2:5d:f7:7d:82:df:5b:ba:e7:fb:d0:94:2e:13: b3:1d:79:72:89:ac:ee:e0:0a:23:6b:b0:d3:38:39:8b:e5:6f: a6:61:49:84:71:06:c9:c6:8b:95:01:8d:97:23:08:3f:b6:fb: 75:36:30:17:c6:1d:82:a7:6e:b8:9d:e9:f5:51:9e:38:8b:a5: d7:4f:80:15:e7:40:f4:b0:57:89:50:08:6f:51:18:47:96:bf: 2d:b8:5c:35:d3:48:3c:97:48:d7:74:b1:6b:31:83:41:ed:ee: 96:d8:81:3d:60:69:14:f3:43:56:91:85:00:38:08:49:aa:6b: 09:0e:16:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjUwNzAxMDIzNTMzWhcNMjUwNzA4MDIzNTMzWjAYMRYwFAYD VQQDEw02ODYzNDk3Ni1hODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbjzIOqa24Kibr2k++bztdjQ6m/iT+pGRt0+4sXIIePbz0bTUno1UmL0rw0f U3bgM4vZ9cggz5LzwfRv7+WEe39yZnG8o9oWnol8xb9H71bNBKFOlADgDiaWMrie jxi3LZS6WWDVT0SacwO5YgHLdYe+QVNOJPhHclAXM+ZsrB5LxAxQVeffCaYtIMlO ES7KyvRoJiNZK//5rPOhR67IyHcPnjrJ83LqSzyeTne/4oqnujDjOseH4c2CKLJb svuPLQqFKbjsgtLv6PFbWJVHs4x3bp/tdWZHJgDylWGPZIRCDQpiXx3gYEX3u8p2 qx5VewYLXNvr2Fp79m4TCJdVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFVwELg qkiIMXLikZDdzNoVvwmQMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNixUeNE4iDf6k4CBITtTzFi3BSpTVXUUWKwz6qbC6R5gtJvQFhzfS E3gnc0ZCXsKWEHIvjYXhug50609NRGuqzWs6yzTijEgcpa2X7t4cIcegoKaqb8XJ DSXLdRARwsUZes8GRNbw5buSy+0pTwwBi33fRsHqrsuL9UhVn1CTYyp1ol33fYLf W7rn+9CULhOzHXlyiazu4Aoja7DTODmL5W+mYUmEcQbJxouVAY2XIwg/tvt1NjAX xh2Cp264nen1UZ44i6XXT4AV50D0sFeJUAhvURhHlr8tuFw100g8l0jXdLFrMYNB 7e6W2IE9YGkU80NWkYUAOAhJqmsJDhZc -----END CERTIFICATE-----Generated at Wed Jul 2 11:48:25 2025 by rpki-client