$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: VmphU6/f3Vr8porCjEYcatoLdjCufW8sMaXmmxD2OZ8= Subject key identifier: 86:BB:15:A5:5F:BE:94:48:A4:56:CB:B9:80:56:D4:CE:20:3A:23:77 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0170 Signing time: Thu 03 Jul 2025 03:56:50 +0000 Manifest this update: Thu 03 Jul 2025 03:56:49 +0000 Manifest next update: Thu 10 Jul 2025 03:56:49 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: K5IvFz34SVlrXUwkYzhYvu7l6lYPOQ9n2Dy+M19teOg=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Jul 3 03:56:49 2025 GMT Not After : Jul 10 03:56:49 2025 GMT Subject: CN=6865ff81-edd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:1c:3c:49:0c:35:bb:24:ec:9a:a4:44:f3: 1c:b3:62:49:29:8e:63:ec:05:99:94:04:c3:64:65: 62:45:2b:98:89:52:c6:5f:31:2a:0e:c4:36:17:5f: 62:5d:b4:9c:3b:3b:c3:0d:56:ec:aa:14:2c:6e:81: 5f:0b:b7:af:65:70:3f:da:12:5f:0a:a4:02:41:ad: 4d:97:71:a4:d2:53:a6:e0:f4:07:ab:be:36:53:43: 96:48:a1:1e:ff:c8:47:b2:13:5f:ef:62:d1:0b:20: 42:3b:45:3d:5e:fc:23:43:59:7a:ae:84:15:53:05: ef:e4:ab:42:a6:92:76:94:11:db:4d:86:a0:d0:f8: bd:f4:00:e3:90:f5:f6:97:4e:a8:d4:6b:b0:9c:3a: da:c8:c2:19:5b:46:d8:b2:47:19:e8:7b:1f:2c:ab: cc:10:ae:c5:ea:d7:2c:6d:73:03:0d:8c:20:58:32: e5:62:56:0a:98:88:44:f5:85:54:ac:99:df:3c:ac: b4:42:40:d9:43:3d:ff:ce:e7:be:14:f4:1e:f3:25: b5:a6:24:e4:55:4e:3b:25:a6:51:72:31:e6:74:8d: 2a:0d:cc:a6:d6:fd:f4:5f:21:5f:c6:d0:be:cc:71: a5:61:ae:92:19:94:57:56:64:b2:d3:34:0f:13:60: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BB:15:A5:5F:BE:94:48:A4:56:CB:B9:80:56:D4:CE:20:3A:23:77 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:81:5c:04:84:14:7f:5d:4f:97:fc:bf:4b:db:54:34:06:2c: ba:f7:9a:89:b8:82:77:cb:fc:5d:7d:c3:b3:a5:16:4a:6b:56: 40:91:f5:8b:76:bf:75:e2:71:05:83:96:3b:18:7b:da:19:75: 66:b1:aa:e5:df:5f:60:33:5a:75:97:b1:d5:bd:3a:5d:b2:9e: 93:52:d2:2b:a4:ba:c3:1f:fc:88:e0:18:95:c4:12:cd:1e:e2: 9a:66:8b:57:d5:84:e0:5b:fe:ea:9b:c1:79:c8:e6:20:2f:cd: 85:ab:34:5b:fe:96:19:aa:de:19:5b:65:51:cf:4d:d9:c8:cb: 41:49:1e:c8:29:81:0b:d6:b5:ed:00:18:fb:85:0b:fd:4f:49: c1:10:a9:f8:34:b1:01:2e:93:fe:b9:6f:17:68:ec:1d:ca:3e: 27:d2:a2:10:34:13:58:87:dc:97:25:f6:8d:7b:ff:73:99:44: 25:e9:df:63:e9:b0:d2:93:64:ae:3e:98:bf:7b:66:f6:ce:c6: c6:12:3b:12:ea:a5:f3:26:42:da:6d:8f:c8:81:34:e5:78:27: 30:df:87:9d:7b:15:f3:d7:64:f9:a4:3a:42:37:3e:e8:e8:7b: e6:79:f8:0a:55:8c:d0:7c:40:e1:f3:b6:63:21:7f:b6:97:83: 92:90:4e:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNzAzMDM1NjQ5WhcNMjUwNzEwMDM1NjQ5WjAYMRYwFAYD VQQDEw02ODY1ZmY4MS1lZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfkcPEkMNbsk7JqkRPMcs2JJKY5j7AWZlATDZGViRSuYiVLGXzEqDsQ2F19i XbScOzvDDVbsqhQsboFfC7evZXA/2hJfCqQCQa1Nl3Gk0lOm4PQHq742U0OWSKEe /8hHshNf72LRCyBCO0U9XvwjQ1l6roQVUwXv5KtCppJ2lBHbTYag0Pi99ADjkPX2 l06o1GuwnDrayMIZW0bYskcZ6HsfLKvMEK7F6tcsbXMDDYwgWDLlYlYKmIhE9YVU rJnfPKy0QkDZQz3/zue+FPQe8yW1piTkVU47JaZRcjHmdI0qDcym1v30XyFfxtC+ zHGlYa6SGZRXVmSy0zQPE2CJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIa7FaVf vpRIpFbLuYBW1M4gOiN3MB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8gVwEhBR/XU+X/L9L21Q0Biy695qJuIJ3y/xdfcOzpRZKa1ZAkfWL dr914nEFg5Y7GHvaGXVmsarl319gM1p1l7HVvTpdsp6TUtIrpLrDH/yI4BiVxBLN HuKaZotX1YTgW/7qm8F5yOYgL82FqzRb/pYZqt4ZW2VRz03ZyMtBSR7IKYEL1rXt ABj7hQv9T0nBEKn4NLEBLpP+uW8XaOwdyj4n0qIQNBNYh9yXJfaNe/9zmUQl6d9j 6bDSk2SuPpi/e2b2zsbGEjsS6qXzJkLabY/IgTTleCcw34edexXz12T5pDpCNz7o 6HvmefgKVYzQfEDh87ZjIX+2l4OSkE49 -----END CERTIFICATE-----Generated at Thu Jul 3 09:01:17 2025 by rpki-client