$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: 2unFsrsIs4Esm/+eEx3uFgXRI3LIwcc6lTG9bVNiscU= Subject key identifier: 66:DA:75:EF:60:60:EE:6D:F4:1C:1B:5B:8C:13:00:44:CC:57:40:6F Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C50 Signing time: Mon 30 Jun 2025 18:37:00 +0000 Manifest this update: Mon 30 Jun 2025 18:36:59 +0000 Manifest next update: Mon 07 Jul 2025 18:36:59 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: MqmI1nGXPUk1WDdGQ0CDeMo+eRnDZ6VphueqGUEtGyE=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Jun 30 18:36:59 2025 GMT Not After : Jul 7 18:36:59 2025 GMT Subject: CN=6862d94c-d3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:c4:aa:22:6b:ea:44:0b:71:13:e3:b8:a7: 79:3a:51:9f:0e:0f:b0:eb:2d:91:c5:76:51:9d:4a: b8:42:9d:df:0a:15:a6:13:ed:84:c1:a5:25:9b:a9: d4:29:c4:d9:2c:cb:6b:16:5c:e6:3d:7a:b1:6d:b3: 59:0c:7c:5a:47:1d:9a:71:32:27:f4:ed:05:6c:7b: da:6c:4c:41:96:00:13:5e:8c:70:3b:e5:39:e4:f2: 33:73:8e:04:26:1f:71:a0:f3:cc:87:68:c2:6e:ef: 8b:c7:eb:97:e8:50:0b:45:ef:5c:b0:43:8d:fb:fc: 79:83:23:f8:6a:94:0f:c7:5b:65:bc:bc:83:12:ad: d2:9f:1b:c3:85:11:ef:9d:a2:8e:34:87:d2:6e:52: 71:35:03:c2:52:12:a4:0a:7f:7f:fd:f5:48:52:b3: 43:ed:b2:37:55:1f:48:1b:11:1c:ee:e8:bb:c2:ee: 7e:3e:65:cf:27:5d:db:f3:11:22:72:6e:3d:f3:c2: 27:6e:32:68:c6:49:c0:91:d9:4b:cd:c9:c0:8d:61: 25:56:c7:29:b1:8c:bf:39:28:f0:81:cf:ec:d2:9b: 82:7b:86:27:57:f3:b4:e4:9f:34:23:0c:4e:a1:96: e5:32:bd:77:4a:9d:c4:12:6f:4f:e4:d6:43:85:8d: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:75:EF:60:60:EE:6D:F4:1C:1B:5B:8C:13:00:44:CC:57:40:6F X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:db:d4:98:41:5b:10:6f:06:ea:e9:5a:24:30:4f:82:5e:22: 81:06:1f:28:5e:b2:55:55:1d:45:a1:ca:a5:a3:d2:96:f7:82: 80:13:d0:7d:9c:3d:7d:46:6c:ee:ff:40:1c:bf:b5:01:7b:98: 1f:a5:ea:88:1f:bb:53:71:4a:02:e3:a3:e2:98:91:ff:3d:c1: f4:45:37:eb:65:4b:64:f5:6a:c5:05:fe:55:92:85:45:ae:9b: 94:02:d8:08:44:6c:b4:d3:49:16:e4:fc:60:4b:fb:50:a0:ff: 13:f1:e6:8b:60:86:15:37:16:4a:d5:13:12:9d:f0:ec:6c:28: d1:3a:0e:a1:56:6d:2a:f1:00:2d:2d:c2:10:54:38:7a:bd:33: 0f:ec:f2:2d:0c:80:d8:1e:ca:a5:6d:97:84:05:02:60:da:8c: 97:17:1f:b8:42:22:48:b6:5f:b8:e0:fb:ee:97:fd:be:88:83: 84:d2:a3:fb:af:11:a1:de:80:d7:d3:bb:f7:ac:02:2f:ff:98: 0a:cc:9c:ce:ed:4b:e0:e0:ad:b3:36:52:4d:93:54:59:6c:4f: c9:3d:23:ad:b1:2e:24:92:fe:ed:58:75:40:28:7b:05:93:9a: 27:eb:4d:58:ae:aa:be:93:a4:e2:86:0c:83:80:a6:9f:24:64: 68:49:68:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwNjMwMTgzNjU5WhcNMjUwNzA3MTgzNjU5WjAYMRYwFAYD VQQDEw02ODYyZDk0Yy1kM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6fEqiJr6kQLcRPjuKd5OlGfDg+w6y2RxXZRnUq4Qp3fChWmE+2EwaUlm6nU KcTZLMtrFlzmPXqxbbNZDHxaRx2acTIn9O0FbHvabExBlgATXoxwO+U55PIzc44E Jh9xoPPMh2jCbu+Lx+uX6FALRe9csEON+/x5gyP4apQPx1tlvLyDEq3SnxvDhRHv naKONIfSblJxNQPCUhKkCn9//fVIUrND7bI3VR9IGxEc7ui7wu5+PmXPJ13b8xEi cm4988InbjJoxknAkdlLzcnAjWElVscpsYy/OSjwgc/s0puCe4YnV/O05J80IwxO oZblMr13Sp3EEm9P5NZDhY17zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbade9g YO5t9BwbW4wTAETMV0BvMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI29SYQVsQbwbq6VokME+CXiKBBh8oXrJVVR1Focqlo9KW94KAE9B9 nD19Rmzu/0Acv7UBe5gfpeqIH7tTcUoC46PimJH/PcH0RTfrZUtk9WrFBf5VkoVF rpuUAtgIRGy000kW5PxgS/tQoP8T8eaLYIYVNxZK1RMSnfDsbCjROg6hVm0q8QAt LcIQVDh6vTMP7PItDIDYHsqlbZeEBQJg2oyXFx+4QiJItl+44Pvul/2+iIOE0qP7 rxGh3oDX07v3rAIv/5gKzJzO7Uvg4K2zNlJNk1RZbE/JPSOtsS4kkv7tWHVAKHsF k5on601Yrqq+k6TihgyDgKafJGRoSWiM -----END CERTIFICATE-----Generated at Tue Jul 1 11:28:25 2025 by rpki-client