$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: CFR0uWjH4/IWCWNxVKtXiTrNCl39TekTTVluf2aPojM= Subject key identifier: 33:32:13:C2:02:69:D1:A8:04:ED:F0:16:3E:89:20:40:1C:EF:6A:73 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 36 Signing time: Sun 15 Jun 2025 06:50:46 +0000 Manifest this update: Sun 15 Jun 2025 06:50:45 +0000 Manifest next update: Sun 22 Jun 2025 06:50:45 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: RVRLV74xb2H1g6iy8KtQni8T/jNyVNXareFj+MsPasY=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jun 15 06:50:45 2025 GMT Not After : Jun 22 06:50:45 2025 GMT Subject: CN=684e6d46-ee82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:8a:b1:7c:50:12:a9:c0:31:45:ad:77:c3: 07:87:d0:30:18:6b:8a:5b:bf:36:18:c3:d7:71:5f: 4f:68:04:c4:df:8f:b5:2e:74:1d:0f:8b:d5:08:c5: 3b:50:59:24:dd:39:30:4b:b7:21:b2:b7:f3:57:4e: 4f:b3:58:3e:78:26:7f:13:f3:d0:3f:67:63:d0:58: 98:4f:e3:b7:7e:8a:98:47:e0:24:32:da:53:dc:ea: 82:af:5a:11:ff:97:2c:a1:3c:70:11:99:31:73:cd: 6e:39:d6:9d:fb:47:c0:61:d9:f2:e7:69:ef:c8:b9: f7:a0:fb:81:c4:b2:e6:8f:1a:e0:c6:14:f4:c0:bf: e8:79:01:0f:2c:d2:72:ec:eb:9f:56:fb:98:7e:05: 5e:49:e2:32:0e:64:ef:3d:67:dc:8d:cd:47:d4:5a: ff:59:32:dc:1f:5c:a9:a2:78:08:bb:82:50:51:aa: 45:08:16:db:3b:75:ec:f9:6e:6a:31:a0:22:26:d5: 0c:75:85:42:8c:d0:88:4b:28:f2:03:b7:a6:1d:da: 42:60:7d:80:b9:16:7c:b5:c1:d4:6f:05:d2:28:e1: d9:2a:68:29:20:34:23:3f:cb:cf:6a:43:44:04:91: b9:8b:34:26:62:59:d0:3a:01:b9:70:bd:88:a0:6f: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:32:13:C2:02:69:D1:A8:04:ED:F0:16:3E:89:20:40:1C:EF:6A:73 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1e:a2:46:d2:5f:2f:d9:07:b8:10:90:de:67:cd:5d:fa:c8: aa:d2:40:f4:7c:b7:8b:68:76:16:0c:23:73:87:23:e4:99:1f: d7:60:7a:32:45:22:95:db:51:19:0b:13:2e:bc:97:bc:4a:dc: 2d:04:1a:db:d1:8d:3f:23:ef:b0:a0:02:b4:d2:11:01:f7:13: a7:bf:ba:92:49:3b:2e:be:f6:c4:ca:91:b7:c7:04:07:cd:72: 14:d6:4e:4c:6a:8b:d9:1c:54:a4:1d:bc:44:d5:b9:55:5b:71: c0:ac:8e:e4:b9:1a:b2:05:10:fd:cc:6d:98:10:1d:05:22:44: 83:3a:ce:10:17:7a:0d:24:0d:24:b5:47:7f:8c:6a:a0:b1:6c: 4c:d9:c1:8d:e5:c1:ce:44:2d:0d:16:a5:b5:f1:cd:eb:46:43: b8:33:8c:77:3a:60:5a:68:f1:5a:b3:ad:45:eb:56:b9:fc:3d: 7c:25:18:7a:53:87:3d:ab:ce:e2:65:51:dd:c8:b4:ea:b1:72: 9b:2f:bc:72:99:64:64:6f:a8:8b:c2:e2:c1:6b:99:b2:c0:f0: fd:6a:ef:55:1d:c7:90:88:9e:19:18:78:6e:0e:cc:c3:e8:58: 73:5d:ab:2a:fc:82:71:a6:e9:0f:6c:0b:10:6c:82:fa:b1:d5: d8:fd:94:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA2MTUwNjUwNDVaFw0yNTA2MjIwNjUwNDVaMBgxFjAUBgNV BAMTDTY4NGU2ZDQ2LWVlODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUBIqxfFASqcAxRa13wweH0DAYa4pbvzYYw9dxX09oBMTfj7UudB0Pi9UIxTtQ WSTdOTBLtyGyt/NXTk+zWD54Jn8T89A/Z2PQWJhP47d+iphH4CQy2lPc6oKvWhH/ lyyhPHARmTFzzW451p37R8Bh2fLnae/Iufeg+4HEsuaPGuDGFPTAv+h5AQ8s0nLs 659W+5h+BV5J4jIOZO89Z9yNzUfUWv9ZMtwfXKmieAi7glBRqkUIFts7dez5bmox oCIm1Qx1hUKM0IhLKPIDt6Yd2kJgfYC5Fny1wdRvBdIo4dkqaCkgNCM/y89qQ0QE kbmLNCZiWdA6AblwvYigb4HBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMzITwgJp 0agE7fAWPokgQBzvanMwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGEeokbSXy/ZB7gQkN5nzV36yKrSQPR8t4todhYMI3OHI+SZH9dgejJF IpXbURkLEy68l7xK3C0EGtvRjT8j77CgArTSEQH3E6e/upJJOy6+9sTKkbfHBAfN chTWTkxqi9kcVKQdvETVuVVbccCsjuS5GrIFEP3MbZgQHQUiRIM6zhAXeg0kDSS1 R3+MaqCxbEzZwY3lwc5ELQ0WpbXxzetGQ7gzjHc6YFpo8VqzrUXrVrn8PXwlGHpT hz2rzuJlUd3ItOqxcpsvvHKZZGRvqIvC4sFrmbLA8P1q71Udx5CInhkYeG4OzMPo WHNdqyr8gnGm6Q9sCxBsgvqx1dj9lA4= -----END CERTIFICATE-----Generated at Tue Jun 17 07:52:21 2025 by rpki-client