$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: Vm5g/8NdbMbQMWJmooj+Sfevk3L8/6kSUIugmHCG8YU= Subject key identifier: 5A:C4:57:6B:83:D0:FF:4E:21:6B:8C:97:AD:D6:B8:83:75:E1:25:C9 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 86 Signing time: Fri 13 Jun 2025 05:35:59 +0000 Manifest this update: Fri 13 Jun 2025 05:35:59 +0000 Manifest next update: Fri 20 Jun 2025 05:35:59 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: yvaeRd+FUU8HB0eSW3bTcf4FlD4VBdTppCR0kORseoA=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Jun 13 05:35:59 2025 GMT Not After : Jun 20 05:35:59 2025 GMT Subject: CN=684bb8bf-94fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:a5:a3:99:22:a7:04:ee:37:0c:05:71:b3: 7a:f3:32:eb:72:f4:4f:52:aa:84:db:a1:19:25:43: ef:ab:38:2b:9c:4e:32:8d:73:b8:18:15:39:d7:10: 25:04:c6:3c:ce:da:6d:28:5b:31:f3:b1:1b:56:25: 6d:df:c8:dd:53:a9:aa:9f:08:8d:ec:0c:c3:60:78: b6:e2:c2:9c:d1:5d:d2:e0:74:ad:80:0a:5a:38:74: 69:a9:2a:c1:6f:ab:4d:c5:95:d6:e4:ee:ea:81:87: 57:8e:89:b4:6e:c5:aa:07:a1:01:8b:ad:02:46:27: 1d:63:d2:51:43:65:de:91:df:1e:73:33:2e:f3:38: 59:98:e6:da:ce:87:59:c2:11:30:22:82:51:a3:ed: 29:5d:ed:29:90:48:4c:7f:b6:4c:4c:ca:76:23:f7: 59:b7:38:c2:36:6d:92:89:7c:35:cb:16:e1:63:ed: 0c:8c:62:60:69:e0:26:b7:94:65:df:7f:fb:c9:76: dc:ef:22:0f:d1:42:54:09:0a:04:63:54:f8:3d:9b: 04:82:7a:65:74:dc:50:38:29:cf:64:2f:df:e7:3a: 30:95:36:ce:25:66:7b:e4:c8:2b:86:b7:62:0a:d3: 97:30:37:b9:25:7d:cb:1a:44:27:bc:8b:5b:6e:35: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C4:57:6B:83:D0:FF:4E:21:6B:8C:97:AD:D6:B8:83:75:E1:25:C9 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f9:a9:fd:25:90:3f:b5:1d:ca:0b:7a:96:f3:fa:9b:91:18: 00:ea:1d:cd:ca:45:af:01:e0:85:08:b3:7e:7e:fa:98:62:8d: 9d:15:b6:60:b9:19:c5:e1:70:4f:1f:7a:4f:1e:81:a7:13:d5: ca:76:31:8a:1d:a1:f9:8c:04:da:e4:45:a8:54:33:42:de:48: 85:d5:6b:e6:7c:ef:bd:86:2b:00:5f:db:76:99:92:ca:e6:3a: 10:00:85:8a:71:94:de:76:6a:17:b0:7e:c7:91:77:55:5b:01: d1:40:e6:c1:d1:c3:d3:8a:21:16:ed:9c:30:04:63:a6:82:90: 98:04:36:44:60:97:99:47:74:56:0b:51:4b:64:ba:81:d4:30: 08:85:d6:79:a8:78:0a:72:f7:85:cd:c5:e8:3d:5d:3b:67:a5: 43:ae:33:27:d5:6b:77:ca:98:f1:20:ab:03:85:65:bd:97:99: be:62:8e:8a:d9:07:9a:06:48:f6:e3:22:61:0a:de:0c:79:b5: 80:ff:84:70:be:62:e0:8c:a7:89:b9:76:b8:ac:92:82:4b:8d: 68:d2:68:58:c1:60:0c:19:97:2f:da:45:27:fa:93:75:87:78: 64:85:73:b9:e6:64:88:89:70:37:b6:3a:16:a6:a6:db:ac:f9: 25:77:10:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUwNjEzMDUzNTU5WhcNMjUwNjIwMDUzNTU5WjAYMRYwFAYD VQQDEw02ODRiYjhiZi05NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ2lo5kipwTuNwwFcbN68zLrcvRPUqqE26EZJUPvqzgrnE4yjXO4GBU51xAl BMY8ztptKFsx87EbViVt38jdU6mqnwiN7AzDYHi24sKc0V3S4HStgApaOHRpqSrB b6tNxZXW5O7qgYdXjom0bsWqB6EBi60CRicdY9JRQ2Xekd8eczMu8zhZmObazodZ whEwIoJRo+0pXe0pkEhMf7ZMTMp2I/dZtzjCNm2SiXw1yxbhY+0MjGJgaeAmt5Rl 33/7yXbc7yIP0UJUCQoEY1T4PZsEgnpldNxQOCnPZC/f5zowlTbOJWZ75Mgrhrdi CtOXMDe5JX3LGkQnvItbbjWqvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrEV2uD 0P9OIWuMl63WuIN14SXJMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0+an9JZA/tR3KC3qW8/qbkRgA6h3NykWvAeCFCLN+fvqYYo2dFbZg uRnF4XBPH3pPHoGnE9XKdjGKHaH5jATa5EWoVDNC3kiF1WvmfO+9hisAX9t2mZLK 5joQAIWKcZTedmoXsH7HkXdVWwHRQObB0cPTiiEW7ZwwBGOmgpCYBDZEYJeZR3RW C1FLZLqB1DAIhdZ5qHgKcveFzcXoPV07Z6VDrjMn1Wt3ypjxIKsDhWW9l5m+Yo6K 2QeaBkj24yJhCt4MebWA/4RwvmLgjKeJuXa4rJKCS41o0mhYwWAMGZcv2kUn+pN1 h3hkhXO55mSIiXA3tjoWpqbbrPkldxA5 -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:03 2025 by rpki-client