$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: zZBLDrgYTyMPJ1Va6rq0WP3nTj8iVuaaUApGyo5A6tg= Subject key identifier: D4:AE:CE:80:A3:D9:CC:E0:2A:C4:3C:4F:15:35:13:90:D0:76:28:BA Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 0150 Signing time: Sun 15 Jun 2025 03:20:39 +0000 Manifest this update: Sun 15 Jun 2025 03:20:39 +0000 Manifest next update: Sun 22 Jun 2025 03:20:39 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: GQYAZF6MFM1zrg+0TwpEh8oRHj5glVLaWNziQTpq9Nw=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Jun 15 03:20:39 2025 GMT Not After : Jun 22 03:20:39 2025 GMT Subject: CN=684e3c07-a390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c6:0d:11:ea:69:6a:b7:21:da:2d:7a:bc:9d: b4:77:49:0f:af:c5:42:97:d9:53:16:88:a1:dd:32: ec:26:b3:37:6a:ff:a1:1e:d8:74:0e:79:c0:da:be: c8:1e:83:e0:3e:8f:63:8a:6e:c2:2e:53:a6:c5:dc: 97:bb:bb:ee:fd:84:8e:42:47:5e:23:44:6d:d0:6e: eb:db:33:a5:3e:a8:46:90:4e:26:e2:e2:3a:1a:ae: b0:d1:42:b5:b6:78:c3:ca:5b:a5:7c:f4:e3:90:5f: a9:a1:ea:02:6a:ba:6e:14:e4:f1:2c:7b:81:a9:28: 83:c6:a0:9f:75:5c:d4:c2:9b:2e:71:e0:84:73:2b: a7:14:fc:d9:41:9e:42:2a:92:ad:44:ab:9c:81:af: 64:8e:99:8f:64:e4:b5:c7:ea:96:5f:51:e0:77:d2: f6:2e:3f:5f:86:57:27:63:c9:63:fc:19:f4:23:87: f1:77:c6:4e:25:c6:54:49:15:48:89:3e:57:df:8e: 68:c7:4d:dd:61:82:43:d0:7f:f7:a3:09:dd:75:e8: e5:46:e9:a4:5b:ac:5d:9d:fc:f0:2e:88:bf:ad:a8: 07:1c:04:fe:12:09:75:8b:84:4a:1c:41:83:9c:65: ab:2c:6c:ef:b0:e2:cb:d6:87:ff:22:62:24:af:90: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AE:CE:80:A3:D9:CC:E0:2A:C4:3C:4F:15:35:13:90:D0:76:28:BA X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:26:96:62:dd:19:0d:91:c5:37:2b:b9:0b:73:30:48:59: 71:ff:5e:98:55:59:94:ac:31:1d:ce:aa:0a:a8:53:9d:73:b5: 6c:a4:81:7a:71:93:50:38:16:e6:75:dd:fc:6a:cd:58:d1:e1: ed:9c:28:33:a7:99:ed:a5:b2:2a:52:2b:07:4b:46:42:49:9b: 1f:b5:5f:49:5a:16:80:da:d1:3f:c7:68:6a:86:cb:78:28:e0: 00:68:90:77:1d:4b:2b:3a:e7:f4:e7:c7:cf:d3:01:ce:77:19: ea:60:e5:64:29:4a:90:0e:c3:18:6f:53:3c:b7:bb:78:6f:27: 48:37:0d:aa:77:cc:ac:bb:a5:dc:60:84:0e:1d:94:58:a5:74: a6:2f:76:ad:67:2f:fe:f0:55:d7:46:48:93:3e:fc:b9:09:af: ac:7e:c2:14:65:47:af:da:05:b2:8c:30:18:4f:88:fb:ea:8f: a6:34:94:20:9b:5f:e5:51:d9:ca:18:7d:b0:82:5b:5f:43:33: 23:63:a1:23:28:6f:d5:99:97:81:83:d9:74:4b:6f:95:8a:ce: 9a:a0:66:08:13:58:5f:fc:5f:0b:0b:a5:8e:2f:18:81:58:fa: 41:af:22:00:3a:a4:4d:d1:73:c3:b5:d7:46:dc:4b:b0:04:97: 48:f3:ee:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNjE1MDMyMDM5WhcNMjUwNjIyMDMyMDM5WjAYMRYwFAYD VQQDEw02ODRlM2MwNy1hMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsYNEepparch2i16vJ20d0kPr8VCl9lTFoih3TLsJrM3av+hHth0DnnA2r7I HoPgPo9jim7CLlOmxdyXu7vu/YSOQkdeI0Rt0G7r2zOlPqhGkE4m4uI6Gq6w0UK1 tnjDylulfPTjkF+poeoCarpuFOTxLHuBqSiDxqCfdVzUwpsuceCEcyunFPzZQZ5C KpKtRKucga9kjpmPZOS1x+qWX1Hgd9L2Lj9fhlcnY8lj/Bn0I4fxd8ZOJcZUSRVI iT5X345ox03dYYJD0H/3ownddejlRumkW6xdnfzwLoi/ragHHAT+Egl1i4RKHEGD nGWrLGzvsOLL1of/ImIkr5BnpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSuzoCj 2czgKsQ8TxU1E5DQdii6MB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnsiaWYt0ZDZHFNyu5C3MwSFlx/16YVVmUrDEdzqoKqFOdc7VspIF6 cZNQOBbmdd38as1Y0eHtnCgzp5ntpbIqUisHS0ZCSZsftV9JWhaA2tE/x2hqhst4 KOAAaJB3HUsrOuf058fP0wHOdxnqYOVkKUqQDsMYb1M8t7t4bydINw2qd8ysu6Xc YIQOHZRYpXSmL3atZy/+8FXXRkiTPvy5Ca+sfsIUZUev2gWyjDAYT4j76o+mNJQg m1/lUdnKGH2wgltfQzMjY6EjKG/VmZeBg9l0S2+Vis6aoGYIE1hf/F8LC6WOLxiB WPpBryIAOqRN0XPDtddG3EuwBJdI8+4G -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:46 2025 by rpki-client