$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: yBjgOugNiUPLGOFmb3D8vt2GOhOjYMhT/WVs8DdnWSA= Subject key identifier: D9:04:83:15:04:6E:64:D0:1D:66:6F:A5:29:10:94:61:AB:1B:DA:B8 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 063F Signing time: Sat 14 Jun 2025 22:25:06 +0000 Manifest this update: Sat 14 Jun 2025 22:25:05 +0000 Manifest next update: Sat 21 Jun 2025 22:25:05 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: pofmPeeJ4qDfG0xFiN+tXqzMSEhOPJqyPZFulnzA7y4=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: vh0GgYCDzl5MpyGfL9qB9BZe6rjSGvbzU8V9PATHokg=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Jun 14 22:25:05 2025 GMT Not After : Jun 21 22:25:05 2025 GMT Subject: CN=684df6c2-6ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:47:6d:f8:63:a4:c0:ab:43:49:65:35:9a: 40:d3:af:d0:0c:4d:55:48:0b:c1:58:2e:30:6c:0d: 75:01:66:b2:20:de:8d:fd:3b:72:ce:1c:6d:21:f9: 6c:30:45:b4:a6:1b:00:50:9e:f5:f2:a5:dd:b9:c1: 23:cb:e9:ab:e3:f2:9a:5f:1f:55:9f:42:25:01:0a: 66:34:f6:4a:57:c0:c7:69:36:22:92:96:49:6a:1a: 94:31:01:67:77:63:21:e6:e2:af:f8:37:67:6b:47: 03:5d:c4:dc:47:19:ef:9f:57:ee:c9:7d:90:7d:5d: 1e:77:1d:e3:02:ab:55:7b:45:80:ac:11:fd:73:60: 10:a9:e8:37:22:5c:ef:2b:32:b6:76:36:c8:d0:5d: 4b:f3:a3:c4:86:20:b8:56:77:4d:72:08:f3:cb:5d: 31:73:f6:c2:90:bb:e2:11:22:03:4b:e3:7a:05:c4: 17:99:f8:aa:1c:51:4a:ff:67:fd:d9:4e:93:2e:33: 80:68:1e:df:66:ee:2a:15:54:92:99:9e:fe:81:8a: 79:0d:33:d0:88:19:4c:3d:48:4c:ad:01:c1:60:24: 21:1a:62:f3:16:28:45:99:2e:bb:32:5e:5b:d9:c5: 43:a5:f0:fa:d2:93:69:44:fb:bd:a3:da:ee:95:ce: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:04:83:15:04:6E:64:D0:1D:66:6F:A5:29:10:94:61:AB:1B:DA:B8 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2f:ca:c2:85:ab:76:9b:1e:68:ea:58:0a:f7:3c:c6:07:97: 0a:2e:5d:35:00:83:e1:3a:35:ad:b1:4e:f0:e1:3e:c6:5a:3b: b9:8c:61:54:49:e9:c1:e0:e4:a5:44:a1:08:40:6d:c5:f7:e3: ef:a8:d4:9b:41:fc:f0:ae:43:b8:90:02:0d:a9:62:5d:65:75: dd:b0:2a:51:79:e0:f1:66:d8:fd:29:a1:7a:9f:73:80:98:42: 3b:d3:a7:02:de:a5:3d:72:fd:ff:13:c3:78:fa:5b:67:29:40: ac:e8:8e:7f:c1:4e:55:8d:62:02:47:c8:83:c9:17:56:4b:a4: 29:40:9a:70:7c:b8:29:5e:16:47:2c:5f:f2:c4:54:9f:b9:dc: 78:c9:b3:9a:d7:95:7c:fb:db:ac:b1:fb:6d:0e:95:6d:4f:b2: 6d:76:59:1a:b5:d6:28:10:6d:ff:0f:7a:ef:ff:f6:2e:9a:21: 1a:5e:4d:9c:13:43:90:06:46:bd:65:fd:68:a4:7c:71:f6:e6: 52:d3:2c:05:87:3a:0e:c5:e8:77:04:20:e4:b3:b5:9e:52:bf: 26:79:d5:75:46:c9:8d:ee:6a:23:39:06:30:d5:a5:fa:7f:1d: cb:bd:c6:99:b1:86:a6:ac:1a:bd:84:96:7f:2b:4a:f0:17:15: a3:4a:0e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNjE0MjIyNTA1WhcNMjUwNjIxMjIyNTA1WjAYMRYwFAYD VQQDEw02ODRkZjZjMi02ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkhHbfhjpMCrQ0llNZpA06/QDE1VSAvBWC4wbA11AWayIN6N/TtyzhxtIfls MEW0phsAUJ718qXducEjy+mr4/KaXx9Vn0IlAQpmNPZKV8DHaTYikpZJahqUMQFn d2Mh5uKv+Ddna0cDXcTcRxnvn1fuyX2QfV0edx3jAqtVe0WArBH9c2AQqeg3Ilzv KzK2djbI0F1L86PEhiC4VndNcgjzy10xc/bCkLviESIDS+N6BcQXmfiqHFFK/2f9 2U6TLjOAaB7fZu4qFVSSmZ7+gYp5DTPQiBlMPUhMrQHBYCQhGmLzFihFmS67Ml5b 2cVDpfD60pNpRPu9o9rulc6UXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkEgxUE bmTQHWZvpSkQlGGrG9q4MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2L8rChat2mx5o6lgK9zzGB5cKLl01AIPhOjWtsU7w4T7GWju5jGFU SenB4OSlRKEIQG3F9+PvqNSbQfzwrkO4kAINqWJdZXXdsCpReeDxZtj9KaF6n3OA mEI706cC3qU9cv3/E8N4+ltnKUCs6I5/wU5VjWICR8iDyRdWS6QpQJpwfLgpXhZH LF/yxFSfudx4ybOa15V8+9ussfttDpVtT7JtdlkatdYoEG3/D3rv//YumiEaXk2c E0OQBka9Zf1opHxx9uZS0ywFhzoOxeh3BCDks7WeUr8medV1RsmN7mojOQYw1aX6 fx3LvcaZsYamrBq9hJZ/K0rwFxWjSg7e -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:35 2025 by rpki-client