$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: hnjTkDg77MARwelM1poVbqY3tIjQdWjSlWPEdxk/9x8= Subject key identifier: 57:0C:3E:74:B7:DE:E6:7A:B5:03:49:F8:77:5D:50:CF:3E:14:4C:1F Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01D6 Signing time: Fri 13 Jun 2025 01:57:41 +0000 Manifest this update: Fri 13 Jun 2025 01:57:41 +0000 Manifest next update: Fri 20 Jun 2025 01:57:41 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: h+QXJeOZrVeVJQhMnilsi4gdJ9MxYyxpAfLbl0waBk8=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Jun 13 01:57:41 2025 GMT Not After : Jun 20 01:57:41 2025 GMT Subject: CN=684b8595-51c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:33:bf:c6:5a:c4:a7:2c:96:56:cc:e6:8c: 59:27:71:e8:73:a0:11:89:2b:61:ab:f4:65:90:ec: 54:65:6e:52:b8:13:25:dc:53:47:ee:ce:ca:f7:0b: c0:cf:19:a8:f1:c5:a3:9f:59:6e:00:52:63:c7:d0: 3c:ce:b8:ec:56:02:ab:8f:d0:51:a5:b4:56:20:62: e8:38:16:c3:01:58:4a:f3:a6:74:f0:19:c3:2c:b6: 18:a7:f8:1d:2f:5c:2c:2a:f9:0b:c9:2e:f0:00:eb: 65:fc:c4:eb:77:b7:a6:3a:14:6f:70:1a:e0:f2:08: 5b:4f:9e:ce:5b:a2:05:3c:a6:d5:1d:20:38:94:36: c4:79:5d:23:af:3d:3e:fd:46:7d:07:69:b9:d6:27: 4b:aa:2d:7b:09:5c:a0:cc:2c:a7:fe:3a:71:55:0b: 0b:1e:5d:71:38:b1:46:c1:53:42:15:f7:c9:bc:ef: d9:3f:fc:51:19:ac:66:1d:60:cc:93:17:02:d3:41: 05:78:59:94:7d:2c:9f:67:ff:f9:5a:02:42:c4:a1: fb:cc:05:02:f8:84:d3:bd:19:75:7d:c5:a6:07:7e: d0:3d:ee:26:88:71:d6:ce:5f:47:b1:fb:0a:63:4b: 20:df:75:ee:a6:1e:86:61:3d:ab:16:83:32:97:57: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:3E:74:B7:DE:E6:7A:B5:03:49:F8:77:5D:50:CF:3E:14:4C:1F X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:22:22:48:7e:9b:5f:02:ef:7e:85:8d:88:34:e2:c7:0f:29: 00:0e:b2:43:75:f3:17:3f:84:b1:67:b6:fb:cf:c4:03:aa:60: 9d:cc:e2:f2:a1:5c:3b:38:2a:ff:e4:5b:a9:ad:06:08:8f:1b: 9e:ad:9f:9d:33:6d:ba:83:96:18:be:09:b9:e7:2f:91:69:30: 57:fd:9c:a6:0b:65:4b:5b:a2:3b:5f:d1:97:92:91:99:0b:90: 77:7f:1c:b7:7b:35:26:2b:fa:00:6e:a4:c9:99:87:61:d3:ac: 79:fc:b6:0d:35:8d:73:ee:d7:8b:26:e7:8b:69:c9:0d:4f:3b: 4d:2e:7e:be:f9:5a:b3:be:44:36:9b:11:d5:76:d2:ec:42:92: 54:d9:28:9b:79:93:ab:c2:80:8d:86:f2:48:8b:27:0b:3b:e2: 38:40:a8:8a:3e:6f:a7:61:5c:80:14:d9:70:73:c4:fa:ad:99: 48:02:ff:f2:d3:22:47:bb:e4:47:56:1e:49:80:4b:6d:ef:b7: 95:c3:72:e5:bd:22:9a:ce:59:e6:f1:2e:8d:f7:5b:82:c6:76: 0c:3c:60:b0:cd:41:ca:db:a7:d9:5b:9c:17:19:07:40:43:c6: 30:36:3a:ec:d6:93:0a:48:23:f0:b3:27:1b:9c:37:de:fd:12: 80:6e:92:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNjEzMDE1NzQxWhcNMjUwNjIwMDE1NzQxWjAYMRYwFAYD VQQDEw02ODRiODU5NS01MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/0zv8ZaxKcsllbM5oxZJ3Hoc6ARiSthq/RlkOxUZW5SuBMl3FNH7s7K9wvA zxmo8cWjn1luAFJjx9A8zrjsVgKrj9BRpbRWIGLoOBbDAVhK86Z08BnDLLYYp/gd L1wsKvkLyS7wAOtl/MTrd7emOhRvcBrg8ghbT57OW6IFPKbVHSA4lDbEeV0jrz0+ /UZ9B2m51idLqi17CVygzCyn/jpxVQsLHl1xOLFGwVNCFffJvO/ZP/xRGaxmHWDM kxcC00EFeFmUfSyfZ//5WgJCxKH7zAUC+ITTvRl1fcWmB37QPe4miHHWzl9HsfsK Y0sg33Xuph6GYT2rFoMyl1dNcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcMPnS3 3uZ6tQNJ+HddUM8+FEwfMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4IiJIfptfAu9+hY2INOLHDykADrJDdfMXP4SxZ7b7z8QDqmCdzOLy oVw7OCr/5FuprQYIjxuerZ+dM226g5YYvgm55y+RaTBX/ZymC2VLW6I7X9GXkpGZ C5B3fxy3ezUmK/oAbqTJmYdh06x5/LYNNY1z7teLJueLackNTztNLn6++VqzvkQ2 mxHVdtLsQpJU2SibeZOrwoCNhvJIiycLO+I4QKiKPm+nYVyAFNlwc8T6rZlIAv/y 0yJHu+RHVh5JgEtt77eVw3LlvSKazlnm8S6N91uCxnYMPGCwzUHK26fZW5wXGQdA Q8YwNjrs1pMKSCPwsycbnDfe/RKAbpJt -----END CERTIFICATE-----Generated at Sat Jun 14 17:58:34 2025 by rpki-client