$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: n2CbTJiAlAqk/LujvCByaurEhZBJcBYIgxN3Ua5dP7o= Subject key identifier: D8:6F:EB:C0:C0:06:2D:62:07:B1:FB:BD:58:6D:F5:28:CE:DF:5C:7E Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 1B Signing time: Fri 13 Jun 2025 06:48:37 +0000 Manifest this update: Fri 13 Jun 2025 06:48:36 +0000 Manifest next update: Fri 20 Jun 2025 06:48:36 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: ZnuqV925URT7+PpYRSJAO6Wr6nky4iMxy4sKj19MG7s=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Jun 13 06:48:36 2025 GMT Not After : Jun 20 06:48:36 2025 GMT Subject: CN=684bc9c5-1b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:16:c1:bc:81:46:07:ac:e2:0d:95:04:8a: 1f:03:fc:cc:4b:6d:6f:d2:22:46:00:af:83:83:8d: 00:b3:d3:f9:52:69:f2:f4:43:8b:05:a3:bd:5c:e1: 3c:dc:19:c4:50:17:41:04:f9:75:43:4e:1c:8f:cb: a1:04:e4:ac:b9:4c:8b:95:d3:74:ec:14:c6:46:bf: 1d:e2:c5:7a:56:3b:c4:1c:72:23:70:df:4f:df:85: bb:6a:47:99:30:92:26:f7:b5:f5:f4:e5:04:80:16: 24:35:cd:d6:dd:1b:fc:11:f6:61:4e:71:47:47:d1: d2:06:63:f7:89:e6:99:c5:cc:eb:2c:89:9a:46:6d: b8:70:66:09:0b:a8:1f:99:03:36:1a:ae:a0:ee:cf: 9e:4d:9b:7f:b9:01:a7:a0:b7:79:bb:ea:7c:fd:fe: 28:76:41:1d:be:52:77:19:8b:ed:a7:ed:f7:c6:35: d0:31:f3:12:16:7e:d8:31:2a:c9:c6:4f:f9:14:70: 1e:b5:6c:9f:e0:7a:d3:61:90:27:78:a1:59:d1:a1: 8a:db:45:da:80:12:e1:cc:54:ec:83:84:88:83:15: f5:50:01:93:df:17:d3:e3:90:81:4f:40:b0:b5:b8: 99:ef:84:95:92:a0:3c:4d:c5:79:dd:f7:04:34:d2: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:EB:C0:C0:06:2D:62:07:B1:FB:BD:58:6D:F5:28:CE:DF:5C:7E X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f2:b2:77:16:fa:44:cc:3a:9f:1f:c2:24:90:e6:20:04:a1: 7f:6f:28:02:cf:8f:91:20:6a:0d:b0:ef:07:21:e2:d6:c0:df: e2:37:f3:23:9d:f1:c9:cc:0d:68:74:e3:5d:84:e8:08:ed:a6: c1:5d:b7:8a:42:81:63:2a:d8:76:ea:6f:4b:79:83:0d:9f:39: 97:e7:dc:d4:3d:83:d3:b2:ec:23:90:40:e3:85:d8:ae:96:ae: 59:87:a6:41:d0:e3:54:f2:6d:af:65:34:7e:b8:c4:86:c5:b6: 80:5b:c9:ff:25:99:45:1b:1f:20:f0:b2:5c:53:aa:c7:3a:90: 1b:cd:29:b5:54:18:a3:e2:5c:f1:8b:26:9d:22:54:09:83:16: 39:88:6a:2f:89:ab:15:63:67:10:a2:c4:70:2f:a3:38:84:4e: 1c:c9:d5:b7:d9:da:94:b8:a6:9e:a3:e7:0f:89:0f:a6:d4:a3: ef:6f:79:2f:bd:42:aa:c5:0a:79:e0:e5:fa:29:4d:ba:8f:19: 84:c9:5d:f9:33:e6:d6:dd:68:4a:b1:dc:5d:85:8d:b7:a3:bc: d5:b4:e2:40:7b:f4:51:5b:ab:e3:c6:6f:36:ae:84:51:21:d7: 8a:be:84:ae:7d:42:bf:58:f7:d2:8e:5f:23:7a:2a:b7:86:00: 6e:9c:ed:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA2MTMwNjQ4MzZaFw0yNTA2MjAwNjQ4MzZaMBgxFjAUBgNV BAMTDTY4NGJjOWM1LTFiMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxhBbBvIFGB6ziDZUEih8D/MxLbW/SIkYAr4ODjQCz0/lSafL0Q4sFo71c4Tzc GcRQF0EE+XVDThyPy6EE5Ky5TIuV03TsFMZGvx3ixXpWO8QcciNw30/fhbtqR5kw kib3tfX05QSAFiQ1zdbdG/wR9mFOcUdH0dIGY/eJ5pnFzOssiZpGbbhwZgkLqB+Z AzYarqDuz55Nm3+5Aaegt3m76nz9/ih2QR2+UncZi+2n7ffGNdAx8xIWftgxKsnG T/kUcB61bJ/getNhkCd4oVnRoYrbRdqAEuHMVOyDhIiDFfVQAZPfF9PjkIFPQLC1 uJnvhJWSoDxNxXnd9wQ00kThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2G/rwMAG LWIHsfu9WG31KM7fXH4wHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjysncW+kTMOp8fwiSQ5iAEoX9vKALPj5Egag2w7wch4tbA3+I38yOd 8cnMDWh0412E6AjtpsFdt4pCgWMq2Hbqb0t5gw2fOZfn3NQ9g9Oy7COQQOOF2K6W rlmHpkHQ41Tyba9lNH64xIbFtoBbyf8lmUUbHyDwslxTqsc6kBvNKbVUGKPiXPGL Jp0iVAmDFjmIai+JqxVjZxCixHAvoziEThzJ1bfZ2pS4pp6j5w+JD6bUo+9veS+9 QqrFCnng5fopTbqPGYTJXfkz5tbdaEqx3F2FjbejvNW04kB79FFbq+PGbzauhFEh 14q+hK59Qr9Y99KOXyN6KreGAG6c7Q4= -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:04 2025 by rpki-client