$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: 85LCbIecAgNgQztZYMTdyn3Hl2yiKS6imMW+0Ngp/Ew= Subject key identifier: D9:C1:FF:F3:55:B0:88:2B:BC:EE:E2:28:20:8F:AD:81:0A:D8:AA:BC Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 0120 Signing time: Sat 21 Jun 2025 03:53:39 +0000 Manifest this update: Sat 21 Jun 2025 03:53:38 +0000 Manifest next update: Sat 28 Jun 2025 03:53:38 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: iGp+n/ELanU5JD+vPZoDsfN4E5u+Jyz4vPUtL0SX87E=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 03:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Jun 21 03:53:38 2025 GMT Not After : Jun 28 03:53:38 2025 GMT Subject: CN=68562cc2-66b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:6a:d8:0d:5c:f1:b4:4d:a4:a1:da:4f:e0: 1c:22:56:4c:74:e1:88:20:56:a2:d9:e0:27:25:96: be:9d:bb:90:3a:a9:9b:a0:02:1a:aa:42:b7:4e:18: df:6f:50:cc:7f:41:ee:de:f8:00:03:63:4c:83:fe: b7:40:75:5c:86:52:11:10:fc:3e:43:59:ee:09:12: 7a:17:fb:f3:99:de:09:7e:0d:80:31:6b:1f:af:73: 21:f5:e0:18:40:d4:42:ae:2d:ba:12:6c:a9:30:7e: 07:a1:bf:94:27:77:f4:ea:58:c8:7b:bf:3f:88:16: d1:a3:7a:4a:b5:61:f9:31:cd:50:00:60:32:f2:4f: 34:5d:af:71:30:7c:ab:cd:f1:af:e3:56:f5:20:c6: ad:ba:2a:e4:9b:88:fd:f6:db:65:66:ac:c8:2e:46: dc:7d:b8:6b:b6:71:b2:33:63:23:f7:dc:4a:54:7a: 41:96:dc:17:66:a4:29:02:c1:a5:9f:41:51:1f:2f: d7:8d:e2:e4:84:e3:39:3c:af:ee:28:67:35:93:07: cc:0e:c4:54:b5:0d:1c:f9:00:bc:ed:0d:05:dc:5b: cc:68:cc:15:b5:df:82:dc:f7:b0:0a:3a:21:a6:2e: b0:f2:3e:95:ae:ee:69:80:fd:f1:94:9b:c6:93:45: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:FF:F3:55:B0:88:2B:BC:EE:E2:28:20:8F:AD:81:0A:D8:AA:BC X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8f:a1:1b:bc:49:92:f1:81:00:89:7f:7a:6b:17:12:81:7a: 7a:31:fb:97:f1:3d:bd:be:4e:28:07:62:e9:42:2e:01:62:10: 9a:59:49:1f:b6:e5:b8:47:cc:ed:78:28:a9:00:f8:d0:a5:db: b5:18:ef:cd:56:f3:44:0c:01:eb:ae:07:7b:fd:a6:52:3c:7b: df:b0:ec:7a:b8:e6:e4:44:c8:d2:c8:43:c3:03:17:43:f6:13: 69:36:ec:8e:46:e8:71:34:af:1e:96:a1:3a:31:f5:6c:9d:36: 74:ef:00:b2:e5:6f:65:9e:c7:80:9f:42:dd:35:fd:9d:84:03: 95:d1:4f:27:76:22:a6:3a:8e:e9:88:05:9f:49:ca:76:60:b1: d9:6c:aa:27:2f:35:12:50:14:aa:b1:bd:01:22:9b:b9:bf:49: de:51:33:4d:b6:bb:6e:2b:ad:5a:5f:a4:96:1a:eb:58:18:97: 7f:03:eb:58:06:d6:ee:da:70:b5:6d:ea:e2:e3:cb:e8:3e:6c: 8d:00:e9:ae:ee:ef:59:e0:e6:dd:fa:d7:9e:41:14:c7:18:4a: fa:13:c0:a3:f9:4a:ca:b1:22:c3:d2:e0:42:73:2e:7e:a6:58: 8b:ce:91:5e:69:f1:c9:f5:65:42:87:d4:16:e2:ac:f9:39:6a: c1:76:a9:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwNjIxMDM1MzM4WhcNMjUwNjI4MDM1MzM4WjAYMRYwFAYD VQQDEw02ODU2MmNjMi02NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8hq2A1c8bRNpKHaT+AcIlZMdOGIIFai2eAnJZa+nbuQOqmboAIaqkK3Thjf b1DMf0Hu3vgAA2NMg/63QHVchlIREPw+Q1nuCRJ6F/vzmd4Jfg2AMWsfr3Mh9eAY QNRCri26EmypMH4Hob+UJ3f06ljIe78/iBbRo3pKtWH5Mc1QAGAy8k80Xa9xMHyr zfGv41b1IMatuirkm4j99ttlZqzILkbcfbhrtnGyM2Mj99xKVHpBltwXZqQpAsGl n0FRHy/XjeLkhOM5PK/uKGc1kwfMDsRUtQ0c+QC87Q0F3FvMaMwVtd+C3PewCjoh pi6w8j6Vru5pgP3xlJvGk0WZHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnB//NV sIgrvO7iKCCPrYEK2Kq8MB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRj6EbvEmS8YEAiX96axcSgXp6MfuX8T29vk4oB2LpQi4BYhCaWUkf tuW4R8zteCipAPjQpdu1GO/NVvNEDAHrrgd7/aZSPHvfsOx6uObkRMjSyEPDAxdD 9hNpNuyORuhxNK8elqE6MfVsnTZ07wCy5W9lnseAn0LdNf2dhAOV0U8ndiKmOo7p iAWfScp2YLHZbKonLzUSUBSqsb0BIpu5v0neUTNNtrtuK61aX6SWGutYGJd/A+tY Btbu2nC1beri48voPmyNAOmu7u9Z4Obd+teeQRTHGEr6E8Cj+UrKsSLD0uBCcy5+ pliLzpFeafHJ9WVCh9QW4qz5OWrBdqm9 -----END CERTIFICATE-----Generated at Sun Jun 22 08:58:34 2025 by rpki-client