$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: NxD5ZzMO877kfGTbA/RbtsG0wPeDFPeDuF9AXT5pXW0= Subject key identifier: CD:C0:38:61:C5:26:B6:BA:23:AC:24:92:F0:87:97:85:B6:9D:37:68 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: D1 Signing time: Sun 15 Jun 2025 04:49:06 +0000 Manifest this update: Sun 15 Jun 2025 04:49:06 +0000 Manifest next update: Sun 22 Jun 2025 04:49:06 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: o/o+HLs1z11Se+8NBZ3gjv8cbVz4JeuEN8CAsAs2xBs=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Jun 15 04:49:06 2025 GMT Not After : Jun 22 04:49:06 2025 GMT Subject: CN=684e50c2-8488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:66:3c:ad:d4:f6:f2:40:f6:cf:36:d8:74: c9:d2:47:e5:cc:29:75:43:4c:89:fe:ef:33:f2:4f: 0d:4f:df:6e:cc:82:ba:73:c4:d9:a5:3b:e0:f0:e2: c0:37:10:54:f7:ff:06:17:44:8e:85:8d:4c:a6:fb: 95:26:ab:f1:2a:59:1d:b1:40:aa:87:b0:55:d2:68: c7:41:0c:9d:e9:b1:c5:6c:e1:28:04:18:16:e2:9f: 91:af:f4:81:9f:12:65:b8:5b:02:0f:5a:6d:4c:b3: be:cf:6a:b3:40:2e:ed:7e:17:f5:a8:35:94:3b:ab: 37:bb:69:07:72:86:b6:76:cd:b5:67:70:78:a5:dd: 45:b5:18:9d:b2:e7:23:92:cc:07:45:d2:79:e5:fa: 7d:ec:1e:b2:46:ed:c4:2e:aa:ce:8f:26:10:3e:1f: b7:73:14:ac:cd:01:d6:db:39:c3:ce:64:02:d9:f1: 36:91:25:8c:19:f8:9f:f5:ad:be:fd:99:f5:ab:c8: ad:31:95:33:e3:85:9a:68:a8:04:0a:7d:ae:4f:02: 03:e2:54:93:7f:a0:25:f3:f0:35:a8:93:73:f8:57: a6:f5:db:bf:d2:b9:da:50:16:b9:6a:26:c5:4d:0f: 3a:e0:43:72:ff:79:80:ca:78:65:46:a1:83:07:73: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:38:61:C5:26:B6:BA:23:AC:24:92:F0:87:97:85:B6:9D:37:68 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:19:0b:6f:80:5f:ae:a9:ee:32:a8:d8:90:0f:09:42:37: e1:97:5a:7d:a0:01:b0:25:2a:98:79:b7:8c:78:33:9c:76:31: d6:08:68:62:80:50:ab:2b:4e:9d:22:1e:5e:22:8e:5f:6e:38: 63:c2:e3:7a:e0:44:18:72:8c:ac:3d:d3:e6:b5:d6:a9:7c:66: 8e:21:3d:1b:55:14:72:63:bf:92:fa:91:8b:4e:f5:04:ad:dd: 78:44:e9:80:7f:60:a5:5e:49:df:3d:f2:f9:ae:f4:10:55:fa: 83:5a:68:f2:be:cc:5a:11:48:6a:57:5b:87:5b:77:32:a9:a3: 51:7d:7c:14:e6:3e:65:b8:1a:84:0d:27:1f:03:6e:21:46:f7: dd:a4:6f:7b:bf:26:7f:aa:14:73:34:fe:96:96:39:79:4e:a3: 7b:e0:1a:a3:7d:d8:65:fe:f9:b8:7d:43:08:5f:1f:9c:40:4f: 41:c4:10:94:1e:4a:5e:6d:01:b3:8b:52:9c:13:d3:4a:1e:94: c6:bb:95:f3:2f:f2:6d:9c:5d:b3:5b:32:6a:56:ef:76:fd:60: af:6f:50:12:70:7b:65:1e:6b:7e:89:ff:35:42:c8:2a:9b:da: 72:69:ce:b0:15:7f:dc:4d:0c:cd:50:75:d7:db:3d:6f:6b:58: 6e:d2:8f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUwNjE1MDQ0OTA2WhcNMjUwNjIyMDQ0OTA2WjAYMRYwFAYD VQQDEw02ODRlNTBjMi04NDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslJmPK3U9vJA9s822HTJ0kflzCl1Q0yJ/u8z8k8NT99uzIK6c8TZpTvg8OLA NxBU9/8GF0SOhY1MpvuVJqvxKlkdsUCqh7BV0mjHQQyd6bHFbOEoBBgW4p+Rr/SB nxJluFsCD1ptTLO+z2qzQC7tfhf1qDWUO6s3u2kHcoa2ds21Z3B4pd1FtRidsucj kswHRdJ55fp97B6yRu3ELqrOjyYQPh+3cxSszQHW2znDzmQC2fE2kSWMGfif9a2+ /Zn1q8itMZUz44WaaKgECn2uTwID4lSTf6Al8/A1qJNz+Fem9du/0rnaUBa5aibF TQ864ENy/3mAynhlRqGDB3OelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3AOGHF Jra6I6wkkvCHl4W2nTdoMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmSxkLb4BfrqnuMqjYkA8JQjfhl1p9oAGwJSqYebeMeDOcdjHWCGhi gFCrK06dIh5eIo5fbjhjwuN64EQYcoysPdPmtdapfGaOIT0bVRRyY7+S+pGLTvUE rd14ROmAf2ClXknfPfL5rvQQVfqDWmjyvsxaEUhqV1uHW3cyqaNRfXwU5j5luBqE DScfA24hRvfdpG97vyZ/qhRzNP6Wljl5TqN74Bqjfdhl/vm4fUMIXx+cQE9BxBCU HkpebQGzi1KcE9NKHpTGu5XzL/JtnF2zWzJqVu92/WCvb1AScHtlHmt+if81Qsgq m9pyac6wFX/cTQzNUHXX2z1va1hu0o99 -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:17 2025 by rpki-client