$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: eOt1ioKj3QFF6lqVnPLIEOUGxAfHExSR9Q4c+UIKVx0= Subject key identifier: 04:69:AE:60:CB:A7:B6:91:C1:1D:BF:1D:55:43:82:D0:6B:38:B9:DF Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 0819 Signing time: Wed 18 Jun 2025 20:39:36 +0000 Manifest this update: Wed 18 Jun 2025 20:39:35 +0000 Manifest next update: Wed 25 Jun 2025 20:39:35 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: IOcayeGcMNNaDXB0ImANE3xzvo+qb3MYwVTkgi10ixk=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: IgMQ6bjceMEjNxtoYsUzqIdvcKKluE/pVcpXGCEMr1A=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Jun 18 20:39:35 2025 GMT Not After : Jun 25 20:39:35 2025 GMT Subject: CN=68532408-b563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:96:17:56:47:05:96:f5:cc:5c:78:64:a4: 01:78:ba:5f:be:8e:0f:a7:b3:d3:e1:c5:0e:c7:0e: de:4a:40:47:8d:dc:9c:b6:88:0b:d1:0e:a7:59:97: 12:d8:b6:51:6c:ea:67:e7:74:41:c1:3a:82:3e:6e: 2c:cc:a6:a1:47:2a:9f:2c:27:7d:5a:a0:e3:0e:df: b6:7a:63:a8:c7:bf:7e:33:13:98:52:66:57:2d:74: 2d:b5:13:d2:7a:ed:c7:cc:1e:fa:31:f1:ec:d7:bb: 15:9c:e3:59:c4:ed:a0:17:8a:59:96:1c:55:fd:06: bd:b4:a3:71:96:08:f2:ac:16:bc:97:b9:e7:3c:c7: ab:8b:63:42:ff:6a:65:f4:c3:cd:75:8d:2e:09:0d: 0b:f7:ef:78:90:4a:3d:47:22:ad:eb:11:e5:49:f7: 4e:be:2b:16:42:64:aa:83:e1:c3:63:4e:c0:e5:c2: e2:da:3c:1c:0b:30:19:b6:97:9d:6d:c6:b4:cc:00: a7:a8:cf:7d:9c:b4:4b:a7:23:37:50:d8:e0:61:68: 56:d6:77:a4:9d:8e:9d:50:82:6f:44:6e:44:e9:43: a2:7d:a6:9b:ce:9d:ea:b7:0b:84:85:41:f7:2d:94: 07:bd:a2:9c:62:6b:59:54:f5:fa:e9:6c:e0:43:82: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:AE:60:CB:A7:B6:91:C1:1D:BF:1D:55:43:82:D0:6B:38:B9:DF X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f2:6c:13:87:1c:6c:ca:74:07:9a:5c:03:26:d1:18:a3:3e: ee:ec:6a:76:a9:ad:cd:0b:6b:55:89:cb:5c:ca:f7:07:aa:70: ab:90:83:64:5f:59:aa:f2:2e:d6:1a:ad:74:45:44:79:40:ea: 6e:0e:13:2a:e8:22:11:4a:63:12:e7:20:b4:08:df:c3:af:49: ef:6a:35:b1:17:d0:03:e8:4f:8a:7f:53:5b:16:57:6c:59:4c: 14:3d:50:0f:ad:eb:1b:ea:78:df:41:3b:f1:40:99:15:d7:cb: b8:3b:c1:b5:0a:40:bf:84:2b:0a:e0:a8:14:64:c0:d8:e3:af: e5:b1:3f:42:fb:4f:b7:c0:09:4f:28:65:54:ad:8e:b5:9d:14: 82:fb:47:72:85:13:c0:53:74:cb:41:91:00:2c:a4:c0:b0:3c: a0:88:21:0d:cb:3a:35:4b:4e:e4:ae:16:77:41:bd:89:5b:2e: 44:83:7e:f2:dd:4a:ef:0c:be:5a:31:47:b4:8d:b0:b7:02:48: 5d:c5:d6:7e:92:c1:65:91:91:dd:8f:2e:89:f0:ce:96:ab:ab: 23:50:c0:6d:a2:62:7c:87:23:0e:97:dd:3e:f0:b3:ca:c5:9c: e7:e2:ee:77:de:d5:91:d6:20:ef:52:50:05:7e:18:25:5b:b5: 6a:99:3a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNjE4MjAzOTM1WhcNMjUwNjI1MjAzOTM1WjAYMRYwFAYD VQQDEw02ODUzMjQwOC1iNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bWWF1ZHBZb1zFx4ZKQBeLpfvo4Pp7PT4cUOxw7eSkBHjdyctogL0Q6nWZcS 2LZRbOpn53RBwTqCPm4szKahRyqfLCd9WqDjDt+2emOox79+MxOYUmZXLXQttRPS eu3HzB76MfHs17sVnONZxO2gF4pZlhxV/Qa9tKNxlgjyrBa8l7nnPMeri2NC/2pl 9MPNdY0uCQ0L9+94kEo9RyKt6xHlSfdOvisWQmSqg+HDY07A5cLi2jwcCzAZtped bca0zACnqM99nLRLpyM3UNjgYWhW1neknY6dUIJvRG5E6UOifaabzp3qtwuEhUH3 LZQHvaKcYmtZVPX66WzgQ4JxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARprmDL p7aRwR2/HVVDgtBrOLnfMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ8mwThxxsynQHmlwDJtEYoz7u7Gp2qa3NC2tVictcyvcHqnCrkINk X1mq8i7WGq10RUR5QOpuDhMq6CIRSmMS5yC0CN/Dr0nvajWxF9AD6E+Kf1NbFlds WUwUPVAPresb6njfQTvxQJkV18u4O8G1CkC/hCsK4KgUZMDY46/lsT9C+0+3wAlP KGVUrY61nRSC+0dyhRPAU3TLQZEALKTAsDygiCENyzo1S07krhZ3Qb2JWy5Eg37y 3UrvDL5aMUe0jbC3AkhdxdZ+ksFlkZHdjy6J8M6Wq6sjUMBtomJ8hyMOl90+8LPK xZzn4u533tWR1iDvUlAFfhglW7VqmTp/ -----END CERTIFICATE-----Generated at Thu Jun 19 11:05:21 2025 by rpki-client