$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: AWeUn27zdjz5xEkq/1KP47rqpF/zs/slZCACs0VnZwE= Subject key identifier: C7:13:18:4F:33:14:B4:D5:AF:29:F8:C2:09:5D:FE:0F:55:8E:A8:36 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 0413 Signing time: Tue 17 Jun 2025 00:00:37 +0000 Manifest this update: Tue 17 Jun 2025 00:00:37 +0000 Manifest next update: Tue 24 Jun 2025 00:00:37 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: d6/PxP5ZcXju+uG3cxu1VrjJntXn7TvMVilqLD2rDkE=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Jun 17 00:00:37 2025 GMT Not After : Jun 24 00:00:37 2025 GMT Subject: CN=6850b025-6bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:1d:a6:46:ee:54:c5:d2:04:e5:e2:f7:73: 9b:f0:8f:48:3b:95:d0:81:ab:03:14:4e:19:a1:e7: bd:8f:aa:9d:19:87:80:d7:c9:e6:3a:9f:e8:59:47: 25:ce:6c:5f:43:ed:cb:b5:d2:c5:07:c0:6a:61:5c: 31:a1:77:f7:79:1e:73:f7:65:3e:1f:f8:eb:84:db: 99:cb:ed:a3:1c:2e:ed:87:33:0e:6e:53:dc:f3:3f: f4:0a:d5:4d:5c:75:23:19:5c:1b:5f:d1:d6:5c:ac: d9:b4:0b:a5:aa:f9:88:7e:ee:68:08:ad:0f:20:77: 4e:06:17:e5:10:96:fb:56:f7:63:3d:35:e6:cf:4a: a4:97:70:4d:33:b2:ca:c3:8f:b6:49:17:0a:83:c3: 55:db:24:99:1a:c5:f8:04:89:3b:6c:0d:2f:a7:2c: d6:ad:8d:0e:72:6e:3c:c2:1e:04:58:7b:cc:7d:f6: 35:7d:a9:cb:e4:8c:b2:f1:0e:4e:e9:2e:a8:d6:20: f3:c1:52:bf:d8:73:df:c8:29:22:1a:01:58:81:d2: 97:59:8e:a9:f0:c9:02:89:fe:8c:2e:2a:4b:26:17: 70:f2:28:cb:3d:20:1a:19:e6:f2:ed:30:ff:e0:23: 79:3f:9b:ca:b6:39:a8:50:a7:79:16:3a:17:cf:48: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:18:4F:33:14:B4:D5:AF:29:F8:C2:09:5D:FE:0F:55:8E:A8:36 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b0:f8:54:11:ad:0e:61:e9:a1:bd:11:41:0f:d4:6e:b2:60: 01:c8:86:c1:62:ab:b0:47:67:a9:64:57:6c:2b:27:76:d8:cf: 5f:c3:a3:9f:a7:bb:1f:85:ec:72:e1:d1:56:c2:9a:6e:38:35: 8e:d0:0a:b5:31:25:f6:61:90:b1:70:f6:26:4f:d3:c2:81:15: bb:a3:bf:a9:5e:0c:cb:14:e8:b5:91:bc:55:86:ae:c1:12:d2: f7:e4:fd:3f:cd:19:d5:17:6d:93:bc:71:d9:d6:db:d4:5e:26: 4b:a5:54:3b:ec:a8:ee:c4:09:67:e1:6e:7b:69:43:a3:49:c4: 88:5b:9a:41:6c:9e:27:1d:95:69:c8:60:c6:a1:a5:79:7c:1d: 17:07:ec:be:e9:9d:0a:71:4d:19:3b:d4:a1:f5:19:d4:6b:1c: ec:c6:58:b2:38:01:6f:48:b3:e2:78:9d:86:43:e7:a9:ba:4e: 0a:15:34:31:8f:ec:24:ac:cc:0b:b1:67:e2:34:83:c1:47:6e: ff:6b:70:a6:f6:3f:26:15:df:44:99:5a:9d:3f:4b:2c:fb:83: fa:38:f9:5f:cd:d2:60:e8:34:17:da:f1:ed:31:7d:ff:1a:c1: 63:f4:87:9a:f9:65:81:67:22:2c:4d:5f:8c:fe:42:36:fe:36: 80:ea:7d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwNjE3MDAwMDM3WhcNMjUwNjI0MDAwMDM3WjAYMRYwFAYD VQQDEw02ODUwYjAyNS02YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h0dpkbuVMXSBOXi93Ob8I9IO5XQgasDFE4Zoee9j6qdGYeA18nmOp/oWUcl zmxfQ+3LtdLFB8BqYVwxoXf3eR5z92U+H/jrhNuZy+2jHC7thzMOblPc8z/0CtVN XHUjGVwbX9HWXKzZtAulqvmIfu5oCK0PIHdOBhflEJb7VvdjPTXmz0qkl3BNM7LK w4+2SRcKg8NV2ySZGsX4BIk7bA0vpyzWrY0Ocm48wh4EWHvMffY1fanL5Iyy8Q5O 6S6o1iDzwVK/2HPfyCkiGgFYgdKXWY6p8MkCif6MLipLJhdw8ijLPSAaGeby7TD/ 4CN5P5vKtjmoUKd5FjoXz0g3LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcTGE8z FLTVryn4wgld/g9Vjqg2MB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADsPhUEa0OYemhvRFBD9RusmAByIbBYquwR2epZFdsKyd22M9fw6Of p7sfhexy4dFWwppuODWO0Aq1MSX2YZCxcPYmT9PCgRW7o7+pXgzLFOi1kbxVhq7B EtL35P0/zRnVF22TvHHZ1tvUXiZLpVQ77KjuxAln4W57aUOjScSIW5pBbJ4nHZVp yGDGoaV5fB0XB+y+6Z0KcU0ZO9Sh9RnUaxzsxliyOAFvSLPieJ2GQ+epuk4KFTQx j+wkrMwLsWfiNIPBR27/a3Cm9j8mFd9EmVqdP0ss+4P6OPlfzdJg6DQX2vHtMX3/ GsFj9Iea+WWBZyIsTV+M/kI2/jaA6n3m -----END CERTIFICATE-----Generated at Wed Jun 18 06:54:48 2025 by rpki-client