$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: XMDjq4pESCrVYXyxii7I0b18DcA4zSDEBc/np8OH2KA= Subject key identifier: 96:2A:67:2E:DE:96:4B:6C:E2:02:3B:8B:F8:CE:78:46:6C:FC:D6:D1 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0B71 Signing time: Sat 14 Jun 2025 18:54:30 +0000 Manifest this update: Sat 14 Jun 2025 18:54:30 +0000 Manifest next update: Sat 21 Jun 2025 18:54:30 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: GdVDvwD+dYDDBfmas/lfTR64fxZmotMifP2MNR7OkhQ=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Jun 14 18:54:30 2025 GMT Not After : Jun 21 18:54:30 2025 GMT Subject: CN=684dc566-17ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:fe:0a:a0:5e:47:4d:22:30:5c:ea:b3:96: c8:ec:32:24:7d:19:36:30:68:8a:df:ee:cd:68:c8: 92:1e:d3:75:a8:7a:cc:47:ef:8a:a6:10:19:8b:1d: ca:ae:a9:f4:92:85:ba:2b:a3:de:54:74:c6:0c:bf: 2c:16:9e:54:75:21:65:79:08:db:16:62:9b:ab:d1: 21:d0:50:27:57:6c:ce:7c:ee:27:02:55:e5:00:56: cc:b9:d1:d9:d7:8b:00:aa:95:59:64:dd:01:07:b4: 8c:89:26:81:04:2a:b2:0f:4e:2c:5d:fa:68:c8:21: 96:c0:28:79:82:9e:5f:85:3a:5c:6a:2b:8f:cd:6f: 4e:27:f6:3b:11:0c:fc:8c:0c:8d:d4:3d:2f:27:7f: ac:b3:1f:11:aa:85:f7:83:49:7a:ef:c2:8e:ec:b6: 0e:6a:49:57:fb:e1:7a:27:a8:bd:5a:89:88:a8:97: 9f:b8:60:eb:88:c8:20:ad:39:e0:c7:a6:c8:9b:ac: f8:44:06:f2:2d:4f:3c:1c:2b:7a:17:f7:63:54:b1: 72:a6:61:fd:12:05:36:0a:6b:6b:94:0b:17:a2:5c: 13:77:08:1d:c9:83:2a:c6:ec:bf:07:3f:40:cc:57: e0:0a:81:20:86:37:ea:a9:fb:e0:e9:c6:94:2f:b0: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:67:2E:DE:96:4B:6C:E2:02:3B:8B:F8:CE:78:46:6C:FC:D6:D1 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c7:1c:3e:57:1d:97:45:f1:44:52:83:cd:40:1a:ee:4c:90: 56:ad:fe:d1:8c:b0:2f:a2:44:27:bb:50:97:06:cf:1a:94:25: 86:cb:4b:88:de:33:f8:78:10:a1:ac:dc:88:fb:95:4a:89:06: 67:08:82:a8:62:ec:c5:0a:af:72:f5:d1:f8:db:2a:49:0e:7f: c6:da:8c:14:48:46:d0:1c:a5:73:05:65:0e:c5:b0:53:81:a5: ae:48:a7:a7:63:58:59:e3:44:ff:14:d0:5b:29:81:ec:da:e5: 61:ce:8c:8a:9a:bb:39:90:77:be:a8:c1:05:22:f7:b1:85:10: 99:71:58:6b:41:23:31:dc:93:f2:db:12:37:c3:b9:81:4d:71: 99:13:1b:1c:7b:7b:9d:96:9c:76:e1:98:90:b6:e9:71:89:60: 90:67:56:43:f2:44:f8:04:fd:92:e9:4f:c2:31:60:ed:49:13: 12:8d:c2:f8:69:c5:08:cb:17:a7:3e:14:2e:64:97:ce:a4:17: 2a:44:d8:00:2d:d0:17:45:fd:37:bf:44:b7:86:e3:5d:ce:58: c9:61:7c:27:11:59:a5:ca:62:e5:10:d0:7e:ca:b6:7e:30:19: 17:1e:0c:63:e8:f5:6a:ff:2d:ca:f2:4b:84:fe:47:04:8c:6c: 7a:37:ca:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUwNjE0MTg1NDMwWhcNMjUwNjIxMTg1NDMwWjAYMRYwFAYD VQQDEw02ODRkYzU2Ni0xN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ3+CqBeR00iMFzqs5bI7DIkfRk2MGiK3+7NaMiSHtN1qHrMR++KphAZix3K rqn0koW6K6PeVHTGDL8sFp5UdSFleQjbFmKbq9Eh0FAnV2zOfO4nAlXlAFbMudHZ 14sAqpVZZN0BB7SMiSaBBCqyD04sXfpoyCGWwCh5gp5fhTpcaiuPzW9OJ/Y7EQz8 jAyN1D0vJ3+ssx8RqoX3g0l678KO7LYOaklX++F6J6i9WomIqJefuGDriMggrTng x6bIm6z4RAbyLU88HCt6F/djVLFypmH9EgU2CmtrlAsXolwTdwgdyYMqxuy/Bz9A zFfgCoEghjfqqfvg6caUL7DYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYqZy7e lkts4gI7i/jOeEZs/NbRMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbxxw+Vx2XRfFEUoPNQBruTJBWrf7RjLAvokQnu1CXBs8alCWGy0uI 3jP4eBChrNyI+5VKiQZnCIKoYuzFCq9y9dH42ypJDn/G2owUSEbQHKVzBWUOxbBT gaWuSKenY1hZ40T/FNBbKYHs2uVhzoyKmrs5kHe+qMEFIvexhRCZcVhrQSMx3JPy 2xI3w7mBTXGZExsce3udlpx24ZiQtulxiWCQZ1ZD8kT4BP2S6U/CMWDtSRMSjcL4 acUIyxenPhQuZJfOpBcqRNgALdAXRf03v0S3huNdzljJYXwnEVmlymLlENB+yrZ+ MBkXHgxj6PVq/y3K8kuE/kcEjGx6N8pt -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:18 2025 by rpki-client