$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: El0U5OqWeeuwQ+7T0D1q6MiCaVAqZIAsmKp6Vc2gqBc= Subject key identifier: C0:D7:64:44:84:68:2A:6F:DE:EB:EB:24:08:55:3A:CA:FA:DD:E4:F2 Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 12 Signing time: Sun 15 Jun 2025 07:08:00 +0000 Manifest this update: Sun 15 Jun 2025 07:07:59 +0000 Manifest next update: Sun 22 Jun 2025 07:07:59 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: fyq/49LKM+eo9wEXHB8LgToiy3GNuD8smXbUo/nkjNw=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Jun 15 07:07:59 2025 GMT Not After : Jun 22 07:07:59 2025 GMT Subject: CN=684e7150-5635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:88:f7:9a:de:0c:87:0e:24:d8:c2:92:85: 3b:72:9c:c0:bd:87:67:98:4e:26:bd:be:35:3f:e9: ac:84:97:9d:7e:23:0c:f6:cc:95:43:90:1f:4c:b4: 23:26:b1:8a:21:ff:2c:8d:fb:2f:83:d4:89:f0:52: 9c:2e:a3:c6:b6:c1:bb:ed:02:26:e4:8c:69:45:7c: 04:c4:7c:28:11:d3:98:80:e8:9a:8a:39:45:50:b8: bf:3d:a5:e2:70:48:8d:7f:bb:c0:82:e8:98:47:71: f8:a2:63:7d:5b:db:0a:89:b6:bf:00:ba:12:7a:a4: 42:f0:93:13:3f:20:ff:55:e9:92:2d:27:a4:0f:6f: eb:32:17:7f:c5:13:b6:87:30:98:22:ee:aa:43:38: 87:af:10:91:e0:68:fd:db:b5:a0:06:72:f5:08:67: 66:0f:b2:5d:5a:27:38:a4:08:b1:98:52:65:ca:d6: 55:4c:0a:86:ac:cf:1d:b7:7f:0e:3c:f1:79:09:1f: f2:36:2c:bd:0a:75:8a:2d:e5:bc:8a:ad:70:2a:df: 7d:1c:d9:2e:92:41:65:1f:c7:64:95:15:dd:1e:40: ea:e8:33:ae:b1:5d:80:83:c9:80:b9:3a:ec:82:0d: 20:3a:48:06:67:be:54:ca:60:10:a8:48:24:29:53: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:64:44:84:68:2A:6F:DE:EB:EB:24:08:55:3A:CA:FA:DD:E4:F2 X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bd:b3:d5:3f:de:24:e5:cb:85:24:21:23:26:8d:1a:24:86: c5:00:0f:cf:d4:36:ba:cc:50:96:5d:45:50:fd:fb:90:27:52: 59:8f:0a:55:df:8c:cf:84:f6:8d:f4:fa:45:d2:9d:bb:3e:08: aa:01:76:a9:bf:d2:e4:16:49:48:ae:a7:ea:5a:ac:2a:55:0c: c4:ea:3c:6f:57:f1:36:71:ff:e4:b1:fe:9b:a4:2d:07:0c:87: 9a:98:47:44:2c:93:52:fe:c7:7e:e5:7d:84:df:2b:a8:ba:31: dc:f8:0b:55:91:15:8e:02:85:01:db:7a:f1:25:68:18:32:9d: 08:ec:01:ec:a9:eb:6e:05:63:31:90:80:a8:31:b6:4b:54:91: b0:4f:1a:22:43:26:dc:f6:d0:f1:39:4f:a3:19:30:cd:6a:48: b7:49:2c:40:44:04:09:20:af:b7:d6:d6:db:63:82:60:f4:49: 94:83:a5:72:b1:bf:83:c3:ae:c1:c2:83:d6:24:d9:36:a9:66: ed:6c:c9:7b:34:2d:e2:d9:7b:25:0f:eb:2d:54:e5:ad:41:04: 11:6e:0d:ae:52:bd:0d:a3:40:4a:ba:e5:dd:2c:12:41:80:1b: 85:19:2e:94:81:66:60:ae:b7:98:a9:ff:b4:19:96:ce:41:a5: 1d:d9:b2:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTA2MTUwNzA3NTlaFw0yNTA2MjIwNzA3NTlaMBgxFjAUBgNV BAMTDTY4NGU3MTUwLTU2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9poj3mt4Mhw4k2MKShTtynMC9h2eYTia9vjU/6ayEl51+Iwz2zJVDkB9MtCMm sYoh/yyN+y+D1InwUpwuo8a2wbvtAibkjGlFfATEfCgR05iA6JqKOUVQuL89peJw SI1/u8CC6JhHcfiiY31b2wqJtr8AuhJ6pELwkxM/IP9V6ZItJ6QPb+syF3/FE7aH MJgi7qpDOIevEJHgaP3btaAGcvUIZ2YPsl1aJzikCLGYUmXK1lVMCoaszx23fw48 8XkJH/I2LL0KdYot5byKrXAq330c2S6SQWUfx2SVFd0eQOroM66xXYCDyYC5OuyC DSA6SAZnvlTKYBCoSCQpU1T1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwNdkRIRo Km/e6+skCFU6yvrd5PIwHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIG9s9U/3iTly4UkISMmjRokhsUAD8/UNrrMUJZdRVD9+5AnUlmPClXf jM+E9o30+kXSnbs+CKoBdqm/0uQWSUiup+parCpVDMTqPG9X8TZx/+Sx/pukLQcM h5qYR0Qsk1L+x37lfYTfK6i6Mdz4C1WRFY4ChQHbevElaBgynQjsAeyp624FYzGQ gKgxtktUkbBPGiJDJtz20PE5T6MZMM1qSLdJLEBEBAkgr7fW1ttjgmD0SZSDpXKx v4PDrsHCg9Yk2TapZu1syXs0LeLZeyUP6y1U5a1BBBFuDa5SvQ2jQEq65d0sEkGA G4UZLpSBZmCut5ip/7QZls5BpR3ZshY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:25 2025 by rpki-client