$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: Kr/Fn1Fh6IvqZ73Lj9ISNNAj4Y5sBN3gKNkT118fndk= Subject key identifier: 61:8F:5D:3B:82:B5:EE:84:72:42:26:55:D3:78:98:A0:03:04:26:13 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 0299 Signing time: Fri 13 Jun 2025 01:08:07 +0000 Manifest this update: Fri 13 Jun 2025 01:08:06 +0000 Manifest next update: Fri 20 Jun 2025 01:08:06 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: edjfvfCAcN6V7nUtpf3oFc9HnitOde1PZlLOIysqUfs=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: +DAM4u0XWzGXzujdBmpBOJBuyDMu2NVi0XXcoENn480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Jun 13 01:08:06 2025 GMT Not After : Jun 20 01:08:06 2025 GMT Subject: CN=684b79f6-4c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:7a:1d:7e:8d:f7:04:a6:96:4c:b5:24:cb: a2:da:c7:8a:12:87:73:ba:20:01:b3:49:ee:5f:a6: 95:84:d8:97:19:29:6b:d7:a5:8b:0e:00:c0:5e:3d: 03:5a:49:16:a8:98:5a:3d:4c:c5:38:99:67:58:84: f2:26:ff:d5:67:9b:d0:fe:e7:ad:38:98:fe:25:1c: 6f:7c:fd:c2:0f:35:1f:64:3c:61:92:b7:9a:81:9c: b7:a9:e6:cc:28:8b:a1:51:57:49:7c:69:91:7b:4a: 9a:48:8d:94:d0:44:1e:f0:24:0f:8b:51:7b:e4:6b: 95:2b:e1:72:c4:be:48:ad:cb:73:3d:0d:30:fe:77: 9b:a4:fe:88:a3:d5:c5:06:90:ba:c0:88:67:0f:b1: a0:7a:8f:93:09:bb:00:4b:dc:75:25:58:df:dc:34: 62:c2:ff:7c:87:e6:ca:e5:80:63:e0:5d:2b:c9:c2: 50:26:6d:5a:c9:c8:0b:e6:3e:e2:7e:39:09:0e:e6: 67:60:2e:d1:3a:0c:28:be:1d:e6:98:73:9e:5d:cd: 54:be:6a:9a:ae:0a:cf:c6:b5:87:ba:62:2e:2e:a8: 5e:dd:3a:13:6e:99:c2:a2:80:15:1e:29:66:a9:e7: de:f1:45:eb:36:f3:c3:ac:b9:03:22:0c:e1:88:6e: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8F:5D:3B:82:B5:EE:84:72:42:26:55:D3:78:98:A0:03:04:26:13 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:79:8c:2a:8d:01:11:41:24:ae:59:56:f7:c8:b6:22:fa:ee: ee:a7:d2:9d:37:21:03:44:a0:c4:12:bb:26:f0:a2:4d:bf:c1: 96:b3:e9:55:d6:75:88:3e:3e:5e:38:e0:32:92:fa:1f:fb:9c: aa:27:32:93:61:c5:53:46:3e:4e:ff:74:6c:23:1f:f7:7c:1d: 54:6d:73:94:95:b9:2f:83:bc:10:e0:db:2b:dc:0a:5b:41:2c: f6:33:49:cf:69:dc:78:0c:d6:84:84:9e:74:cc:b4:e0:61:cc: 29:e2:63:71:92:6e:87:36:ec:04:ea:62:f6:4e:21:a3:da:5c: 4d:87:d7:31:b4:e3:bd:6a:3b:5c:be:91:f3:82:4f:8a:68:db: dc:a1:c2:c1:87:a8:25:e4:36:b9:99:fb:d7:8d:74:8b:e4:b5: c3:ea:47:de:be:c0:2e:f9:e5:54:97:9a:35:f8:2c:7f:ae:1d: b3:40:bc:ca:d0:7a:c6:6f:86:a0:21:c1:30:90:8a:21:b5:aa: 22:8c:46:29:2a:b1:e8:17:39:1b:e0:68:98:92:84:ff:b4:1a: 4f:31:48:a5:bc:a3:4c:df:26:65:8c:95:48:53:74:db:38:63: e9:5e:fb:3c:b1:bb:3f:0a:54:ce:0a:dd:6b:ba:30:80:a7:ef: e3:6c:7f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUwNjEzMDEwODA2WhcNMjUwNjIwMDEwODA2WjAYMRYwFAYD VQQDEw02ODRiNzlmNi00Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllZ6HX6N9wSmlky1JMui2seKEodzuiABs0nuX6aVhNiXGSlr16WLDgDAXj0D WkkWqJhaPUzFOJlnWITyJv/VZ5vQ/uetOJj+JRxvfP3CDzUfZDxhkreagZy3qebM KIuhUVdJfGmRe0qaSI2U0EQe8CQPi1F75GuVK+FyxL5IrctzPQ0w/nebpP6Io9XF BpC6wIhnD7Ggeo+TCbsAS9x1JVjf3DRiwv98h+bK5YBj4F0rycJQJm1aycgL5j7i fjkJDuZnYC7ROgwovh3mmHOeXc1UvmqargrPxrWHumIuLqhe3ToTbpnCooAVHilm qefe8UXrNvPDrLkDIgzhiG4A7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGPXTuC te6EckImVdN4mKADBCYTMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVeYwqjQERQSSuWVb3yLYi+u7up9KdNyEDRKDEErsm8KJNv8GWs+lV 1nWIPj5eOOAykvof+5yqJzKTYcVTRj5O/3RsIx/3fB1UbXOUlbkvg7wQ4Nsr3Apb QSz2M0nPadx4DNaEhJ50zLTgYcwp4mNxkm6HNuwE6mL2TiGj2lxNh9cxtOO9ajtc vpHzgk+KaNvcocLBh6gl5Da5mfvXjXSL5LXD6kfevsAu+eVUl5o1+Cx/rh2zQLzK 0HrGb4agIcEwkIohtaoijEYpKrHoFzkb4GiYkoT/tBpPMUilvKNM3yZljJVIU3Tb OGPpXvs8sbs/ClTOCt1rujCAp+/jbH/y -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:40 2025 by rpki-client