$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: Ecjag1kdxFbX+rYdW/1TClUZSMXN2iT/aPiNtoHwM44= Subject key identifier: 6A:62:08:AA:BE:BA:0E:C3:E5:5E:5D:CA:6A:AD:58:22:C3:68:43:F9 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 062C Signing time: Sat 14 Jun 2025 22:31:41 +0000 Manifest this update: Sat 14 Jun 2025 22:31:41 +0000 Manifest next update: Sat 21 Jun 2025 22:31:41 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: 5g86AD07/Fw1yUY5+tLaY2zl2Q7IaILpYkXz6uY4qo0=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Jun 14 22:31:41 2025 GMT Not After : Jun 21 22:31:41 2025 GMT Subject: CN=684df84d-05d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:77:19:bf:92:b8:1d:cd:5d:8d:9e:d7:2a: dd:1b:29:b5:db:cd:52:c1:ad:f4:b6:e1:4b:68:c4: 22:d3:12:f7:4b:62:aa:bb:4b:0f:ba:49:98:39:ad: 2d:ac:ea:88:66:53:22:8b:66:47:63:38:da:ce:f6: 63:35:a9:b4:11:f6:e0:02:45:66:3b:1d:34:5e:17: e0:bc:e8:58:6f:1f:61:b1:c4:46:17:ef:68:ba:03: 7d:ab:48:b1:a3:4e:75:8b:70:b6:f3:64:60:cc:2c: e9:ca:5c:31:23:34:1b:d1:af:c9:18:a9:17:09:2f: 65:d9:e9:eb:15:ed:ea:58:49:3f:b8:a3:fe:f0:b5: 00:dd:5a:c0:2c:ee:a1:12:be:ed:0b:9f:51:e7:38: e0:f3:01:37:7b:0d:33:5b:e3:ff:6e:04:00:82:29: aa:40:ac:2d:8d:7a:8c:ea:bc:65:d2:43:6a:02:6c: c6:f6:10:0e:25:77:07:c3:3d:3f:29:3d:29:fa:a4: cc:22:af:15:4c:2b:c0:9e:b7:5a:15:88:ad:6f:70: ed:68:9f:43:0b:26:35:7f:39:9d:7f:cb:f8:70:02: ca:07:dc:c7:b3:ac:2b:94:b7:12:b9:75:09:28:84: 96:e3:2d:ab:37:7d:91:5c:93:8b:1d:73:1b:bd:aa: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:08:AA:BE:BA:0E:C3:E5:5E:5D:CA:6A:AD:58:22:C3:68:43:F9 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3e:fb:8a:41:b1:05:cd:ef:0e:36:74:37:6a:58:88:63:0d: fd:18:48:7e:3d:b7:45:01:68:2f:65:18:bf:6d:4b:68:7e:aa: a2:a8:b9:3d:d4:fd:16:7a:56:6d:e7:a1:7a:5a:77:7f:49:13: 68:e6:46:15:40:bb:96:f7:18:67:ed:90:9c:00:9c:e1:2f:82: 24:d6:14:97:61:57:a1:1b:9c:e8:0f:09:d0:4f:88:19:36:5e: 4b:18:b6:2c:47:3a:4e:60:d8:42:5e:bf:7e:35:96:1c:5e:83: fe:49:0e:d9:12:e4:a4:c3:76:12:46:ee:35:1a:02:e3:25:f8: 87:d6:fa:e7:9f:55:1f:a6:4c:1f:99:9c:2d:b6:5c:59:12:99: b2:9f:c0:01:6f:89:61:56:7e:13:9c:e9:f5:40:2a:c6:01:6d: f6:1a:2c:a3:bb:ba:32:a0:4c:88:1d:b9:76:ef:88:1f:2a:40: 6d:ff:77:21:2c:63:c6:cf:b9:c5:a0:79:d4:3e:0b:60:8b:61: bf:d8:ac:43:75:61:8b:77:43:48:cf:31:43:8c:15:59:fe:52: 15:98:55:cd:e9:f1:f5:92:11:03:6a:f4:70:24:76:59:dc:13: fc:66:0c:c9:1f:d0:44:b1:89:37:6a:a5:ff:98:a6:9b:df:61: 09:24:4c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNjE0MjIzMTQxWhcNMjUwNjIxMjIzMTQxWjAYMRYwFAYD VQQDEw02ODRkZjg0ZC0wNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdV3Gb+SuB3NXY2e1yrdGym1281Swa30tuFLaMQi0xL3S2Kqu0sPukmYOa0t rOqIZlMii2ZHYzjazvZjNam0EfbgAkVmOx00XhfgvOhYbx9hscRGF+9ougN9q0ix o051i3C282RgzCzpylwxIzQb0a/JGKkXCS9l2enrFe3qWEk/uKP+8LUA3VrALO6h Er7tC59R5zjg8wE3ew0zW+P/bgQAgimqQKwtjXqM6rxl0kNqAmzG9hAOJXcHwz0/ KT0p+qTMIq8VTCvAnrdaFYitb3DtaJ9DCyY1fzmdf8v4cALKB9zHs6wrlLcSuXUJ KISW4y2rN32RXJOLHXMbvaoziQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpiCKq+ ug7D5V5dymqtWCLDaEP5MB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgPvuKQbEFze8ONnQ3aliIYw39GEh+PbdFAWgvZRi/bUtofqqiqLk9 1P0WelZt56F6Wnd/SRNo5kYVQLuW9xhn7ZCcAJzhL4Ik1hSXYVehG5zoDwnQT4gZ Nl5LGLYsRzpOYNhCXr9+NZYcXoP+SQ7ZEuSkw3YSRu41GgLjJfiH1vrnn1Ufpkwf mZwttlxZEpmyn8ABb4lhVn4TnOn1QCrGAW32Giyju7oyoEyIHbl274gfKkBt/3ch LGPGz7nFoHnUPgtgi2G/2KxDdWGLd0NIzzFDjBVZ/lIVmFXN6fH1khEDavRwJHZZ 3BP8ZgzJH9BEsYk3aqX/mKab32EJJEwl -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:45 2025 by rpki-client