$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json) Hash identifier: x7bpriv5ETCyMhEeACIeRr8Wl96ahiJAvUo/iiIYEh8= Subject key identifier: 99:B2:24:45:BA:20:F3:EF:F1:99:9D:70:0A:7F:35:71:86:AE:BC:77 Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft Manifest number: 013A Signing time: Wed 18 Jun 2025 18:41:08 +0000 Manifest this update: Wed 18 Jun 2025 18:41:07 +0000 Manifest next update: Wed 25 Jun 2025 18:41:07 +0000 Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: ajCV+a4PvJUO0iDgstseYLrp2QF2glXkIGStPVNDR3c=) 2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: wX9s/s7jxKKJJyFHtP8kJqChB04GKqVy3xgEjOBVe9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Validity Not Before: Jun 18 18:41:07 2025 GMT Not After : Jun 25 18:41:07 2025 GMT Subject: CN=68530844-09af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:4f:27:0a:d0:8a:d6:a8:0d:87:34:8d:04: e3:f0:32:7e:85:36:fc:31:c6:a5:02:19:27:d2:08: e3:c3:e3:f8:7d:81:08:a0:2a:0b:47:41:47:c4:ea: 45:e7:34:19:e1:a4:cf:2a:c0:52:eb:eb:2b:2d:a7: 2b:6b:c5:60:11:72:0e:57:ed:9b:ca:42:df:92:2d: c4:b3:d3:ef:a5:03:01:05:1c:6a:d3:b7:0c:10:57: 89:25:4a:7d:26:af:2f:2b:0a:05:1f:fc:80:c7:d9: a3:8a:0b:da:e9:6f:8d:ea:81:e8:83:f0:b8:ce:fd: 75:9e:cf:b7:96:a8:d0:7d:e8:83:3f:34:a6:45:47: ac:a4:73:91:2d:29:bb:6f:d5:00:c1:32:ff:ca:5b: d4:6a:88:da:f5:8a:37:5c:5f:f4:2e:08:fe:15:49: 75:39:26:82:89:31:30:0a:81:b0:98:1e:c2:51:db: 94:66:6b:ff:e2:cf:ed:89:70:a2:85:d2:b6:27:13: c2:44:ef:29:94:1d:41:bf:9d:ae:91:24:15:3d:97: 49:e7:01:f0:84:6a:8f:e4:71:73:22:2f:9b:55:f4: 08:2f:08:92:3b:5c:9c:5e:0f:9b:c9:b2:4e:ae:5b: 0d:92:84:bf:df:bb:4f:c7:e8:c9:a0:14:21:98:f0: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B2:24:45:BA:20:F3:EF:F1:99:9D:70:0A:7F:35:71:86:AE:BC:77 X509v3 Authority Key Identifier: keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:44:41:75:99:f2:6f:fe:61:e8:3f:70:a2:c0:34:5a:8b:84: 18:cb:19:f0:4b:20:fc:69:84:46:aa:e9:6f:3a:9a:9c:ff:c4: da:14:20:59:f9:e6:80:b7:ef:77:18:20:28:7d:5a:f4:be:e7: 67:81:4b:27:9f:c2:df:68:90:01:10:1f:8b:5e:3b:46:8d:9c: c0:6f:3f:4a:60:3f:79:48:07:0b:f4:df:64:4c:3f:bb:71:2a: bc:ae:7d:0a:9d:d5:97:42:26:3e:33:07:18:bf:12:6c:7a:0b: ef:4d:e8:30:cc:cb:1f:63:fa:2b:1f:3d:6d:a6:13:69:3b:49: 63:08:f1:cb:1a:92:db:58:9b:ae:8a:af:64:73:96:53:ff:14: ef:2a:84:ff:5a:6b:12:48:63:92:c2:e0:b9:9b:30:d2:38:39: 37:77:c1:11:23:99:4f:b5:79:ca:a2:5c:f1:58:d1:13:16:72: 53:1f:16:96:fe:90:4e:29:1b:68:1d:b6:ba:cb:6c:7c:3d:97: f0:34:3c:d7:7d:b0:67:c2:f0:d0:81:52:d8:06:ba:fd:76:22: c0:f0:b9:4f:c9:86:1d:c9:53:cd:98:b1:91:8d:eb:16:77:6a: a8:c1:1c:9e:d7:86:09:7c:be:c3:4e:da:34:49:41:13:20:27: 7a:ab:8a:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKDk0M0FEOUJDNjE3N0FCOEMyRjhFODEzMUMxNEE1NDY1 RUM0Mjk1NEYwHhcNMjUwNjE4MTg0MTA3WhcNMjUwNjI1MTg0MTA3WjAYMRYwFAYD VQQDEw02ODUzMDg0NC0wOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQVPJwrQitaoDYc0jQTj8DJ+hTb8McalAhkn0gjjw+P4fYEIoCoLR0FHxOpF 5zQZ4aTPKsBS6+srLacra8VgEXIOV+2bykLfki3Es9PvpQMBBRxq07cMEFeJJUp9 Jq8vKwoFH/yAx9mjigva6W+N6oHog/C4zv11ns+3lqjQfeiDPzSmRUespHORLSm7 b9UAwTL/ylvUaoja9Yo3XF/0Lgj+FUl1OSaCiTEwCoGwmB7CUduUZmv/4s/tiXCi hdK2JxPCRO8plB1Bv52ukSQVPZdJ5wHwhGqP5HFzIi+bVfQILwiSO1ycXg+bybJO rlsNkoS/37tPx+jJoBQhmPCVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmyJEW6 IPPv8ZmdcAp/NXGGrrx3MB8GA1UdIwQYMBaAFJQ62bxhd6uML46BMcFKVGXsQpVP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC8zNjE4QUI2RTcy QTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0d3Zqb0V4d1VwVVpleENs VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0 d3Zqb0V4d1VwVVpleENsVTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuREF1mfJv/mHoP3CiwDRai4QYyxnwSyD8aYRGqulvOpqc/8TaFCBZ +eaAt+93GCAofVr0vudngUsnn8LfaJABEB+LXjtGjZzAbz9KYD95SAcL9N9kTD+7 cSq8rn0KndWXQiY+MwcYvxJsegvvTegwzMsfY/orHz1tphNpO0ljCPHLGpLbWJuu iq9kc5ZT/xTvKoT/WmsSSGOSwuC5mzDSODk3d8ERI5lPtXnKolzxWNETFnJTHxaW /pBOKRtoHba6y2x8PZfwNDzXfbBnwvDQgVLYBrr9diLA8LlPyYYdyVPNmLGRjesW d2qowRye14YJfL7DTto0SUETICd6q4oI -----END CERTIFICATE-----Generated at Fri Jun 20 06:47:06 2025 by rpki-client