$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json) Hash identifier: +J3IpvX9ySkb4UQPVzwJIJxDZIpuheWPz/jx9C3gzQY= Subject key identifier: FF:D9:C7:DB:41:32:F8:DE:24:33:24:21:88:95:6F:E8:DA:15:8D:14 Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft Manifest number: 21 Signing time: Sun 15 Jun 2025 06:56:15 +0000 Manifest this update: Sun 15 Jun 2025 06:56:14 +0000 Manifest next update: Sun 22 Jun 2025 06:56:14 +0000 Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: Ft59OPbikWfJR5l8NPYtSRWWvFVTEQH5ehhvCJPmnYo=) 2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Validity Not Before: Jun 15 06:56:14 2025 GMT Not After : Jun 22 06:56:14 2025 GMT Subject: CN=684e6e8f-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:18:98:0d:31:a7:33:4e:8b:f4:c8:d8:cd: 0d:57:55:18:a2:49:ba:5a:6a:2b:c5:8d:0d:f1:4e: 54:a3:70:e6:45:01:fa:07:74:1e:b1:52:6a:65:82: b7:f5:6b:15:81:20:3e:e5:77:f9:8c:98:d7:b6:9d: 25:cf:e6:23:a3:36:e9:eb:88:5d:5f:8f:64:f5:b3: 8e:0e:67:fb:d9:d9:e4:9f:dd:65:b4:40:60:2a:95: 73:24:a7:07:75:ac:2e:33:f7:46:23:76:38:9c:10: 15:94:ad:76:d7:fd:c3:82:be:e0:38:3c:00:25:52: e6:04:25:12:bf:91:57:d3:ad:06:8d:ac:f2:49:87: e0:2b:b0:7f:62:e0:a2:ce:39:a4:25:a8:16:26:e0: 9c:3c:f3:d1:a6:6c:4f:a9:06:4b:61:f4:1c:00:13: 8d:55:3a:52:63:65:fb:16:aa:68:b7:33:85:b4:de: 80:ca:1d:ff:a0:88:00:75:9a:60:69:85:85:a0:d2: 3b:60:56:4e:92:93:6a:15:96:97:b0:06:c2:73:80: c9:14:0b:74:9c:9e:31:7a:7e:05:16:07:9a:d0:b7: 62:f9:23:53:fc:7e:dd:a1:26:fd:be:66:dc:8e:e0: 4f:11:f5:82:6e:f4:3a:ea:0f:ea:c0:5e:b4:e9:0f: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D9:C7:DB:41:32:F8:DE:24:33:24:21:88:95:6F:E8:DA:15:8D:14 X509v3 Authority Key Identifier: keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2d:e4:4b:9b:96:3f:d9:ab:00:23:5c:15:3a:e7:18:97:0e: 67:91:79:25:63:11:d5:47:0b:42:b3:f5:de:8a:31:f4:85:ad: 9b:c0:43:32:9f:29:15:60:46:13:ea:8b:21:62:b3:f3:32:f0: 32:45:1c:ca:36:0e:02:57:78:bf:26:68:57:a9:1a:a5:97:cf: 6e:e0:7c:be:0e:a4:d5:0c:7e:bd:35:68:6b:af:bb:88:0e:42: 4c:1d:9d:d7:c1:44:bd:ed:52:db:71:e6:54:5f:15:15:35:74: 56:5e:72:e4:32:96:ca:ea:92:66:e4:b1:a8:97:ff:b7:be:ed: 90:52:b8:19:c8:4f:da:94:12:8e:fd:0c:06:5e:ed:06:0d:a7: b3:85:ad:37:55:02:d7:00:c0:f8:97:9b:52:b8:5f:26:fb:da: 3e:ee:6d:92:21:ca:1a:b3:5d:19:c9:b9:33:e0:d2:a9:cc:9a: 2c:03:80:bf:db:5b:cf:d6:a4:0c:a3:59:b7:08:94:71:c0:ea: d8:f3:47:1a:25:87:da:8b:19:11:80:55:9d:54:64:19:50:8e: 89:0c:e2:94:ed:ee:c4:94:3e:50:63:31:4c:e5:51:b6:74:7e: 92:27:28:5c:ad:c7:e7:64:6b:35:41:08:54:31:72:de:9d:10: 78:98:14:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjU1MTExMC8GA1UEBRMoMkZERDM4MDRENjQ1OEVBRjFDQjM5MTdCNUUzMzJGQkE1 QzcxNUY5MTAeFw0yNTA2MTUwNjU2MTRaFw0yNTA2MjIwNjU2MTRaMBgxFjAUBgNV BAMTDTY4NGU2ZThmLTk5YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLCRiYDTGnM06L9MjYzQ1XVRiiSbpaaivFjQ3xTlSjcOZFAfoHdB6xUmplgrf1 axWBID7ld/mMmNe2nSXP5iOjNunriF1fj2T1s44OZ/vZ2eSf3WW0QGAqlXMkpwd1 rC4z90YjdjicEBWUrXbX/cOCvuA4PAAlUuYEJRK/kVfTrQaNrPJJh+ArsH9i4KLO OaQlqBYm4Jw889GmbE+pBkth9BwAE41VOlJjZfsWqmi3M4W03oDKHf+giAB1mmBp hYWg0jtgVk6Sk2oVlpewBsJzgMkUC3ScnjF6fgUWB5rQt2L5I1P8ft2hJv2+ZtyO 4E8R9YJu9DrqD+rAXrTpD+U/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/9nH20Ey +N4kMyQhiJVv6NoVjRQwHwYDVR0jBBgwFoAUL904BNZFjq8cs5F7XjMvulxxX5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTUxLzVBQjE5MjAyMTZD NTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDkwNEJOWkZqcThjczVGN1hqTXZ1bHh4WDVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTUxLzVBQjE5MjAyMTZDNTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4 Y3M1RjdYak12dWx4eFg1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUt5Eublj/ZqwAjXBU65xiXDmeReSVjEdVHC0Kz9d6KMfSFrZvAQzKf KRVgRhPqiyFis/My8DJFHMo2DgJXeL8maFepGqWXz27gfL4OpNUMfr01aGuvu4gO QkwdndfBRL3tUttx5lRfFRU1dFZecuQylsrqkmbksaiX/7e+7ZBSuBnIT9qUEo79 DAZe7QYNp7OFrTdVAtcAwPiXm1K4Xyb72j7ubZIhyhqzXRnJuTPg0qnMmiwDgL/b W8/WpAyjWbcIlHHA6tjzRxolh9qLGRGAVZ1UZBlQjokM4pTt7sSUPlBjMUzlUbZ0 fpInKFytx+dkazVBCFQxct6dEHiYFLA= -----END CERTIFICATE-----Generated at Mon Jun 16 10:32:19 2025 by rpki-client