$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: 1S6ZDvedzgKuRNvsPgjQ8NvQOGUvrindVD8vZUCzlro= Subject key identifier: 9D:4D:38:09:A2:EE:8B:A6:5A:BE:D6:C8:3D:9D:41:C3:ED:52:AD:08 Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 06B6 Signing time: Thu 12 Jun 2025 21:48:59 +0000 Manifest this update: Thu 12 Jun 2025 21:48:58 +0000 Manifest next update: Thu 19 Jun 2025 21:48:58 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: lheBYZGErCVs+ilS3FqE7yg8pbd3b7sVu3As3LVZHog=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: 8jITrnqODr3hbw+6QboJeBK8U7SJ4xuwPGHj3X5tTD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Jun 12 21:48:58 2025 GMT Not After : Jun 19 21:48:58 2025 GMT Subject: CN=684b4b4b-cd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:4a:16:d4:01:a4:67:dd:2a:0c:1a:b3:fe: 9e:ed:d8:3a:85:ec:e6:21:4c:29:43:94:23:d5:38: 36:02:71:30:2e:c3:19:2e:55:12:ae:1e:9b:cf:23: 83:10:bf:0c:80:35:98:ed:42:e4:32:59:1a:74:98: b3:cc:2f:a3:69:41:7c:14:54:2f:25:2b:38:b3:47: 21:81:a7:22:fb:13:8b:ac:1a:c3:99:dd:3d:d6:19: 20:9b:d4:4a:5d:97:83:db:b0:52:cb:0d:20:3c:36: c5:76:04:e4:0c:3a:99:e1:28:9a:59:59:4d:89:21: 4f:ed:03:28:4f:81:bb:80:26:59:6f:ca:01:df:18: 15:29:d4:84:64:ba:7a:40:7e:9e:45:b7:78:2d:bf: 23:6a:2b:76:cd:b8:29:3a:e5:b2:64:2d:d8:37:5a: 4e:b1:80:81:07:19:17:4c:41:b6:4b:db:82:dc:6c: 48:49:4a:2b:03:bd:bb:c1:e7:60:5e:1f:8f:d1:ce: 43:39:78:da:5f:de:ad:5e:10:f4:29:49:8c:c5:e0: 70:bb:63:22:11:f5:b8:a1:cc:11:ba:b9:65:57:ea: 5a:e4:81:97:52:0a:c0:28:95:50:38:b8:cf:45:3c: ab:5c:2e:f2:6d:a7:2d:dd:1e:6d:c5:b9:99:5c:5c: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:38:09:A2:EE:8B:A6:5A:BE:D6:C8:3D:9D:41:C3:ED:52:AD:08 X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f1:e5:8a:ff:7d:80:62:01:38:6e:74:78:41:22:69:66:92: 03:75:f1:41:14:a4:f1:14:5a:1a:81:98:45:96:d9:ea:69:01: f9:00:bb:3d:d6:5c:b1:e8:70:0b:32:6e:77:84:1c:c2:5a:6c: ce:33:bc:81:e9:70:16:cb:41:18:c7:b5:1b:5b:b5:83:09:8d: 78:28:52:b5:02:6e:19:3b:21:92:3b:a3:98:4b:86:cc:e1:d8: 26:25:2e:e2:73:85:01:7f:f0:01:b8:56:b9:13:c9:6d:b6:f9: dd:1b:15:eb:45:16:d5:e0:9a:80:a8:ff:bf:a4:2f:a2:5a:cc: 1e:a2:36:d5:82:a4:f9:5e:e7:dc:06:79:8d:57:6a:58:d9:01: dc:87:b3:64:b1:7b:e4:cd:27:59:a3:63:6c:b9:30:ff:2c:18: 78:0d:72:fa:85:4a:93:a9:c9:d9:d4:aa:82:53:9d:b2:80:f2: c9:8f:8c:12:5f:32:03:4a:9f:63:21:0a:49:2a:58:27:73:f2: 97:1e:46:df:c2:46:ff:c6:8e:e0:3d:0c:0f:9e:4b:80:7f:a7: a3:6b:5d:4d:d1:92:2a:42:90:7e:56:b0:7f:14:af:b4:c4:80: 90:86:ad:fc:e7:5f:aa:2a:35:34:3d:b5:73:0f:05:45:41:60: d2:9e:48:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjUwNjEyMjE0ODU4WhcNMjUwNjE5MjE0ODU4WjAYMRYwFAYD VQQDEw02ODRiNGI0Yi1jZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3BKFtQBpGfdKgwas/6e7dg6hezmIUwpQ5Qj1Tg2AnEwLsMZLlUSrh6bzyOD EL8MgDWY7ULkMlkadJizzC+jaUF8FFQvJSs4s0chgaci+xOLrBrDmd091hkgm9RK XZeD27BSyw0gPDbFdgTkDDqZ4SiaWVlNiSFP7QMoT4G7gCZZb8oB3xgVKdSEZLp6 QH6eRbd4Lb8jait2zbgpOuWyZC3YN1pOsYCBBxkXTEG2S9uC3GxISUorA727wedg Xh+P0c5DOXjaX96tXhD0KUmMxeBwu2MiEfW4ocwRurllV+pa5IGXUgrAKJVQOLjP RTyrXC7ybact3R5txbmZXFyfdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1NOAmi 7oumWr7WyD2dQcPtUq0IMB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS8eWK/32AYgE4bnR4QSJpZpIDdfFBFKTxFFoagZhFltnqaQH5ALs9 1lyx6HALMm53hBzCWmzOM7yB6XAWy0EYx7UbW7WDCY14KFK1Am4ZOyGSO6OYS4bM 4dgmJS7ic4UBf/ABuFa5E8lttvndGxXrRRbV4JqAqP+/pC+iWsweojbVgqT5Xufc BnmNV2pY2QHch7NksXvkzSdZo2NsuTD/LBh4DXL6hUqTqcnZ1KqCU52ygPLJj4wS XzIDSp9jIQpJKlgnc/KXHkbfwkb/xo7gPQwPnkuAf6eja11N0ZIqQpB+VrB/FK+0 xICQhq3851+qKjU0PbVzDwVFQWDSnkhp -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:20 2025 by rpki-client