$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: ghILAvzwfxFrxAEl8TyedhPCxKOZl+a+l5UuVa/Nm2Y= Subject key identifier: 3D:13:83:F3:68:F1:31:82:DF:C7:D4:4A:B3:84:D4:CF:1D:47:58:09 Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 0601 Signing time: Sat 14 Jun 2025 22:37:18 +0000 Manifest this update: Sat 14 Jun 2025 22:37:18 +0000 Manifest next update: Sat 21 Jun 2025 22:37:18 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: FXoWZTueYpJSbZHdWsQOhu5lQunk1OKW49+DQO1lX14=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: QkDFL/xy4lOpxq+tsUM4M0gw7c6hQli8tCJHPGWWDlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: Jun 14 22:37:18 2025 GMT Not After : Jun 21 22:37:18 2025 GMT Subject: CN=684df99e-b5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:4e:40:d7:e3:f6:1e:c7:98:6f:5a:e0:47: 7e:26:6a:df:a4:70:c1:c7:b0:e5:74:c2:7c:51:eb: b5:d0:ce:73:87:6d:0e:d6:da:b4:f9:a4:bb:7d:f1: aa:9f:c4:c6:d6:1b:54:7a:21:c0:68:03:7e:ea:f9: ef:6f:eb:d0:b2:6a:e3:55:e0:b7:00:b9:bc:29:d7: c0:32:1e:f7:53:32:10:be:70:16:a5:4d:fb:1f:97: 7e:bd:ac:af:55:e2:6c:ef:3e:5f:91:92:74:85:dd: dd:65:18:42:9d:fc:b3:8c:21:35:0b:20:24:72:ec: c5:f0:c9:ba:8a:a7:c5:00:b0:d6:b0:ed:aa:71:bd: 6f:91:35:4c:f5:2a:2b:2a:c1:56:14:07:44:47:af: e7:0a:ad:3d:39:66:04:5f:9f:42:4f:fd:29:76:a9: 5b:19:04:d6:09:fe:51:7f:86:86:a9:73:ca:b5:ff: 41:8e:c4:dc:11:3c:dd:b5:37:37:7d:aa:98:19:48: 5a:31:f7:23:77:03:37:29:76:c7:de:f0:cf:3a:4e: fe:62:a7:bc:46:5a:28:a5:73:84:d4:50:83:01:17: dd:5b:c4:b7:3a:7e:4b:dc:1f:72:e1:14:26:7c:b1: 5c:d4:aa:66:f5:75:43:14:a5:d7:8b:7f:eb:b9:04: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:83:F3:68:F1:31:82:DF:C7:D4:4A:B3:84:D4:CF:1D:47:58:09 X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:41:19:d9:90:15:24:f9:d4:0c:40:77:59:ad:a3:5a:4e:00: 17:d7:88:f2:d1:2f:28:db:e8:e2:02:b5:23:b3:61:4c:ed:cc: 7f:bc:27:2f:ae:c8:9c:8f:fc:fe:c7:88:68:63:ac:a3:8a:07: ed:38:75:0b:8d:f1:60:c1:4c:41:29:1c:db:0d:1c:35:08:91: f5:e1:d2:a1:e3:d5:b2:11:ad:b5:81:53:6b:a4:13:73:92:e9: 33:ab:4b:94:71:f7:e0:2b:fa:84:73:ff:86:9b:60:c3:38:3f: ce:62:ee:82:0d:d7:67:1c:7c:39:f0:ad:2a:ee:77:47:a9:cc: 36:51:07:22:50:c3:5e:b3:83:55:8c:15:f0:9c:d1:e5:b5:9f: ea:b8:a5:16:e6:2a:bc:b4:69:0a:31:56:f7:d4:5e:de:7e:03: 38:98:c1:e9:fd:f3:ce:61:86:b5:04:e4:ef:fb:55:0d:85:ef: 10:c8:18:e1:36:da:60:b3:01:e8:3a:cf:b1:e9:63:a4:59:c5: 2e:5e:73:a7:11:0e:b2:dd:08:89:a4:14:6f:f2:e7:65:a8:e9: 2e:7d:db:44:72:7b:40:bf:5c:9d:2e:0f:6c:b1:d5:c0:0f:47: 00:ee:6c:82:30:71:22:fa:96:72:d0:86:32:28:15:86:76:ed: 11:b1:aa:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwNjE0MjIzNzE4WhcNMjUwNjIxMjIzNzE4WjAYMRYwFAYD VQQDEw02ODRkZjk5ZS1iNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7ROQNfj9h7HmG9a4Ed+JmrfpHDBx7DldMJ8Ueu10M5zh20O1tq0+aS7ffGq n8TG1htUeiHAaAN+6vnvb+vQsmrjVeC3ALm8KdfAMh73UzIQvnAWpU37H5d+vayv VeJs7z5fkZJ0hd3dZRhCnfyzjCE1CyAkcuzF8Mm6iqfFALDWsO2qcb1vkTVM9Sor KsFWFAdER6/nCq09OWYEX59CT/0pdqlbGQTWCf5Rf4aGqXPKtf9BjsTcETzdtTc3 faqYGUhaMfcjdwM3KXbH3vDPOk7+Yqe8RloopXOE1FCDARfdW8S3On5L3B9y4RQm fLFc1Kpm9XVDFKXXi3/ruQSWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0Tg/No 8TGC38fUSrOE1M8dR1gJMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2QRnZkBUk+dQMQHdZraNaTgAX14jy0S8o2+jiArUjs2FM7cx/vCcv rsicj/z+x4hoY6yjigftOHULjfFgwUxBKRzbDRw1CJH14dKh49WyEa21gVNrpBNz kukzq0uUcffgK/qEc/+Gm2DDOD/OYu6CDddnHHw58K0q7ndHqcw2UQciUMNes4NV jBXwnNHltZ/quKUW5iq8tGkKMVb31F7efgM4mMHp/fPOYYa1BOTv+1UNhe8QyBjh NtpgswHoOs+x6WOkWcUuXnOnEQ6y3QiJpBRv8udlqOkufdtEcntAv1ydLg9ssdXA D0cA7myCMHEi+pZy0IYyKBWGdu0RsapJ -----END CERTIFICATE-----Generated at Mon Jun 16 20:04:51 2025 by rpki-client