$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: teaRxDFAevKXOdJBjRzJU2K0VrLoxWPiLHJ52aa4+hM= Subject key identifier: 1B:3A:DC:68:54:73:D7:86:6E:EE:2F:7F:5A:F7:81:BB:91:ED:91:D9 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 02B4 Signing time: Fri 13 Jun 2025 00:59:35 +0000 Manifest this update: Fri 13 Jun 2025 00:59:35 +0000 Manifest next update: Fri 20 Jun 2025 00:59:35 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: C3lcuFN3lSJ4zyUDl2uFnGozWNek3RhzOq4NJ0TPGgE=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Jun 13 00:59:35 2025 GMT Not After : Jun 20 00:59:35 2025 GMT Subject: CN=684b77f7-81a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:7c:69:03:35:70:af:83:3a:de:83:5b:ec: b1:8a:81:60:cd:03:aa:6d:70:4c:e0:e0:f7:45:5e: c6:df:34:a2:9c:ae:1f:fd:8c:66:7f:5d:3b:8e:5a: 76:e2:7f:ce:ff:6d:a0:aa:3a:66:14:27:da:ac:18: 14:24:22:24:e8:f2:38:fa:43:9f:77:04:9f:87:4a: 3a:a2:bb:0a:a7:ba:64:3f:50:30:a6:b6:06:6c:a2: a1:ff:a4:cd:05:9f:52:ca:dd:93:1f:89:93:fb:1f: 43:7f:e7:93:b1:94:36:50:53:d6:41:51:aa:f9:20: 63:3a:ef:b5:70:60:2a:ad:07:e4:da:a8:db:c7:98: 5b:f4:85:95:0d:02:5f:8d:05:e0:96:21:76:a9:be: 27:24:66:75:39:66:4f:b0:3b:a9:69:79:05:b8:6f: 4f:a8:ed:38:52:ee:2e:ad:38:3e:74:4d:ca:55:c6: ea:dc:a5:a1:fd:14:31:d1:53:41:bf:92:23:42:42: d8:e1:27:ce:cf:eb:e8:41:51:91:8e:68:41:7d:7b: eb:29:a0:3d:94:9f:56:15:6c:4e:f1:38:9a:a4:8e: 03:f8:ea:dd:49:b4:86:09:d9:0e:b7:04:ae:8f:88: b5:13:b3:75:5e:54:b2:13:b0:d3:72:75:81:3a:9f: fb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:DC:68:54:73:D7:86:6E:EE:2F:7F:5A:F7:81:BB:91:ED:91:D9 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:d5:c8:61:04:75:95:51:77:3a:b2:5d:24:1e:83:61:5c: 5b:88:b7:f6:6e:65:31:21:30:7e:2a:87:9b:fd:cf:03:12:7d: 49:dc:00:62:c6:7b:e7:92:40:c6:29:b1:46:d3:41:a6:06:bb: 7e:8e:0b:8f:59:d2:e0:68:86:ec:ec:6e:ac:d2:6e:2c:85:ea: 81:ea:57:49:42:50:09:36:b7:a2:1e:d5:89:dc:1a:b0:ef:84: d3:f1:36:a6:d6:87:de:72:c2:e2:75:ce:34:0a:82:6a:01:f2: 5f:2e:6c:c3:9a:29:26:7c:9b:d9:86:e0:a7:a2:d6:d8:1e:ee: 26:24:cd:63:fc:f3:ad:31:b6:31:b0:58:25:20:d5:8c:dc:d8: c7:3c:30:a4:f8:c1:b2:7f:4e:99:99:54:76:bc:5d:21:41:7f: 99:f6:2a:c7:00:49:f2:f4:27:6e:3d:20:94:b4:c5:6c:3d:8c: 69:aa:b2:ab:77:0d:9d:18:5c:7e:83:10:a2:6f:a9:f7:59:b6: 8d:0a:2e:30:cc:e8:a4:a5:5d:3a:43:a7:a4:13:df:af:3d:6c: 98:21:70:80:93:32:93:fc:8a:c4:52:c0:b6:9e:db:7d:57:b0: a5:26:57:7e:1a:25:85:a1:43:bd:6d:ba:c9:21:42:8a:63:1e: 3f:74:2e:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwNjEzMDA1OTM1WhcNMjUwNjIwMDA1OTM1WjAYMRYwFAYD VQQDEw02ODRiNzdmNy04MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCV8aQM1cK+DOt6DW+yxioFgzQOqbXBM4OD3RV7G3zSinK4f/Yxmf107jlp2 4n/O/22gqjpmFCfarBgUJCIk6PI4+kOfdwSfh0o6orsKp7pkP1AwprYGbKKh/6TN BZ9Syt2TH4mT+x9Df+eTsZQ2UFPWQVGq+SBjOu+1cGAqrQfk2qjbx5hb9IWVDQJf jQXgliF2qb4nJGZ1OWZPsDupaXkFuG9PqO04Uu4urTg+dE3KVcbq3KWh/RQx0VNB v5IjQkLY4SfOz+voQVGRjmhBfXvrKaA9lJ9WFWxO8TiapI4D+OrdSbSGCdkOtwSu j4i1E7N1XlSyE7DTcnWBOp/7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs63GhU c9eGbu4vf1r3gbuR7ZHZMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw99XIYQR1lVF3OrJdJB6DYVxbiLf2bmUxITB+Koeb/c8DEn1J3ABi xnvnkkDGKbFG00GmBrt+jguPWdLgaIbs7G6s0m4sheqB6ldJQlAJNreiHtWJ3Bqw 74TT8Tam1ofecsLidc40CoJqAfJfLmzDmikmfJvZhuCnotbYHu4mJM1j/POtMbYx sFglINWM3NjHPDCk+MGyf06ZmVR2vF0hQX+Z9irHAEny9CduPSCUtMVsPYxpqrKr dw2dGFx+gxCib6n3WbaNCi4wzOikpV06Q6ekE9+vPWyYIXCAkzKT/IrEUsC2ntt9 V7ClJld+GiWFoUO9bbrJIUKKYx4/dC4q -----END CERTIFICATE-----Generated at Sat Jun 14 18:50:37 2025 by rpki-client