$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json) Hash identifier: wNxeZOI78f82E5KP1E2nAVjjMuUSmJIigrcpN7EEZMI= Subject key identifier: CD:F0:9B:2C:5A:D2:6F:3B:25:56:CF:C7:13:2C:0D:36:B0:1C:A0:21 Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft Manifest number: 0D Signing time: Fri 13 Jun 2025 06:56:53 +0000 Manifest this update: Fri 13 Jun 2025 06:56:52 +0000 Manifest next update: Fri 20 Jun 2025 06:56:52 +0000 Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: UDWTFTFQcuZzPnLCf69L7/JCYa5Ly21jKGYYpFCyhc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Validity Not Before: Jun 13 06:56:52 2025 GMT Not After : Jun 20 06:56:52 2025 GMT Subject: CN=684bcbb4-652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:71:47:a5:c1:7a:73:e1:1a:b9:a9:81:5d: 93:1e:f9:38:eb:10:6c:51:6e:5f:ff:68:fa:e1:24: f4:21:a4:05:da:46:dd:34:2d:a7:55:da:36:95:45: 14:26:1c:df:d5:27:30:1c:4a:86:7f:35:c9:d1:f7: 99:54:bb:3b:23:b1:67:ac:b1:ea:a3:84:e9:52:5f: 0f:7b:14:aa:5a:fa:9e:d8:78:06:e7:91:ca:4d:bf: 78:2c:19:a8:50:b0:44:e1:71:c2:a9:bc:05:55:93: 04:94:68:2a:14:37:fa:4d:50:fc:82:b1:c3:6c:ee: 7a:13:67:69:d0:30:a3:b5:f8:b9:bd:32:14:53:c0: a0:83:30:a5:ec:4d:77:60:83:05:89:83:74:98:ce: e5:2e:69:06:94:76:74:4e:59:a3:42:fa:6b:fd:19: b5:fd:92:fa:b3:77:fe:4c:53:85:fb:e6:f6:46:0f: bc:01:2f:d8:e0:20:8a:3f:22:d9:09:61:0d:fc:e3: 9b:ba:75:ec:7a:6f:bd:a1:f6:6b:c5:35:77:aa:27: 00:56:76:c3:d6:24:5b:b6:b4:31:b5:77:c5:d2:a9: 93:ea:64:b5:d7:c2:9f:0c:33:f7:d1:3c:a4:d7:31: bd:4e:84:b5:35:a8:ec:70:b8:ca:3f:4a:d0:f6:3b: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F0:9B:2C:5A:D2:6F:3B:25:56:CF:C7:13:2C:0D:36:B0:1C:A0:21 X509v3 Authority Key Identifier: keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:f7:7c:0a:6a:05:e4:d3:71:86:12:a5:15:1f:67:d6:8b:cf: da:a8:be:e5:ab:ec:fd:0b:34:4e:b7:c6:cc:b1:92:50:96:13: f3:b4:cb:3f:43:0f:44:87:9d:e8:ae:5a:af:ac:80:3f:24:03: f5:13:f7:a3:50:4e:77:18:14:f8:e2:5a:71:5e:47:18:17:a2: 63:fb:26:e5:52:c0:20:d7:0a:82:d6:77:00:37:04:b6:39:a5: b4:ae:34:11:4c:62:03:92:be:3c:ba:fa:49:43:e3:a9:a4:38: ab:36:c5:aa:81:f2:1f:30:28:ab:82:69:65:da:a7:48:9c:3a: 62:03:c5:a5:48:74:43:7b:24:01:82:fa:9d:e6:79:40:1f:0f: ff:a7:8d:cc:84:65:02:a5:a2:72:77:4b:a0:e7:29:f5:a6:ac: f0:8a:cb:23:26:82:b6:4f:3f:9f:5d:23:3d:84:19:d2:f5:93: ae:12:34:ef:60:3a:47:ed:fa:ff:07:d4:8a:bd:57:7c:d1:39: ca:98:c7:0e:a9:17:0a:0e:e5:bc:03:6a:ee:bb:d4:8f:ec:48: a6:fd:91:3e:c2:16:1e:94:26:16:f3:a5:26:60:f2:6f:c8:78: 4e:ad:6d:0b:c3:e7:ba:55:32:f6:8e:3a:c0:db:c6:8d:fd:64: 6a:f7:b0:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTVCMzExMC8GA1UEBRMoMkQwMUExOTQyQkFGRDlEM0IzMUREQkZFNzUzMjRCQUQ2 MkI2MDk1ODAeFw0yNTA2MTMwNjU2NTJaFw0yNTA2MjAwNjU2NTJaMBgxFjAUBgNV BAMTDTY4NGJjYmI0LTY1MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY4XFHpcF6c+EauamBXZMe+TjrEGxRbl//aPrhJPQhpAXaRt00LadV2jaVRRQm HN/VJzAcSoZ/NcnR95lUuzsjsWesseqjhOlSXw97FKpa+p7YeAbnkcpNv3gsGahQ sEThccKpvAVVkwSUaCoUN/pNUPyCscNs7noTZ2nQMKO1+Lm9MhRTwKCDMKXsTXdg gwWJg3SYzuUuaQaUdnROWaNC+mv9GbX9kvqzd/5MU4X75vZGD7wBL9jgIIo/ItkJ YQ3845u6dex6b72h9mvFNXeqJwBWdsPWJFu2tDG1d8XSqZPqZLXXwp8MM/fRPKTX Mb1OhLU1qOxwuMo/StD2Owq1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzfCbLFrS bzslVs/HEywNNrAcoCEwHwYDVR0jBBgwFoAULQGhlCuv2dOzHdv+dTJLrWK2CVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NUIzLzI2QjFFMThBMzFF RDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNW Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFFHaGxDdXYyZE96SGR2LWRUSkxyV0syQ1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NUIzLzI2QjFFMThBMzFFRDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRP ekhkdi1kVEpMcldLMkNWZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFL3fApqBeTTcYYSpRUfZ9aLz9qovuWr7P0LNE63xsyxklCWE/O0yz9D D0SHneiuWq+sgD8kA/UT96NQTncYFPjiWnFeRxgXomP7JuVSwCDXCoLWdwA3BLY5 pbSuNBFMYgOSvjy6+klD46mkOKs2xaqB8h8wKKuCaWXap0icOmIDxaVIdEN7JAGC +p3meUAfD/+njcyEZQKlonJ3S6DnKfWmrPCKyyMmgrZPP59dIz2EGdL1k64SNO9g Okft+v8H1Iq9V3zROcqYxw6pFwoO5bwDau671I/sSKb9kT7CFh6UJhbzpSZg8m/I eE6tbQvD57pVMvaOOsDbxo39ZGr3sNU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:53 2025 by rpki-client