$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: HZHjIIaNPMBj91IuARDWa23hMfWeFLpuBXSmR/csp8E= Subject key identifier: FA:5C:01:FB:08:6F:D1:93:D8:4D:19:9F:59:9A:00:E2:21:D2:E8:91 Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: D0 Signing time: Fri 13 Jun 2025 04:39:40 +0000 Manifest this update: Fri 13 Jun 2025 04:39:39 +0000 Manifest next update: Fri 20 Jun 2025 04:39:39 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: HbIlvQoxpvhxnHr+UhOhwTOoDW5kKIJvbA3SVZ1mqF0=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: Jun 13 04:39:39 2025 GMT Not After : Jun 20 04:39:39 2025 GMT Subject: CN=684bab8b-42b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:e7:47:9a:ab:c8:03:93:d1:94:bd:d2:72: 01:0d:d6:07:2b:9e:89:e3:fc:6c:ae:a6:53:5f:e8: fb:eb:79:6d:a5:17:e7:f5:27:c2:1d:79:22:71:53: 95:78:58:2a:d4:f6:4a:71:c0:06:ee:bd:c7:0b:62: f0:ac:b6:11:7c:8b:d3:b6:32:fe:ed:0c:96:1f:51: 0c:07:42:4b:43:07:1f:4b:9d:8c:51:51:f3:ea:d1: de:38:b1:bb:ef:dd:49:92:42:ae:7c:d3:74:6b:94: b8:94:46:f8:63:19:ff:89:f1:c3:f5:2f:be:9e:d6: fb:ac:a0:6d:ee:b2:4a:2e:02:b9:9d:e9:61:4d:22: 73:69:0f:90:bd:04:8a:57:83:18:43:30:3d:2b:7c: ff:6c:4e:8a:2b:f5:d2:98:a1:4b:b0:c7:12:7e:db: 79:12:e3:96:72:43:bb:3d:a3:dd:5a:05:43:d7:4b: 8a:d0:2a:ec:40:95:ff:24:df:09:25:c8:b7:df:cc: 7e:53:94:56:b7:98:19:48:02:62:6e:d7:a0:f1:e7: 50:50:4b:c7:76:e7:fa:94:09:fe:ec:a0:81:c2:56: 20:5b:9f:21:1a:da:ad:c1:3a:56:a1:7c:8b:5f:ce: 70:09:e0:cc:46:5e:0b:82:f5:de:0b:1a:e0:54:21: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:01:FB:08:6F:D1:93:D8:4D:19:9F:59:9A:00:E2:21:D2:E8:91 X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cb:a7:14:d3:e8:60:49:e1:48:57:2f:2d:97:2e:26:00:8c: ba:dd:dd:d2:9d:85:7d:c8:6e:1e:fc:d0:12:71:0c:c6:ee:5c: 44:02:5c:2d:ff:4c:eb:60:b4:7f:1a:f0:80:f5:c5:a8:e0:cd: 11:cf:14:ed:d1:79:66:72:f8:0f:a1:6c:e5:6e:5d:8e:76:fb: 3a:85:74:d1:ba:2e:3c:ad:b3:17:65:b0:35:9b:dc:6b:ba:ca: 1d:0b:b3:88:f7:00:2f:c6:de:4f:1a:b4:80:4b:96:5f:50:1c: 5a:cc:bf:d8:51:ce:74:00:ab:28:35:59:c5:da:bd:93:fd:2b: 02:0c:e1:5f:ea:59:2c:b0:cd:35:94:7b:65:d2:5e:a6:35:bd: 43:77:48:64:41:a4:40:6e:4d:02:d6:fd:94:81:bc:95:8c:1c: 50:f0:34:81:77:e3:e1:32:1f:97:4d:d7:6c:99:97:7a:cf:da: 91:56:d2:23:f7:55:7b:e6:4e:66:96:ad:ca:29:53:c6:5d:72: cb:9f:d9:2f:21:55:c9:35:f0:5c:db:d8:da:42:91:cc:4a:94: b9:81:a7:34:ff:21:43:4c:75:c0:7e:0d:37:39:e7:b3:b7:3c: a7:65:15:af:2d:1f:57:e4:a3:ed:28:ae:31:35:dc:68:b7:61: 5b:75:ae:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNjEzMDQzOTM5WhcNMjUwNjIwMDQzOTM5WjAYMRYwFAYD VQQDEw02ODRiYWI4Yi00MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqPnR5qryAOT0ZS90nIBDdYHK56J4/xsrqZTX+j763ltpRfn9SfCHXkicVOV eFgq1PZKccAG7r3HC2LwrLYRfIvTtjL+7QyWH1EMB0JLQwcfS52MUVHz6tHeOLG7 791JkkKufNN0a5S4lEb4Yxn/ifHD9S++ntb7rKBt7rJKLgK5nelhTSJzaQ+QvQSK V4MYQzA9K3z/bE6KK/XSmKFLsMcSftt5EuOWckO7PaPdWgVD10uK0CrsQJX/JN8J Jci338x+U5RWt5gZSAJibteg8edQUEvHduf6lAn+7KCBwlYgW58hGtqtwTpWoXyL X85wCeDMRl4LgvXeCxrgVCEmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpcAfsI b9GT2E0Zn1maAOIh0uiRMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOy6cU0+hgSeFIVy8tly4mAIy63d3SnYV9yG4e/NAScQzG7lxEAlwt /0zrYLR/GvCA9cWo4M0RzxTt0XlmcvgPoWzlbl2Odvs6hXTRui48rbMXZbA1m9xr usodC7OI9wAvxt5PGrSAS5ZfUBxazL/YUc50AKsoNVnF2r2T/SsCDOFf6lkssM01 lHtl0l6mNb1Dd0hkQaRAbk0C1v2UgbyVjBxQ8DSBd+PhMh+XTddsmZd6z9qRVtIj 91V75k5mlq3KKVPGXXLLn9kvIVXJNfBc29jaQpHMSpS5gac0/yFDTHXAfg03Oeez tzynZRWvLR9X5KPtKK4xNdxot2Fbda61 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client