$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: 5a2ek7hR9pCX4hnM3s9oL4J5fUVf5ViqXkr+mEg9X3g= Subject key identifier: FA:39:20:B8:DF:37:01:F6:AF:69:3B:6A:EC:56:E5:2F:01:75:A9:74 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 210E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 210E Signing time: Sat 14 Jun 2025 15:54:32 +0000 Manifest this update: Sat 14 Jun 2025 15:54:31 +0000 Manifest next update: Sat 21 Jun 2025 15:54:31 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: K2VPPJieSmylAKDjecfMDma9OtVO2IhhTGqVJXqvvLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8462 (0x210e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Jun 14 15:54:31 2025 GMT Not After : Jun 21 15:54:31 2025 GMT Subject: CN=684d9b37-26fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:da:31:03:a9:24:45:6b:f8:9b:02:83:bd:3c: 03:36:99:86:89:28:06:df:14:32:ee:eb:2e:b5:f3: 25:83:55:10:95:a0:13:08:ab:de:d0:7e:c1:66:f7: ed:bd:10:f9:4b:02:43:9d:b9:f1:e0:6f:13:e9:ac: 4b:b9:3f:ac:80:2c:1e:c4:8b:2a:c0:39:6d:54:7b: 08:f6:1e:14:32:19:a1:2c:47:2f:7f:7c:19:13:10: 67:a4:69:30:9f:2e:66:36:96:5b:00:2a:1e:2c:e3: 68:01:46:45:9d:e9:16:bf:15:0b:57:25:7e:93:26: 15:4d:86:b9:a4:98:41:f2:e6:3d:01:ac:40:8b:24: eb:80:48:93:9d:b6:7c:46:ef:db:8e:bc:a2:8a:58: 12:5c:5c:3a:5f:57:ba:c0:0a:be:d6:0d:b5:0a:c1: a0:26:61:ce:b0:ab:f3:6b:71:0a:4d:be:98:a8:64: 97:30:48:18:6a:d3:ee:70:df:bd:66:f2:18:34:38: 7a:d1:ac:3f:fe:ca:ba:c2:14:3e:d1:79:f6:bd:49: 11:52:b3:6f:54:98:b4:d9:6a:69:cb:87:75:14:ca: 5d:62:e4:69:f5:dc:f8:64:f9:a5:11:3f:f9:51:bd: ae:f5:b2:fa:ac:5a:a9:d6:16:51:52:af:89:b6:68: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:39:20:B8:DF:37:01:F6:AF:69:3B:6A:EC:56:E5:2F:01:75:A9:74 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3b:1f:2b:f8:09:1d:ff:5c:7a:fa:fc:6e:63:4d:ee:f7:e2: f2:a6:44:57:b7:13:50:a4:6d:89:80:be:38:56:ad:ad:d7:f2: 90:d8:ea:59:49:25:52:cf:02:34:68:cc:bf:34:70:68:1b:24: c5:f1:1e:1a:b2:c4:16:9f:dd:a4:9b:8c:04:1e:10:0a:a0:60: dc:42:79:fe:f4:4c:9e:1f:73:1c:33:c4:8c:78:9b:1d:e2:a9: d7:ae:90:02:f6:18:3b:58:8d:61:8a:40:de:cc:01:90:56:43: 64:29:9c:83:7a:f5:5f:d4:4b:94:91:54:7f:90:ce:83:76:aa: e4:dc:ba:ff:45:65:56:85:5b:c7:53:e4:b9:01:5b:50:3a:d9: 00:ec:25:bd:42:fb:b1:13:5c:39:09:01:87:3f:f0:15:ee:76: 9b:5f:25:91:e8:52:e2:54:ab:7a:22:43:c2:44:80:fa:57:2e: 38:37:0d:14:86:16:5f:19:a0:73:21:a1:bf:5a:00:a0:7b:0a: 7c:8a:1b:a9:9f:e9:07:ba:af:f1:10:75:52:c1:c0:04:e9:66: 54:1d:70:a0:4e:43:f8:68:43:2a:c7:d1:18:b3:c7:e1:1b:91: 43:5c:c3:d1:ce:e3:0a:77:f0:2c:0c:5e:0d:bd:1e:12:e8:76: 31:e3:c9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjUwNjE0MTU1NDMxWhcNMjUwNjIxMTU1NDMxWjAYMRYwFAYD VQQDEw02ODRkOWIzNy0yNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5doxA6kkRWv4mwKDvTwDNpmGiSgG3xQy7usutfMlg1UQlaATCKve0H7BZvft vRD5SwJDnbnx4G8T6axLuT+sgCwexIsqwDltVHsI9h4UMhmhLEcvf3wZExBnpGkw ny5mNpZbACoeLONoAUZFnekWvxULVyV+kyYVTYa5pJhB8uY9AaxAiyTrgEiTnbZ8 Ru/bjryiilgSXFw6X1e6wAq+1g21CsGgJmHOsKvza3EKTb6YqGSXMEgYatPucN+9 ZvIYNDh60aw//sq6whQ+0Xn2vUkRUrNvVJi02Wppy4d1FMpdYuRp9dz4ZPmlET/5 Ub2u9bL6rFqp1hZRUq+JtmhXOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo5ILjf NwH2r2k7auxW5S8Bdal0MB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYOx8r+Akd/1x6+vxuY03u9+LypkRXtxNQpG2JgL44Vq2t1/KQ2OpZ SSVSzwI0aMy/NHBoGyTF8R4assQWn92km4wEHhAKoGDcQnn+9EyeH3McM8SMeJsd 4qnXrpAC9hg7WI1hikDezAGQVkNkKZyDevVf1EuUkVR/kM6Ddqrk3Lr/RWVWhVvH U+S5AVtQOtkA7CW9QvuxE1w5CQGHP/AV7nabXyWR6FLiVKt6IkPCRID6Vy44Nw0U hhZfGaBzIaG/WgCgewp8ihupn+kHuq/xEHVSwcAE6WZUHXCgTkP4aEMqx9EYs8fh G5FDXMPRzuMKd/AsDF4NvR4S6HYx48nK -----END CERTIFICATE-----Generated at Sat Jun 14 18:43:47 2025 by rpki-client