$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: bkN1HOqLBnpZgBs0dCrkiU1WetfMrUhAjL35Jr/HMDo= Subject key identifier: 8E:E9:93:65:DA:5C:30:B4:BA:26:AB:4B:1A:AA:22:01:66:0F:CE:F4 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 212A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 212A Signing time: Wed 06 Aug 2025 16:00:48 +0000 Manifest this update: Wed 06 Aug 2025 16:00:48 +0000 Manifest next update: Wed 13 Aug 2025 16:00:48 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: QuP/ALmsv+UJB2Xwwt2m9HAVJncj+FrvqrGZHIaqChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8490 (0x212a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Aug 6 16:00:48 2025 GMT Not After : Aug 13 16:00:48 2025 GMT Subject: CN=68937c30-ffb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:44:e7:9d:d8:56:e7:e7:e2:9f:77:36:17: f9:93:c0:44:ff:46:c8:fc:31:b6:e3:8e:c7:1a:af: 51:ec:3f:cf:f7:bc:1c:67:af:14:ab:d9:45:87:25: bc:4e:23:fe:d9:bb:93:5c:df:5e:1f:fe:67:a7:c0: 1b:aa:8a:7e:c0:09:31:05:92:02:f5:c1:70:b6:ea: 63:b8:43:0c:40:b5:8e:c3:3e:18:78:92:66:80:9f: ca:dc:c6:9f:a8:1a:04:c3:fa:b5:9d:b2:6f:84:ea: 9a:d2:35:a6:5b:92:f9:5d:33:de:4b:2f:5d:64:67: 92:6a:f7:16:28:08:e1:fb:5d:21:4b:8c:60:3d:ae: 70:70:ea:75:ec:39:c4:f5:ec:3c:29:b7:d1:51:ce: 19:3d:6e:ca:2b:98:a4:0d:a1:d0:ec:e9:1b:82:94: 0b:b7:0e:9f:1f:81:47:c1:e0:a9:bf:17:8a:52:39: b7:5a:fc:53:16:43:e9:ac:f0:be:93:5b:a5:73:bb: d5:0e:27:99:8e:76:9e:47:cd:09:1e:89:60:d7:7c: 1a:22:5c:8c:9e:f0:38:9e:82:93:be:84:7d:ee:e0: 3f:46:ce:fe:5f:d2:66:55:47:21:f0:8a:15:d9:03: 5c:65:1c:5a:94:a9:31:35:1d:bc:21:32:4a:ab:95: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:93:65:DA:5C:30:B4:BA:26:AB:4B:1A:AA:22:01:66:0F:CE:F4 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:28:bc:fa:88:ea:c2:73:f9:23:7e:71:64:6c:51:c2:b0:ea: e6:85:f5:2b:75:be:cd:8e:07:4d:af:a6:f7:bb:d6:39:4d:21: 49:0f:f6:33:45:df:0f:8d:ef:2c:72:96:dd:f6:92:96:14:25: 61:7e:5f:12:4a:a8:18:97:8c:1e:ef:3f:13:82:c9:7d:f3:3e: 33:61:4d:ff:3d:d4:44:55:9b:fc:94:3d:b8:b4:38:63:9e:fa: 37:9e:69:73:67:ec:a2:8c:80:c7:12:cc:b8:28:bf:f6:33:68: 0e:45:08:b8:3a:04:65:d9:2c:bc:b4:94:34:1a:67:04:e2:d0: ea:69:3d:3a:f1:84:cf:8c:33:d8:6d:b7:0e:b4:dd:7d:e8:85: f2:b6:0e:67:b7:5d:7c:3e:70:5b:8c:a0:e8:1d:16:1c:59:96: bc:0c:06:6a:37:68:15:78:50:96:d1:7f:78:ea:b1:82:f0:e3: 94:ea:92:86:f5:97:40:85:86:5a:56:07:91:d1:63:b6:de:3f: 94:9e:0d:ba:36:ed:e7:be:33:f5:af:c3:c2:1f:f3:b7:11:c0: 7e:8c:0b:57:8c:32:0d:1a:0f:79:1f:3c:97:2e:f0:99:c2:0a: ff:9b:8b:bb:71:6a:a2:89:82:89:01:4b:7c:42:a1:e8:e5:ae: 69:5a:6e:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICISowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjUwODA2MTYwMDQ4WhcNMjUwODEzMTYwMDQ4WjAYMRYwFAYD VQQDEw02ODkzN2MzMC1mZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPdE553YVufn4p93Nhf5k8BE/0bI/DG2447HGq9R7D/P97wcZ68Uq9lFhyW8 TiP+2buTXN9eH/5np8Abqop+wAkxBZIC9cFwtupjuEMMQLWOwz4YeJJmgJ/K3Maf qBoEw/q1nbJvhOqa0jWmW5L5XTPeSy9dZGeSavcWKAjh+10hS4xgPa5wcOp17DnE 9ew8KbfRUc4ZPW7KK5ikDaHQ7OkbgpQLtw6fH4FHweCpvxeKUjm3WvxTFkPprPC+ k1ulc7vVDieZjnaeR80JHolg13waIlyMnvA4noKTvoR97uA/Rs7+X9JmVUch8IoV 2QNcZRxalKkxNR28ITJKq5VbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7pk2Xa XDC0uiarSxqqIgFmD870MB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKKLz6iOrCc/kjfnFkbFHCsOrmhfUrdb7NjgdNr6b3u9Y5TSFJD/Yz Rd8Pje8scpbd9pKWFCVhfl8SSqgYl4we7z8Tgsl98z4zYU3/PdREVZv8lD24tDhj nvo3nmlzZ+yijIDHEsy4KL/2M2gORQi4OgRl2Sy8tJQ0GmcE4tDqaT068YTPjDPY bbcOtN196IXytg5nt118PnBbjKDoHRYcWZa8DAZqN2gVeFCW0X946rGC8OOU6pKG 9ZdAhYZaVgeR0WO23j+Ung26Nu3nvjP1r8PCH/O3EcB+jAtXjDINGg95HzyXLvCZ wgr/m4u7cWqiiYKJAUt8QqHo5a5pWm4c -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:31 2025 by rpki-client