$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: bqKo0GZqBn+vcWUXsiXDJDKCxyWH1E/8QV+oWIz2UE8= Subject key identifier: D3:65:E0:79:A0:28:85:57:7D:CE:97:80:C3:30:67:35:C6:7B:86:8C Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C59 Signing time: Sat 14 Jun 2025 18:22:28 +0000 Manifest this update: Sat 14 Jun 2025 18:22:28 +0000 Manifest next update: Sat 21 Jun 2025 18:22:28 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: s9IfU1RvrROa/xl4HBXmBYMdrTGQsdkF+uN8p//aZZ4=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Jun 14 18:22:28 2025 GMT Not After : Jun 21 18:22:28 2025 GMT Subject: CN=684dbde4-0118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:37:30:33:77:bf:95:18:4e:ce:f0:92:4f: 49:86:e1:98:13:6a:46:33:76:22:9b:e5:43:06:72: 84:43:ee:f0:f9:4b:55:8f:7c:32:3d:1d:b0:9d:40: 06:75:5b:3f:b0:43:98:ae:c1:a4:42:d0:da:3c:7f: b9:fa:9a:f5:4a:9d:05:08:19:23:48:5e:33:72:59: c7:58:1b:40:5e:0f:c6:29:d3:c8:62:d4:84:6f:7a: 14:a4:4f:8e:71:3c:cc:87:e1:8e:ed:ac:43:eb:3b: cc:3e:7a:26:40:f5:87:97:9f:fe:eb:26:4e:11:ad: 35:77:7f:0c:8c:45:eb:da:94:f8:86:41:56:7f:34: 5c:ba:17:3a:1c:d3:65:00:52:0c:d4:3b:ba:b7:54: a8:5f:dd:cd:c4:e2:55:29:87:29:f1:71:f4:c3:9d: bf:ad:bb:7b:08:aa:bf:f9:6f:46:23:45:f8:88:21: ea:84:60:0f:8e:a6:06:81:99:b9:1e:83:d2:d7:34: 03:0a:1e:e7:d7:e8:5f:00:08:c3:52:99:3f:51:08: e5:ff:43:18:95:4f:98:6b:b6:49:e3:c8:62:0f:fb: de:86:4b:b0:1d:33:e2:e7:cd:fe:9f:bb:33:de:b8: be:36:b4:23:5e:40:80:6a:b0:69:20:ac:fc:23:8c: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:E0:79:A0:28:85:57:7D:CE:97:80:C3:30:67:35:C6:7B:86:8C X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ee:c0:fb:36:e8:b9:13:21:9c:d4:65:c3:88:5a:24:06:65: 22:de:1d:a2:ea:c4:c7:b0:a4:18:68:19:27:b1:c0:87:69:58: 55:a2:0e:ce:94:c3:a8:38:71:6a:0a:48:35:5d:f3:30:a1:dd: 91:1b:bd:9a:37:91:1f:26:4d:07:9c:5d:9b:66:4b:8e:8b:98: 73:aa:9e:b6:b7:92:f0:e5:44:e0:c7:06:7a:fb:eb:d6:10:f8: 90:73:4c:8c:c4:90:b3:78:25:17:19:10:df:47:0a:c9:22:73: 30:f2:19:93:85:33:c7:6b:80:cc:ef:4a:6b:76:4f:0b:25:dc: f4:60:96:c7:8e:75:a0:3d:da:d2:f1:9a:c1:93:dd:9c:a7:4c: 58:07:a5:50:19:ff:90:46:61:59:99:0c:70:15:63:9a:8a:bf: f1:cd:55:cc:7c:2b:8b:a6:60:7b:a4:e9:9e:ec:65:e3:90:30: 79:6c:66:bd:37:ab:10:ac:2d:ba:02:6a:b5:81:2f:fa:a3:7f: c4:aa:63:eb:ef:8c:80:84:e7:33:b2:59:52:b0:b5:42:70:2f: 6e:d0:a0:7c:59:a1:5a:11:bd:f0:d6:28:2e:1a:0c:ec:9c:ef: e8:b5:f7:ba:d4:8b:0f:c0:8c:48:05:bf:32:e8:3a:90:b9:0b: f5:28:a0:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwNjE0MTgyMjI4WhcNMjUwNjIxMTgyMjI4WjAYMRYwFAYD VQQDEw02ODRkYmRlNC0wMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz03MDN3v5UYTs7wkk9JhuGYE2pGM3Yim+VDBnKEQ+7w+UtVj3wyPR2wnUAG dVs/sEOYrsGkQtDaPH+5+pr1Sp0FCBkjSF4zclnHWBtAXg/GKdPIYtSEb3oUpE+O cTzMh+GO7axD6zvMPnomQPWHl5/+6yZOEa01d38MjEXr2pT4hkFWfzRcuhc6HNNl AFIM1Du6t1SoX93NxOJVKYcp8XH0w52/rbt7CKq/+W9GI0X4iCHqhGAPjqYGgZm5 HoPS1zQDCh7n1+hfAAjDUpk/UQjl/0MYlU+Ya7ZJ48hiD/vehkuwHTPi583+n7sz 3ri+NrQjXkCAarBpIKz8I4zO1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNl4Hmg KIVXfc6XgMMwZzXGe4aMMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV7sD7Nui5EyGc1GXDiFokBmUi3h2i6sTHsKQYaBknscCHaVhVog7O lMOoOHFqCkg1XfMwod2RG72aN5EfJk0HnF2bZkuOi5hzqp62t5Lw5UTgxwZ6++vW EPiQc0yMxJCzeCUXGRDfRwrJInMw8hmThTPHa4DM70prdk8LJdz0YJbHjnWgPdrS 8ZrBk92cp0xYB6VQGf+QRmFZmQxwFWOair/xzVXMfCuLpmB7pOme7GXjkDB5bGa9 N6sQrC26Amq1gS/6o3/EqmPr74yAhOczsllSsLVCcC9u0KB8WaFaEb3w1iguGgzs nO/otfe61IsPwIxIBb8y6DqQuQv1KKDU -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:06 2025 by rpki-client