$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: bQoawL7RvsJuoR6JbyHnMJiIJaOoQDvGUqCPNWOxZXE= Subject key identifier: FF:51:4A:93:E8:A4:94:C6:8E:8D:E8:F5:F5:67:8F:93:70:1C:30:08 Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 0678 Signing time: Thu 12 Jun 2025 22:00:16 +0000 Manifest this update: Thu 12 Jun 2025 22:00:15 +0000 Manifest next update: Thu 19 Jun 2025 22:00:15 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: w4qcgPIdMIOucTaEJJFmbWs8nQyHbg5YKppsRFA6j70=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Jun 12 22:00:15 2025 GMT Not After : Jun 19 22:00:15 2025 GMT Subject: CN=684b4df0-fb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:ab:5e:66:e1:13:68:f6:d7:e8:0c:3f:d0: 4f:7a:13:c9:fb:9d:67:0f:5f:ee:79:71:7f:a3:4d: 8b:18:74:93:be:c7:3d:61:b3:c8:05:1f:9d:5a:f4: 26:f8:2a:47:87:00:1d:ed:1b:06:fb:9e:f0:bb:3b: c6:fb:bd:48:11:d2:86:d0:54:1c:01:8b:62:2a:44: c8:c0:e1:50:78:00:ff:e3:b5:83:b2:ad:2b:c7:26: 81:ac:99:7a:dc:ec:d4:d1:e8:98:97:26:4a:31:48: 22:7e:18:85:80:f3:c4:0d:67:fc:af:8e:ee:07:72: c9:e0:d7:66:b0:c7:c7:ef:e0:ce:68:8f:b1:fc:41: 16:75:60:eb:9a:28:00:f9:5f:e8:43:65:b1:a6:b3: 36:41:56:fd:09:fc:97:9f:98:e9:1c:8c:b1:24:46: c4:ce:20:c6:c9:b7:16:cb:c7:54:46:66:7b:97:4e: 5a:0b:b9:93:31:67:28:d5:c6:76:6c:06:8c:a6:f9: e9:24:90:f0:cf:d4:54:8b:4e:ec:4b:66:e7:fe:67: 94:db:25:1d:65:9d:f1:16:c9:80:a5:b1:61:6a:3d: 28:9a:a9:43:a1:87:d7:92:a1:96:bd:fe:ee:3d:1f: ed:f9:5e:80:09:49:40:b9:7f:9b:8c:ed:eb:89:b7: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:51:4A:93:E8:A4:94:C6:8E:8D:E8:F5:F5:67:8F:93:70:1C:30:08 X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b0:fe:e1:8d:74:91:5d:a5:f4:4c:db:32:85:8e:e5:f3:8c: f5:1f:14:cb:75:a6:a0:15:bc:02:d4:2f:91:10:fe:1f:b9:00: f8:60:b1:b9:3a:2b:8a:0f:99:28:23:f9:68:2e:98:40:e9:e1: da:03:32:cc:78:b2:bd:02:5f:d1:5c:83:28:28:57:03:d0:b4: e4:ea:13:46:d5:e4:2e:81:99:76:65:96:79:e9:0a:b4:8f:a6: 6c:e0:c6:e7:73:8d:0d:44:1a:05:d7:cf:7a:e2:af:7c:f2:68: 6d:4c:a1:00:04:c9:eb:6e:42:59:ec:80:61:58:d9:e3:55:8e: d4:ae:20:cd:f7:ae:34:ee:c7:26:5e:12:27:04:9a:77:50:97: 72:6a:b2:d4:29:22:f5:f8:57:fe:ba:32:5e:2a:44:2a:2c:4d: ac:56:66:83:fe:00:b2:cb:4f:33:3d:8c:5a:de:9f:90:ed:5c: e1:c8:3e:23:e0:ff:83:5e:1d:d4:24:f7:37:b3:bd:5e:a0:f0: cf:35:ae:bb:54:47:66:91:e4:d0:84:3c:77:19:39:06:d2:3d: e4:e1:a9:91:65:22:a5:d7:89:ff:f0:8d:42:6e:d6:0f:08:43: 25:eb:74:ca:96:49:5a:38:ed:5e:fa:33:e6:44:6f:a5:68:ae: e3:83:22:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUwNjEyMjIwMDE1WhcNMjUwNjE5MjIwMDE1WjAYMRYwFAYD VQQDEw02ODRiNGRmMC1mYjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs52rXmbhE2j21+gMP9BPehPJ+51nD1/ueXF/o02LGHSTvsc9YbPIBR+dWvQm +CpHhwAd7RsG+57wuzvG+71IEdKG0FQcAYtiKkTIwOFQeAD/47WDsq0rxyaBrJl6 3OzU0eiYlyZKMUgifhiFgPPEDWf8r47uB3LJ4NdmsMfH7+DOaI+x/EEWdWDrmigA +V/oQ2WxprM2QVb9CfyXn5jpHIyxJEbEziDGybcWy8dURmZ7l05aC7mTMWco1cZ2 bAaMpvnpJJDwz9RUi07sS2bn/meU2yUdZZ3xFsmApbFhaj0omqlDoYfXkqGWvf7u PR/t+V6ACUlAuX+bjO3ribe+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9RSpPo pJTGjo3o9fVnj5NwHDAIMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlsP7hjXSRXaX0TNsyhY7l84z1HxTLdaagFbwC1C+REP4fuQD4YLG5 OiuKD5koI/loLphA6eHaAzLMeLK9Al/RXIMoKFcD0LTk6hNG1eQugZl2ZZZ56Qq0 j6Zs4Mbnc40NRBoF18964q988mhtTKEABMnrbkJZ7IBhWNnjVY7UriDN96407scm XhInBJp3UJdyarLUKSL1+Ff+ujJeKkQqLE2sVmaD/gCyy08zPYxa3p+Q7VzhyD4j 4P+DXh3UJPc3s71eoPDPNa67VEdmkeTQhDx3GTkG0j3k4amRZSKl14n/8I1CbtYP CEMl63TKlklaOO1e+jPmRG+laK7jgyIX -----END CERTIFICATE-----Generated at Sat Jun 14 18:41:57 2025 by rpki-client