$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: H4LPr67n5yJA69l30aItD58l3Kfm35bygvhMbjQls0Y= Subject key identifier: 6A:71:E7:ED:6C:E3:B5:3D:47:F8:6D:B2:FB:D3:E1:9F:10:0E:75:23 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0872 Signing time: Thu 12 Jun 2025 20:23:48 +0000 Manifest this update: Thu 12 Jun 2025 20:23:48 +0000 Manifest next update: Thu 19 Jun 2025 20:23:48 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: t4nVtcKCX8SmSJfBfaQFcxcjIfCnIBcN4t0RR2CSD/0=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Jun 12 20:23:48 2025 GMT Not After : Jun 19 20:23:48 2025 GMT Subject: CN=684b3754-0b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:49:5f:25:8f:70:f6:11:35:78:6b:ae:2c: 6e:31:33:9c:89:b4:5e:57:97:14:b2:8e:ab:30:b4: ce:17:fe:3a:31:96:2f:7f:df:7a:ee:98:69:3e:b5: ad:4a:e4:fa:79:c7:16:ec:b8:79:6b:38:e9:74:fb: 0a:f2:b6:df:3d:0f:8d:26:04:3c:da:6b:f9:92:0a: db:8e:06:ca:01:6a:c0:d9:b8:ae:74:10:48:09:59: 75:47:10:f4:6d:a3:5d:30:5d:52:bf:e3:4b:fa:61: 62:bc:38:97:36:f8:4d:c0:48:64:a6:8c:fc:6a:8a: df:5b:02:eb:89:d5:6b:7b:d4:de:18:6c:c0:f7:6a: 58:d2:48:de:a1:44:8e:b5:2c:88:56:75:9d:87:58: 7c:f5:76:b2:a8:98:01:a6:35:cf:4c:d2:13:4b:94: cc:46:5e:5b:6d:90:ce:4b:cc:03:91:95:5b:db:8d: 62:78:b8:60:c3:07:0a:57:4b:16:83:16:19:1b:e2: 25:8f:23:21:c8:48:9b:54:05:e0:fd:ad:c0:77:79: 1c:46:f0:49:b7:8e:b4:ab:a9:49:dd:dd:1e:00:97: ae:12:83:2d:a4:f9:36:31:c4:05:ae:a6:ad:51:c8: 3c:a9:20:57:90:bd:30:e3:7e:01:6d:4b:42:31:7e: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:71:E7:ED:6C:E3:B5:3D:47:F8:6D:B2:FB:D3:E1:9F:10:0E:75:23 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3e:8d:d1:e3:ac:18:07:bf:cd:19:a1:b9:43:12:b4:90:4d: d4:11:77:1d:0a:b2:d3:7b:be:c4:3e:74:8d:59:8c:e3:08:e6: e4:dd:05:7f:17:76:1b:4d:02:b3:d2:8c:17:74:46:a7:3e:b2: 2f:da:b3:75:60:10:dd:2d:d6:ea:69:39:d1:5f:e9:b6:43:e8: 82:ff:c9:6a:d5:be:ad:7f:42:99:e8:ee:de:9e:e8:c0:b1:23: ae:de:0e:de:12:30:8f:e0:59:a5:03:68:d3:d2:07:1b:27:ec: 9d:ff:11:eb:87:08:aa:e9:eb:af:84:01:11:2a:df:b4:86:83: 01:ae:af:6f:b9:02:8b:bd:a6:7f:e9:d4:85:8b:7e:67:32:59: 07:b1:82:ab:d3:76:bf:13:76:b0:0f:6a:e5:32:65:bc:50:f3: da:38:c6:3a:ef:c1:89:1b:e4:62:f6:56:4b:37:cc:27:77:40: f4:f4:c7:30:c8:c5:d8:ad:a5:8c:28:dd:c5:5e:9f:bc:ba:63: 66:cf:58:c1:b9:47:64:c1:9a:d6:08:5c:a3:67:32:10:ea:97: 90:96:70:61:21:4b:73:4a:4a:21:b7:95:0f:8e:3c:c1:f1:d4: 2e:83:1c:b4:ad:27:48:7c:bd:62:2f:7e:c7:eb:cd:c5:31:78: 7d:e0:3a:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNjEyMjAyMzQ4WhcNMjUwNjE5MjAyMzQ4WjAYMRYwFAYD VQQDEw02ODRiMzc1NC0wYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s9JXyWPcPYRNXhrrixuMTOcibReV5cUso6rMLTOF/46MZYvf9967phpPrWt SuT6eccW7Lh5azjpdPsK8rbfPQ+NJgQ82mv5kgrbjgbKAWrA2biudBBICVl1RxD0 baNdMF1Sv+NL+mFivDiXNvhNwEhkpoz8aorfWwLridVre9TeGGzA92pY0kjeoUSO tSyIVnWdh1h89XayqJgBpjXPTNITS5TMRl5bbZDOS8wDkZVb241ieLhgwwcKV0sW gxYZG+IljyMhyEibVAXg/a3Ad3kcRvBJt460q6lJ3d0eAJeuEoMtpPk2McQFrqat Ucg8qSBXkL0w434BbUtCMX5fgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpx5+1s 47U9R/htsvvT4Z8QDnUjMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHPo3R46wYB7/NGaG5QxK0kE3UEXcdCrLTe77EPnSNWYzjCObk3QV/ F3YbTQKz0owXdEanPrIv2rN1YBDdLdbqaTnRX+m2Q+iC/8lq1b6tf0KZ6O7enujA sSOu3g7eEjCP4FmlA2jT0gcbJ+yd/xHrhwiq6euvhAERKt+0hoMBrq9vuQKLvaZ/ 6dSFi35nMlkHsYKr03a/E3awD2rlMmW8UPPaOMY678GJG+Ri9lZLN8wnd0D09Mcw yMXYraWMKN3FXp+8umNmz1jBuUdkwZrWCFyjZzIQ6peQlnBhIUtzSkoht5UPjjzB 8dQugxy0rSdIfL1iL37H683FMXh94Dp8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:53 2025 by rpki-client