$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: 6qIm1kz/jGsC6PYFFyjkOstGVA1pLlTJxpD0OWMMlxo= Subject key identifier: EE:EA:81:AD:81:37:EE:9C:17:BB:13:AC:05:B0:CC:DF:B5:BB:DD:B8 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: BC Signing time: Sun 15 Jun 2025 05:02:08 +0000 Manifest this update: Sun 15 Jun 2025 05:02:08 +0000 Manifest next update: Sun 22 Jun 2025 05:02:08 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: blP/a4n0DjtnrDm95rbDXYm5QeGqT21jJ51pR0tZtSc=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Jun 15 05:02:08 2025 GMT Not After : Jun 22 05:02:08 2025 GMT Subject: CN=684e53d0-ad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:b4:9c:d7:93:35:54:66:2c:9b:dd:59:12: 8c:73:89:c8:fd:55:33:20:4f:65:a5:2a:5f:3f:12: 22:eb:2b:b5:6b:7e:48:14:79:6d:44:05:7a:3e:4c: 2f:d9:58:98:ab:4e:86:4a:5d:c9:b0:b5:1e:5a:84: f4:9d:4b:bd:a3:18:db:e1:bb:60:77:52:30:41:08: 66:19:e9:d2:e8:f3:a9:df:d8:6b:b7:b7:b1:66:0c: 5b:46:46:e2:42:68:cd:fd:a1:65:3b:c1:de:8b:b5: 0e:db:e1:e0:fc:15:19:38:16:23:3f:2b:11:ac:c3: 0a:11:8e:bc:8f:a7:3c:77:60:5a:22:63:52:72:98: 7e:06:41:f8:34:59:da:97:69:5d:61:b6:ca:4c:a4: 23:33:f7:31:11:33:6e:f8:e7:51:87:a7:08:4c:81: 53:eb:4e:e7:ee:3d:da:54:43:af:83:31:ff:4d:ae: 9e:d3:be:fe:5a:a1:7b:2b:e5:17:1c:b7:4c:48:8c: 93:94:c5:7e:ac:a6:f3:dd:bd:59:19:53:d8:a8:6b: c0:bb:0c:a5:11:57:af:8f:4e:da:2b:6b:2e:f0:12: a4:76:76:2c:00:02:b4:3f:ac:00:33:19:79:cf:a6: ae:90:0f:d4:e6:03:8c:77:28:f1:f6:47:76:7a:38: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EA:81:AD:81:37:EE:9C:17:BB:13:AC:05:B0:CC:DF:B5:BB:DD:B8 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5f:f8:6f:a6:7d:f7:30:99:31:92:a7:2c:58:2c:29:bb:a9: 5b:a4:53:73:97:28:dd:45:a1:b3:b9:21:a3:12:7e:c4:98:3f: 2f:e3:7e:c2:3f:c2:4f:9e:9e:37:8d:70:aa:2f:77:5b:b6:60: ca:4e:82:7d:a9:c7:b9:33:b1:1d:4f:51:58:74:dd:81:84:15: 31:64:6b:a7:6e:f5:22:71:ca:ca:c8:cb:a7:74:ae:d6:8b:c1: 98:f8:f4:c1:6a:ed:34:18:e5:97:df:f5:bc:cf:3f:07:20:7a: e9:7c:5d:51:b5:e1:2f:14:e7:38:85:d5:93:dc:34:c7:b8:0f: b4:f4:ee:ca:13:b6:da:f1:69:66:c5:f8:52:cd:db:e5:58:95: 2d:07:7f:50:46:b6:aa:8a:b4:ed:f8:53:8e:ae:2a:e1:66:35: 1a:1b:76:5a:f9:a8:52:1b:ba:5a:69:d5:90:65:61:7d:81:89: 3b:9b:f6:f1:e4:3e:71:47:de:b3:2f:9d:3e:8c:ce:b4:24:f0: 0a:94:44:c1:1b:7f:d8:dc:aa:ee:3a:dd:3a:1d:d4:a8:8e:99: bc:89:47:a6:67:cd:4b:73:db:df:b2:14:46:ec:00:4c:0a:aa: 3b:2f:6d:5b:f4:8a:a4:2f:a1:7f:07:b8:7f:9e:f1:b6:ea:61: 26:e4:ca:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwNjE1MDUwMjA4WhcNMjUwNjIyMDUwMjA4WjAYMRYwFAYD VQQDEw02ODRlNTNkMC1hZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxK0nNeTNVRmLJvdWRKMc4nI/VUzIE9lpSpfPxIi6yu1a35IFHltRAV6Pkwv 2ViYq06GSl3JsLUeWoT0nUu9oxjb4btgd1IwQQhmGenS6POp39hrt7exZgxbRkbi QmjN/aFlO8Hei7UO2+Hg/BUZOBYjPysRrMMKEY68j6c8d2BaImNScph+BkH4NFna l2ldYbbKTKQjM/cxETNu+OdRh6cITIFT607n7j3aVEOvgzH/Ta6e077+WqF7K+UX HLdMSIyTlMV+rKbz3b1ZGVPYqGvAuwylEVevj07aK2su8BKkdnYsAAK0P6wAMxl5 z6aukA/U5gOMdyjx9kd2ejirIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7qga2B N+6cF7sTrAWwzN+1u924MB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2X/hvpn33MJkxkqcsWCwpu6lbpFNzlyjdRaGzuSGjEn7EmD8v437C P8JPnp43jXCqL3dbtmDKToJ9qce5M7EdT1FYdN2BhBUxZGunbvUiccrKyMundK7W i8GY+PTBau00GOWX3/W8zz8HIHrpfF1RteEvFOc4hdWT3DTHuA+09O7KE7ba8Wlm xfhSzdvlWJUtB39QRraqirTt+FOOrirhZjUaG3Za+ahSG7paadWQZWF9gYk7m/bx 5D5xR96zL50+jM60JPAKlETBG3/Y3KruOt06HdSojpm8iUemZ81Lc9vfshRG7ABM Cqo7L21b9IqkL6F/B7h/nvG26mEm5MpY -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:31 2025 by rpki-client