$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: 0ykJq91+FhriembHv2AK/9cCIGDkTcclEvxzMUIkolE= Subject key identifier: 7E:D5:94:E2:A8:A7:7F:A1:77:13:69:F0:13:46:1F:1C:4F:36:3C:4C Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0708 Signing time: Thu 12 Jun 2025 21:34:20 +0000 Manifest this update: Thu 12 Jun 2025 21:34:19 +0000 Manifest next update: Thu 19 Jun 2025 21:34:19 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: 6fMVD0xwnZIMPGDRPn9rDZEViEWiBAKzn3z8FZ50gNM=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: 4rISf9Z0gDtlAylgqmkLRj4oHpOaisWHbdYvnEyJBHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: Jun 12 21:34:19 2025 GMT Not After : Jun 19 21:34:19 2025 GMT Subject: CN=684b47db-5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:97:d1:7e:b5:3b:f0:31:95:b9:6b:a3:c3: 0c:cf:a2:8b:90:b7:85:3b:7f:b8:56:72:1e:15:ea: b1:9a:2a:19:12:9d:c9:f1:e0:01:9d:fa:f0:d4:14: bc:5a:53:d7:4e:b9:bb:77:89:12:b7:d5:c2:4b:23: c5:f7:13:cd:11:95:74:34:b9:78:65:dd:b1:81:ae: e9:d7:a1:32:bd:91:7a:b6:48:24:ea:58:d9:47:12: 5c:58:59:9b:b8:3c:46:71:3a:9e:70:42:37:eb:4e: d4:24:4a:50:e3:e6:a4:0c:44:84:bf:f1:0a:2c:ac: ac:a9:7e:30:84:88:09:66:6c:3e:e3:ec:45:b1:a9: 7a:19:97:03:67:70:41:3a:bc:0b:ae:dd:e9:16:28: bf:a5:6e:67:cb:97:9d:aa:6c:41:11:7e:68:1f:80: 09:d0:6c:ee:2e:69:9a:16:3d:6e:53:18:8c:40:67: 1c:ab:46:d6:eb:56:b7:ef:4d:f7:44:de:c2:e8:77: ef:68:08:35:17:55:af:c5:81:dd:f6:8c:96:35:3d: a8:33:77:ef:96:cc:5f:3d:81:3b:86:0b:c7:4d:97: d8:10:73:2e:8b:83:77:bb:ef:a3:ea:78:7e:f5:92: 5d:ed:b8:f8:e1:34:97:42:ed:ab:38:fd:a8:71:31: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:94:E2:A8:A7:7F:A1:77:13:69:F0:13:46:1F:1C:4F:36:3C:4C X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:de:45:f8:f8:d5:1a:7f:aa:93:f7:3a:1c:06:e3:b1:f6:de: 2c:07:3c:83:fe:73:4d:92:89:8c:4f:84:99:62:54:39:e1:ec: 83:22:11:67:94:32:e0:da:8c:8f:a8:55:a0:f2:e9:bb:81:2d: 97:f6:47:af:df:c4:61:39:60:b2:98:4f:17:d5:1f:26:36:51: a5:6c:a1:29:f8:de:0b:e3:10:01:c2:15:1d:08:d8:97:17:d5: ce:c8:70:fe:4c:46:69:f9:da:e6:4d:73:3b:f6:2b:1a:f4:8b: a0:a9:76:81:14:2d:e4:a0:4b:37:b7:35:3a:c7:fd:8b:95:f5: 6c:28:b2:dc:1c:36:65:0a:d0:32:62:73:ee:2b:84:cf:4e:ee: e5:12:d5:f9:d4:1c:f4:02:5e:b1:70:28:15:8a:89:9b:a9:bb: e2:14:58:eb:57:5c:20:57:bc:bf:3e:fc:c4:a1:4e:ff:0a:29: 18:b8:e2:18:c9:68:15:60:ad:ac:4b:98:15:c1:ed:3d:fa:79: d4:e2:1d:da:8b:92:d4:b9:df:66:53:1e:59:ba:0d:95:a3:8f: db:ef:fc:c7:ab:bb:8b:ab:e2:30:94:74:af:a3:e9:3b:1d:56: 29:a6:c6:36:43:3f:77:fb:b9:2d:9c:ac:04:f6:1e:20:6c:c6: 58:14:4b:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUwNjEyMjEzNDE5WhcNMjUwNjE5MjEzNDE5WjAYMRYwFAYD VQQDEw02ODRiNDdkYi01NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz82X0X61O/Axlblro8MMz6KLkLeFO3+4VnIeFeqxmioZEp3J8eABnfrw1BS8 WlPXTrm7d4kSt9XCSyPF9xPNEZV0NLl4Zd2xga7p16EyvZF6tkgk6ljZRxJcWFmb uDxGcTqecEI3607UJEpQ4+akDESEv/EKLKysqX4whIgJZmw+4+xFsal6GZcDZ3BB OrwLrt3pFii/pW5ny5edqmxBEX5oH4AJ0GzuLmmaFj1uUxiMQGccq0bW61a37033 RN7C6HfvaAg1F1WvxYHd9oyWNT2oM3fvlsxfPYE7hgvHTZfYEHMui4N3u++j6nh+ 9ZJd7bj44TSXQu2rOP2ocTHlxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7VlOKo p3+hdxNp8BNGHxxPNjxMMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb3kX4+NUaf6qT9zocBuOx9t4sBzyD/nNNkomMT4SZYlQ54eyDIhFn lDLg2oyPqFWg8um7gS2X9kev38RhOWCymE8X1R8mNlGlbKEp+N4L4xABwhUdCNiX F9XOyHD+TEZp+drmTXM79isa9IugqXaBFC3koEs3tzU6x/2LlfVsKLLcHDZlCtAy YnPuK4TPTu7lEtX51Bz0Al6xcCgViombqbviFFjrV1wgV7y/PvzEoU7/CikYuOIY yWgVYK2sS5gVwe09+nnU4h3ai5LUud9mUx5Zug2Vo4/b7/zHq7uLq+IwlHSvo+k7 HVYppsY2Qz93+7ktnKwE9h4gbMZYFEve -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:15 2025 by rpki-client