$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: OOHi4lFD9VxjlulzVD9xC26C3eps2zG2QGCT/mpxH5M= Subject key identifier: 3B:F0:61:D3:C8:C8:25:C6:18:ED:E1:8B:70:8C:8B:DE:ED:57:5C:84 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1E7C Signing time: Wed 18 Jun 2025 16:03:48 +0000 Manifest this update: Wed 18 Jun 2025 16:03:47 +0000 Manifest next update: Wed 25 Jun 2025 16:03:47 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: dueWL3gPl3ryObEBkzjBe5jN7d9w/I3odeoqwul5Vds=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7820 (0x1e8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: Jun 18 16:03:47 2025 GMT Not After : Jun 25 16:03:47 2025 GMT Subject: CN=6852e363-1287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:a6:21:eb:a1:92:f1:ee:3c:bc:cb:5e:9f: dc:4c:b8:0e:a4:32:77:73:f6:cc:34:93:3a:fe:18: 44:98:70:2b:f4:1d:25:0e:7f:7f:d0:f0:32:ce:e3: 30:7b:00:d3:64:b7:f8:dc:7c:32:0d:1b:5f:80:d8: e8:16:ba:35:3e:ac:e8:9d:86:8a:1b:32:6e:87:58: d6:d1:4d:19:de:e6:37:57:20:dd:3a:85:07:49:eb: b6:74:11:46:ff:8d:2b:17:51:8e:aa:00:ef:d1:3e: b6:b1:b1:77:89:21:84:92:cf:df:fc:bc:f1:75:eb: 06:b6:e3:dc:92:f3:2b:1d:1f:2d:8c:98:81:21:7c: 43:56:c7:41:51:6c:db:e2:bc:31:95:b9:14:63:a3: 1a:ac:b0:17:a5:ab:ff:03:42:6d:d4:b3:63:bd:9a: 5e:75:b3:59:1c:76:e7:0e:f2:4d:e1:48:4d:df:84: 26:72:c8:f2:90:05:6f:d8:21:90:4b:9d:f5:b8:23: de:59:eb:f8:85:f2:a0:49:23:3f:92:26:fa:f5:11: 42:5a:71:81:2a:1e:cb:b1:96:69:ab:9c:d4:11:5d: 69:39:85:6d:bb:e1:b6:44:89:51:7c:eb:ae:83:3b: c5:a4:68:2c:58:83:49:dd:f8:3f:77:d5:35:7b:4c: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:61:D3:C8:C8:25:C6:18:ED:E1:8B:70:8C:8B:DE:ED:57:5C:84 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8a:4e:e8:1d:06:a7:a7:68:d9:9f:a8:61:bd:89:a9:6e:28: 18:9a:95:4f:c1:d4:d6:8c:64:64:82:91:13:2f:3d:d0:7d:e4: db:de:a9:ee:f1:83:cb:4d:29:63:98:72:16:76:ee:23:c1:3e: e2:4e:9f:0f:9f:23:00:50:ba:e0:2b:fd:b4:dd:50:0c:f6:f1: 00:a5:8a:17:1c:4b:82:78:d5:53:e0:e9:77:9c:87:72:f0:da: 8c:66:5d:0d:89:27:16:d5:85:2d:0e:e5:3c:57:ab:da:68:7d: 22:a3:0d:d8:fd:a4:3d:f7:e6:19:f6:8d:c9:d0:85:14:16:2b: 57:52:09:e3:78:cf:86:86:82:94:38:ea:b2:80:4d:26:d0:cb: 4d:e3:39:e1:28:d0:f3:d3:e8:a5:e6:ec:7f:96:25:a4:9d:6d: 90:1c:b4:8b:ac:c3:75:14:90:1a:8a:ac:c1:8b:ea:26:01:8c: 1b:2f:d4:71:96:32:b5:e0:91:e4:10:64:e7:71:22:cd:6a:01: aa:9c:3c:49:e9:14:7a:41:ff:1e:91:fe:f4:43:6c:7d:91:73: e9:e0:b6:ca:e8:03:46:3f:c6:e1:ef:5d:40:34:be:e6:ec:a7: be:82:07:90:fd:4b:34:19:dd:64:35:72:25:f4:a0:3f:b9:da: 05:8c:2d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNjE4MTYwMzQ3WhcNMjUwNjI1MTYwMzQ3WjAYMRYwFAYD VQQDEw02ODUyZTM2My0xMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCOmIeuhkvHuPLzLXp/cTLgOpDJ3c/bMNJM6/hhEmHAr9B0lDn9/0PAyzuMw ewDTZLf43HwyDRtfgNjoFro1PqzonYaKGzJuh1jW0U0Z3uY3VyDdOoUHSeu2dBFG /40rF1GOqgDv0T62sbF3iSGEks/f/LzxdesGtuPckvMrHR8tjJiBIXxDVsdBUWzb 4rwxlbkUY6MarLAXpav/A0Jt1LNjvZpedbNZHHbnDvJN4UhN34QmcsjykAVv2CGQ S531uCPeWev4hfKgSSM/kib69RFCWnGBKh7LsZZpq5zUEV1pOYVtu+G2RIlRfOuu gzvFpGgsWINJ3fg/d9U1e0y8NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvwYdPI yCXGGO3hi3CMi97tV1yEMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmik7oHQanp2jZn6hhvYmpbigYmpVPwdTWjGRkgpETLz3QfeTb3qnu 8YPLTSljmHIWdu4jwT7iTp8PnyMAULrgK/203VAM9vEApYoXHEuCeNVT4Ol3nIdy 8NqMZl0NiScW1YUtDuU8V6vaaH0iow3Y/aQ99+YZ9o3J0IUUFitXUgnjeM+GhoKU OOqygE0m0MtN4znhKNDz0+il5ux/liWknW2QHLSLrMN1FJAaiqzBi+omAYwbL9Rx ljK14JHkEGTncSLNagGqnDxJ6RR6Qf8ekf70Q2x9kXPp4LbK6ANGP8bh711ANL7m 7Ke+ggeQ/Us0Gd1kNXIl9KA/udoFjC1V -----END CERTIFICATE-----Generated at Fri Jun 20 13:28:10 2025 by rpki-client