$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: cOykNrkGxueP3ukytvQK8SW/BHb3BN3voh7MiAHMF50= Subject key identifier: C2:56:21:32:B6:D9:86:3A:5E:D1:92:AF:D1:32:60:37:45:59:3F:66 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 351E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34BE Signing time: Sat 14 Jun 2025 14:24:21 +0000 Manifest this update: Sat 14 Jun 2025 14:24:20 +0000 Manifest next update: Sat 21 Jun 2025 14:24:20 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: hWmvuyCCuK+k//30TBhRZPoFY4vQJmT35jomPRVhe2Q=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13598 (0x351e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Jun 14 14:24:20 2025 GMT Not After : Jun 21 14:24:20 2025 GMT Subject: CN=684d8615-5059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:91:7d:f4:24:b3:99:d1:1c:b7:f5:a4:dd: 3b:bd:69:e4:20:a2:6f:bb:e3:1e:3c:7a:74:ac:fa: 11:71:f6:45:47:9c:77:63:3a:ee:7a:1e:61:e3:39: f0:fb:80:96:78:d8:1b:13:19:21:11:ba:12:3c:16: 9a:06:07:02:dc:e7:ed:e9:c5:17:02:28:a3:f9:ed: 13:fa:1b:8b:90:56:c4:b2:e6:9d:3c:c3:8e:bb:f2: ed:34:cf:f2:d6:30:e8:06:fa:fc:73:e3:11:00:32: 42:eb:c9:5a:e1:8f:ea:1f:7c:81:fe:10:46:0f:02: e6:0c:1f:30:45:f6:b5:3b:35:79:42:37:df:2b:ab: 92:40:5a:da:93:21:b7:a2:8a:97:01:41:14:5f:89: 1d:e3:7f:e4:7d:4e:f2:31:af:6f:bd:eb:2e:00:a8: ed:39:a7:eb:bb:8c:5b:86:33:51:fc:f7:7e:a7:ca: 81:14:30:b2:f3:1f:00:53:38:08:ac:d8:8c:20:b0: 94:c2:d1:90:c5:fc:4d:36:9a:6d:5f:90:c9:39:3d: 4f:de:82:b3:0a:f1:70:92:bc:6f:57:6b:de:9a:e8: 41:0e:7a:b8:44:cd:b1:46:33:cd:f8:b8:1f:36:f8: 58:62:89:8e:cd:d2:6f:34:c4:41:b1:71:d6:48:83: 22:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:56:21:32:B6:D9:86:3A:5E:D1:92:AF:D1:32:60:37:45:59:3F:66 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:ef:73:46:0b:74:f4:fd:cb:e8:d8:49:96:3a:66:66:cf: b5:5a:b2:7f:6f:47:8b:8d:0d:ca:bd:e3:2d:9b:bf:01:55:17: f5:d4:8b:da:3d:4e:1f:b7:2b:9f:42:bf:11:e3:2c:86:d0:6b: 04:8a:6e:ef:47:3b:bf:4e:b0:b7:55:46:c3:59:a7:96:1b:78: cf:bb:0c:69:a2:52:3a:1b:8f:e5:1c:a7:1f:fa:00:28:1f:ee: 68:c3:a2:1c:6c:72:fe:4b:a7:0d:3b:34:a2:9f:49:af:9b:08: ad:bb:6c:99:fb:52:4c:1b:68:67:6d:7e:23:29:08:7a:70:c5: bb:56:c0:45:38:b5:5c:e8:c2:66:2a:b6:7e:84:48:55:a3:d7: 18:82:bd:6c:67:56:27:57:b3:83:17:69:73:0f:71:58:73:f7: e7:71:a4:f3:35:2d:78:fc:12:41:65:e3:e4:ee:04:ea:ff:58: ff:2c:ca:92:cb:91:c8:84:91:76:50:71:4c:8a:5f:40:e9:21: 1d:81:27:f3:0a:cc:2e:63:f0:9c:a5:59:7b:65:3d:bc:d0:85: 74:a7:c6:bd:08:3a:c7:3a:b6:48:c8:cb:9d:43:78:13:bf:78: 48:c0:9c:ed:f4:a4:c6:40:69:6c:13:75:ad:49:22:3c:3a:20: c3:0e:12:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNjE0MTQyNDIwWhcNMjUwNjIxMTQyNDIwWjAYMRYwFAYD VQQDEw02ODRkODYxNS01MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoGRffQks5nRHLf1pN07vWnkIKJvu+MePHp0rPoRcfZFR5x3Yzrueh5h4znw +4CWeNgbExkhEboSPBaaBgcC3Oft6cUXAiij+e0T+huLkFbEsuadPMOOu/LtNM/y 1jDoBvr8c+MRADJC68la4Y/qH3yB/hBGDwLmDB8wRfa1OzV5QjffK6uSQFrakyG3 ooqXAUEUX4kd43/kfU7yMa9vvesuAKjtOafru4xbhjNR/Pd+p8qBFDCy8x8AUzgI rNiMILCUwtGQxfxNNpptX5DJOT1P3oKzCvFwkrxvV2vemuhBDnq4RM2xRjPN+Lgf NvhYYomOzdJvNMRBsXHWSIMiOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJWITK2 2YY6XtGSr9EyYDdFWT9mMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn6+9zRgt09P3L6NhJljpmZs+1WrJ/b0eLjQ3KveMtm78BVRf11Iva PU4ftyufQr8R4yyG0GsEim7vRzu/TrC3VUbDWaeWG3jPuwxpolI6G4/lHKcf+gAo H+5ow6IcbHL+S6cNOzSin0mvmwitu2yZ+1JMG2hnbX4jKQh6cMW7VsBFOLVc6MJm KrZ+hEhVo9cYgr1sZ1YnV7ODF2lzD3FYc/fncaTzNS14/BJBZePk7gTq/1j/LMqS y5HIhJF2UHFMil9A6SEdgSfzCswuY/CcpVl7ZT280IV0p8a9CDrHOrZIyMudQ3gT v3hIwJzt9KTGQGlsE3WtSSI8OiDDDhJq -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:05 2025 by rpki-client