$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: CreIyg2zHlQ28i4skPsR0n1MPbOxt88RwJgsH36Gr6Y= Subject key identifier: EC:B2:34:56:2A:A3:8F:92:74:6C:BE:02:7A:82:E3:C5:AE:5A:7A:E6 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 03C7 Signing time: Sun 15 Jun 2025 00:21:42 +0000 Manifest this update: Sun 15 Jun 2025 00:21:41 +0000 Manifest next update: Sun 22 Jun 2025 00:21:41 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: 760Ja87qHNpbce5MFOl+QwRNfefWeJ3qX95daQGka58=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Jun 15 00:21:41 2025 GMT Not After : Jun 22 00:21:41 2025 GMT Subject: CN=684e1215-512c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:33:d1:6c:a6:9b:e3:c1:90:9d:ad:11:ad: 1a:80:c4:af:3f:85:5c:cb:b9:93:c7:27:0e:ef:25: 3d:76:96:0f:80:d6:fe:fd:96:31:7f:87:d7:e7:d4: 1d:52:12:e7:7b:59:7f:0e:1a:3f:05:3e:af:2b:79: 81:c5:4d:38:23:c9:11:94:34:60:da:f0:8b:c9:04: 23:61:a6:60:bb:d7:db:b8:ed:04:0a:fc:b6:46:1f: 92:d5:cf:b9:41:7d:7b:03:91:76:be:94:95:89:60: a4:4d:e9:06:5f:25:a0:2c:0d:a7:8a:96:6d:4a:82: 4b:2e:b3:b0:b6:e1:b4:01:e3:22:67:2a:de:86:ea: 6d:78:cc:1f:79:c0:e1:25:e9:44:3d:4f:b9:0c:43: b3:7d:24:cf:3e:a9:3a:81:1c:a0:7f:1a:8c:a6:6e: 4e:61:3b:b3:29:af:9a:ae:37:23:16:85:c4:04:eb: a5:0a:7c:5d:19:40:9e:ce:71:b7:70:59:0a:d5:44: dd:cc:17:f4:6a:a9:fc:e8:e9:74:ed:4d:19:e0:05: 2c:d7:ea:05:98:29:c1:5a:94:4c:1b:c9:1f:96:3f: e1:f2:83:fb:c5:89:5d:21:4c:45:06:a7:e1:ff:5b: 5e:1e:2b:bb:27:92:d2:ab:44:37:6f:7d:83:0b:b4: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:34:56:2A:A3:8F:92:74:6C:BE:02:7A:82:E3:C5:AE:5A:7A:E6 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0b:05:74:66:40:e2:e1:7e:a6:eb:d7:f0:99:31:73:b8:e5: be:09:b4:e7:02:e9:58:10:2a:a2:64:91:0d:87:59:06:6f:6c: d5:e4:7a:a5:18:ed:c9:77:4f:bd:3c:0a:6b:ea:00:52:0c:0b: 68:ee:15:5b:0e:d6:a4:01:91:d3:99:72:f9:90:a0:1f:24:fc: 32:24:61:59:bd:62:da:53:c7:2a:04:a9:59:ed:38:d3:10:5e: 70:6f:a5:01:67:da:ce:65:ab:1d:fb:4b:e7:8d:17:7f:84:a5: ee:ca:05:03:57:76:1d:25:92:f0:f7:6e:ee:a1:f8:64:a6:98: af:92:df:ac:e3:c2:2b:ec:84:3b:ec:9a:9f:dd:fd:ad:0d:c8: 35:11:7e:80:41:ae:2d:ff:1b:da:16:92:ab:6e:9b:bc:6d:09: f8:49:f8:a3:9c:9c:fa:a3:03:c4:51:dd:bc:2b:18:ee:67:8c: 8c:79:1f:0b:b4:1c:44:04:ad:ef:d0:db:e8:26:20:4e:b4:ba: b4:6b:aa:79:6d:af:69:3a:95:07:16:ec:18:90:0a:9d:2b:6a: 00:bb:5e:25:ab:43:41:57:08:f7:05:c3:c5:fd:cc:4e:4e:b4: ca:d0:a6:a7:1a:3d:ed:16:2b:63:17:f2:66:5b:32:21:da:e8: eb:b6:b0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUwNjE1MDAyMTQxWhcNMjUwNjIyMDAyMTQxWjAYMRYwFAYD VQQDEw02ODRlMTIxNS01MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ykz0Wymm+PBkJ2tEa0agMSvP4Vcy7mTxycO7yU9dpYPgNb+/ZYxf4fX59Qd UhLne1l/Dho/BT6vK3mBxU04I8kRlDRg2vCLyQQjYaZgu9fbuO0ECvy2Rh+S1c+5 QX17A5F2vpSViWCkTekGXyWgLA2nipZtSoJLLrOwtuG0AeMiZyrehupteMwfecDh JelEPU+5DEOzfSTPPqk6gRygfxqMpm5OYTuzKa+arjcjFoXEBOulCnxdGUCeznG3 cFkK1UTdzBf0aqn86Ol07U0Z4AUs1+oFmCnBWpRMG8kflj/h8oP7xYldIUxFBqfh /1teHiu7J5LSq0Q3b32DC7R0lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyyNFYq o4+SdGy+AnqC48WuWnrmMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALCwV0ZkDi4X6m69fwmTFzuOW+CbTnAulYECqiZJENh1kGb2zV5Hql GO3Jd0+9PApr6gBSDAto7hVbDtakAZHTmXL5kKAfJPwyJGFZvWLaU8cqBKlZ7TjT EF5wb6UBZ9rOZasd+0vnjRd/hKXuygUDV3YdJZLw927uofhkppivkt+s48Ir7IQ7 7Jqf3f2tDcg1EX6AQa4t/xvaFpKrbpu8bQn4SfijnJz6owPEUd28KxjuZ4yMeR8L tBxEBK3v0NvoJiBOtLq0a6p5ba9pOpUHFuwYkAqdK2oAu14lq0NBVwj3BcPF/cxO TrTK0KanGj3tFitjF/JmWzIh2ujrtrAG -----END CERTIFICATE-----Generated at Sun Jun 15 08:30:46 2025 by rpki-client