$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: 5E/gOyXfYAsHi5+cdbvU30FsXkW9RUC4rCbsbTqWETs= Subject key identifier: 2E:C1:29:C8:99:A9:4E:8D:FD:D0:06:52:04:EE:B6:C6:AA:1F:FC:F7 Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 07B3 Signing time: Mon 16 Jun 2025 21:03:15 +0000 Manifest this update: Mon 16 Jun 2025 21:03:14 +0000 Manifest next update: Mon 23 Jun 2025 21:03:14 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: i7xTaksDoid8LTdqwgoMNJYZJny+87S5J2xvd6/JdVw=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Jun 16 21:03:14 2025 GMT Not After : Jun 23 21:03:14 2025 GMT Subject: CN=68508692-b9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:a2:25:7f:aa:e1:73:5a:76:4f:90:fc:56: 8a:e9:8f:82:ee:3b:3a:4e:81:a5:d9:3a:cf:2d:e0: 40:a9:23:11:2c:fe:d8:73:8f:d1:00:9c:00:6e:d2: 2d:4f:a6:80:0a:f3:15:1e:93:52:ff:72:6b:bf:24: 87:53:f1:36:50:7d:e3:0f:4f:79:18:56:fe:01:34: 10:60:89:8a:cb:46:32:f2:98:e1:bb:a5:e3:55:12: 54:29:eb:2f:c3:b6:55:a8:bb:27:af:cd:1a:1d:3a: 28:35:b8:c4:48:34:36:4b:61:8d:5b:52:8d:86:fa: 2f:30:d3:e0:43:28:35:d4:fa:6f:b1:fe:00:06:0b: a3:4a:d3:a4:2c:27:10:d0:9f:92:d0:51:45:ce:d5: 43:96:ee:db:41:f8:a3:e5:9e:50:c0:f4:81:05:f4: 13:f6:96:7e:36:d4:92:d9:48:e7:83:7b:0b:30:40: 20:e2:fd:33:da:ff:03:8e:bc:92:63:bd:40:83:9b: f0:9d:47:5d:7d:fe:aa:94:d1:fe:0c:80:97:5f:1b: 9c:f5:ff:87:8c:2d:d6:89:5f:cb:17:73:f8:6b:2f: a9:48:97:29:7a:2e:16:14:f6:bf:2f:13:8f:d0:d0: 59:d7:37:2b:ac:90:d9:0c:e9:25:af:72:43:e1:f8: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:29:C8:99:A9:4E:8D:FD:D0:06:52:04:EE:B6:C6:AA:1F:FC:F7 X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:40:e5:40:18:11:b3:1f:61:1a:ac:41:f6:27:46:4c:81:d3: 7f:92:78:25:73:25:a2:34:e0:ff:50:20:71:84:de:5d:4a:01: f6:77:6e:fa:1f:d5:c0:e0:7e:82:82:52:15:12:1a:a3:d1:c8: 00:26:e0:88:f0:30:c9:16:6f:e4:2f:d6:db:9e:68:0f:3b:d8: 1d:ac:a5:e3:d3:a6:10:d7:2f:a6:8b:45:5f:9c:a5:62:96:a0: 0c:76:cf:8f:0b:5a:2c:7e:a1:ee:05:a0:e4:93:00:57:6e:71: fc:0f:ff:f3:24:5b:44:01:3d:72:35:9d:7d:a9:30:d2:0f:cd: 7b:b4:33:c6:13:ec:7e:a0:39:92:7a:3d:4c:23:72:d5:33:62: 80:9b:6f:28:4c:9e:c2:95:5d:e2:19:e8:9c:f6:0a:d9:f0:a4: 3b:74:dc:84:81:69:06:2d:9e:1f:55:4a:6d:33:de:06:37:23: c1:23:d5:4c:b6:26:f9:b5:d7:b7:21:10:16:f8:cf:32:bf:b9: e2:83:0c:d4:64:9b:7b:56:60:c6:94:85:b1:4a:4f:f0:47:17: 8c:4d:5d:31:7c:ab:50:f1:64:f9:70:02:a6:79:8b:36:64:9b: 75:1b:7a:a2:50:29:56:fc:d2:a0:d8:2c:cf:fe:de:c2:b0:b4: ae:7f:d7:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwNjE2MjEwMzE0WhcNMjUwNjIzMjEwMzE0WjAYMRYwFAYD VQQDEw02ODUwODY5Mi1iOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK6iJX+q4XNadk+Q/FaK6Y+C7js6ToGl2TrPLeBAqSMRLP7Yc4/RAJwAbtIt T6aACvMVHpNS/3JrvySHU/E2UH3jD095GFb+ATQQYImKy0Yy8pjhu6XjVRJUKesv w7ZVqLsnr80aHTooNbjESDQ2S2GNW1KNhvovMNPgQyg11Ppvsf4ABgujStOkLCcQ 0J+S0FFFztVDlu7bQfij5Z5QwPSBBfQT9pZ+NtSS2Ujng3sLMEAg4v0z2v8DjryS Y71Ag5vwnUddff6qlNH+DICXXxuc9f+HjC3WiV/LF3P4ay+pSJcpei4WFPa/LxOP 0NBZ1zcrrJDZDOklr3JD4fgOfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7BKciZ qU6N/dAGUgTutsaqH/z3MB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtQOVAGBGzH2EarEH2J0ZMgdN/knglcyWiNOD/UCBxhN5dSgH2d276 H9XA4H6CglIVEhqj0cgAJuCI8DDJFm/kL9bbnmgPO9gdrKXj06YQ1y+mi0VfnKVi lqAMds+PC1osfqHuBaDkkwBXbnH8D//zJFtEAT1yNZ19qTDSD817tDPGE+x+oDmS ej1MI3LVM2KAm28oTJ7ClV3iGeic9grZ8KQ7dNyEgWkGLZ4fVUptM94GNyPBI9VM tib5tde3IRAW+M8yv7nigwzUZJt7VmDGlIWxSk/wRxeMTV0xfKtQ8WT5cAKmeYs2 ZJt1G3qiUClW/NKg2CzP/t7CsLSuf9dY -----END CERTIFICATE-----Generated at Wed Jun 18 18:14:01 2025 by rpki-client