$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: GD3KCiK9wwD3OGGUw2vA1Ehwui4tH2SsHvJ7/US1t7g= Subject key identifier: 8C:7E:6D:8A:64:C3:B2:7E:A8:66:CE:1D:78:13:EA:2C:35:A8:12:57 Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 59 Signing time: Sun 15 Jun 2025 06:14:56 +0000 Manifest this update: Sun 15 Jun 2025 06:14:55 +0000 Manifest next update: Sun 22 Jun 2025 06:14:55 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: 58ByeZXS5yfVgvG6qu3l/d2wku+W6n/+33wunU+WmBA=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Jun 15 06:14:55 2025 GMT Not After : Jun 22 06:14:55 2025 GMT Subject: CN=684e64e0-c219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c8:2a:1b:a6:e3:2b:39:60:db:b3:5e:57:e7: 3a:f8:e0:1f:82:2d:5a:a5:5d:bb:30:04:a3:09:ac: be:04:a5:06:ed:fe:7a:aa:bb:cc:05:1b:97:80:c5: a1:df:cf:e4:28:57:4d:58:9f:6a:b8:92:b3:77:d9: 8f:26:0f:d9:f7:ac:b3:2d:2f:ce:9b:1e:71:47:da: bd:2f:06:6b:cd:64:fb:f8:ca:52:05:ed:71:c0:8d: c2:a8:be:14:34:a6:39:5b:3c:d5:f5:71:6d:13:1d: 74:07:95:54:b9:5f:13:0b:cc:af:16:fb:85:0d:2d: c5:b0:5a:b0:da:53:2e:d1:c6:70:de:57:f2:db:dc: 76:65:0c:f6:bd:b4:d1:97:cf:a4:30:ca:7e:83:96: b2:00:69:7f:59:9d:42:92:cc:eb:34:8f:67:1d:33: 1f:33:c9:15:6a:cc:09:78:f4:5f:b0:0a:69:83:58: bd:51:7d:26:43:3d:29:5b:3e:ae:35:68:97:aa:b8: 46:19:e3:6c:9a:d9:a0:97:c1:93:1d:9b:b5:e4:ae: b8:2d:f5:90:87:60:df:4a:24:1e:09:b4:76:ab:14: 21:3a:5d:32:3c:a5:64:23:6a:6e:4b:22:30:cc:a6: 4b:e2:0a:64:11:9c:e8:4b:4a:63:ad:2b:da:40:ec: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:6D:8A:64:C3:B2:7E:A8:66:CE:1D:78:13:EA:2C:35:A8:12:57 X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9d:d6:3d:19:ff:8e:a0:71:99:59:a9:cb:92:ab:cb:d0:e5: f7:fe:a3:c7:a7:54:15:11:b8:2c:a8:2a:d6:f3:61:7e:78:ae: 2e:8c:f7:15:14:15:05:91:77:d4:45:c9:26:37:74:74:97:26: 26:f7:73:0b:47:75:f5:0a:c5:f4:e2:b6:5d:42:78:2b:81:4f: b9:16:96:36:00:b7:f9:8c:9e:55:a6:94:21:1c:e7:7b:fe:8b: a1:0a:e5:94:67:1a:33:86:64:f1:85:50:90:1c:ca:30:97:b6: 60:97:ab:6e:3e:9e:69:c6:da:5c:bd:46:04:70:88:31:b2:2d: 63:c2:4d:2d:45:92:34:ef:24:09:09:98:89:bf:1a:53:f0:3a: 68:b9:83:e6:82:62:76:22:52:1a:3e:64:37:30:d3:3f:61:c3: 7a:78:79:69:72:80:c2:b5:6d:69:6d:e2:59:95:96:34:5e:43: 43:ea:dd:07:dd:01:75:f6:25:a6:c2:bf:eb:03:9f:93:b7:61: e8:96:7d:ec:08:d5:16:8c:31:4a:f9:73:40:e2:d5:9a:7c:a5: 95:9a:13:f5:48:6b:eb:14:a0:41:d6:9e:81:c0:a3:d3:50:e1: 09:df:53:fe:df:d1:80:cd:64:93:05:46:3f:49:57:aa:4d:dd: 7a:20:b5:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA2MTUwNjE0NTVaFw0yNTA2MjIwNjE0NTVaMBgxFjAUBgNV BAMTDTY4NGU2NGUwLWMyMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPyCobpuMrOWDbs15X5zr44B+CLVqlXbswBKMJrL4EpQbt/nqqu8wFG5eAxaHf z+QoV01Yn2q4krN32Y8mD9n3rLMtL86bHnFH2r0vBmvNZPv4ylIF7XHAjcKovhQ0 pjlbPNX1cW0THXQHlVS5XxMLzK8W+4UNLcWwWrDaUy7RxnDeV/Lb3HZlDPa9tNGX z6Qwyn6DlrIAaX9ZnUKSzOs0j2cdMx8zyRVqzAl49F+wCmmDWL1RfSZDPSlbPq41 aJequEYZ42ya2aCXwZMdm7Xkrrgt9ZCHYN9KJB4JtHarFCE6XTI8pWQjam5LIjDM pkviCmQRnOhLSmOtK9pA7AUbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjH5timTD sn6oZs4deBPqLDWoElcwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAByd1j0Z/46gcZlZqcuSq8vQ5ff+o8enVBURuCyoKtbzYX54ri6M9xUU FQWRd9RFySY3dHSXJib3cwtHdfUKxfTitl1CeCuBT7kWljYAt/mMnlWmlCEc53v+ i6EK5ZRnGjOGZPGFUJAcyjCXtmCXq24+nmnG2ly9RgRwiDGyLWPCTS1FkjTvJAkJ mIm/GlPwOmi5g+aCYnYiUho+ZDcw0z9hw3p4eWlygMK1bWlt4lmVljReQ0Pq3Qfd AXX2JabCv+sDn5O3YeiWfewI1RaMMUr5c0Di1Zp8pZWaE/VIa+sUoEHWnoHAo9NQ 4QnfU/7f0YDNZJMFRj9JV6pN3Xogteg= -----END CERTIFICATE-----Generated at Mon Jun 16 21:44:08 2025 by rpki-client