$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: e8nZV4M+flnBobr+/I81MmWqjXFUHKqd5sf1X69ZSh4= Subject key identifier: DB:B9:ED:AB:27:2F:1D:07:9D:E0:1B:D7:77:FF:50:4D:58:FA:5F:8F Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 046F Signing time: Mon 16 Jun 2025 23:43:24 +0000 Manifest this update: Mon 16 Jun 2025 23:43:23 +0000 Manifest next update: Mon 23 Jun 2025 23:43:23 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: WeLFM+KOoxmXraIRVzlEhyBoyTuVoHWpKnXX6oXQc6g=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: Jun 16 23:43:23 2025 GMT Not After : Jun 23 23:43:23 2025 GMT Subject: CN=6850ac1b-6f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:bc:a8:2f:f8:e7:a0:f3:d1:f3:e1:fb:03: 6d:c0:30:e2:6a:4a:ff:ed:39:04:a8:25:a6:80:72: 89:76:8e:e7:90:84:06:61:42:18:a1:0a:56:bc:2d: d1:ff:73:d0:54:63:8f:07:1d:83:50:00:8d:c2:4f: 7a:83:e2:1a:07:b8:26:c5:a7:29:f6:a5:12:1a:1e: 72:ca:d4:2c:c0:b6:78:57:e4:95:79:9c:22:51:79: 53:76:1f:d3:9c:a3:93:06:bf:44:83:d8:75:4b:25: 16:a0:a7:a1:2f:f9:41:2f:5f:ea:0b:ee:60:64:1e: cd:87:3d:25:49:d9:fe:f6:6f:2b:05:ff:40:1e:92: 79:d8:7c:60:81:44:08:c3:81:cb:fe:59:78:25:70: 5a:1f:af:ab:8c:6d:f7:69:85:aa:4d:70:7f:5d:3c: 01:a9:b6:65:c6:25:05:99:64:b2:93:30:c0:c5:65: 5b:fc:54:25:fa:b9:9c:e5:9e:f7:0a:7c:9e:12:02: af:54:8e:0e:ec:d2:ea:f9:75:06:d8:33:09:e4:75: da:9d:f0:9a:88:b4:ed:0a:6a:6f:57:ec:e3:7e:ca: da:65:c5:52:1b:f8:b0:3d:8e:3e:5e:8d:42:c6:25: 31:a4:06:18:7d:4b:89:40:55:44:bd:5e:ca:f3:81: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:ED:AB:27:2F:1D:07:9D:E0:1B:D7:77:FF:50:4D:58:FA:5F:8F X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5e:b1:ea:91:77:d2:50:46:d8:73:d2:e9:32:c5:54:78:7e: 2c:d2:8e:b3:52:25:da:bc:17:14:43:82:02:d5:d3:3f:e6:23: 69:b6:0f:3c:c1:aa:47:4a:d5:98:e9:e4:16:29:79:9b:c0:13: a3:95:6b:de:9d:a7:29:28:3c:f6:1e:7f:82:38:e3:85:fa:e8: d7:ea:cb:ae:7a:2c:c2:2c:f3:0c:24:ef:84:7c:9b:7a:0d:83: a7:75:1f:74:94:a8:0c:7f:7f:ff:5d:90:f2:5b:b5:df:52:1d: c7:ca:bb:33:3c:6c:de:6e:6c:03:c7:57:1a:72:57:2f:4b:a6: 99:25:6e:e9:e2:89:96:84:a4:c1:ec:f5:67:2a:72:55:17:4f: e6:5e:b9:1d:24:e6:2e:01:d8:63:51:a0:11:8c:67:74:08:59: 92:a8:2f:15:28:56:d5:a3:b4:44:b4:1e:9a:4f:71:74:08:7f: 95:91:f5:ca:e0:c1:6c:24:f6:94:0a:52:f6:8d:95:45:e3:13: 81:4b:58:af:41:0d:d0:44:49:4d:23:fe:7f:8b:6e:dc:1c:db: 27:d4:42:18:b3:e8:c9:e1:89:04:a0:b8:37:b0:41:68:9c:b8: 36:d7:d8:3a:d3:83:5d:a5:c2:23:a4:5f:a2:d3:e9:67:f1:cf: 37:d3:85:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjUwNjE2MjM0MzIzWhcNMjUwNjIzMjM0MzIzWjAYMRYwFAYD VQQDEw02ODUwYWMxYi02ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeS8qC/456Dz0fPh+wNtwDDiakr/7TkEqCWmgHKJdo7nkIQGYUIYoQpWvC3R /3PQVGOPBx2DUACNwk96g+IaB7gmxacp9qUSGh5yytQswLZ4V+SVeZwiUXlTdh/T nKOTBr9Eg9h1SyUWoKehL/lBL1/qC+5gZB7Nhz0lSdn+9m8rBf9AHpJ52HxggUQI w4HL/ll4JXBaH6+rjG33aYWqTXB/XTwBqbZlxiUFmWSykzDAxWVb/FQl+rmc5Z73 CnyeEgKvVI4O7NLq+XUG2DMJ5HXanfCaiLTtCmpvV+zjfsraZcVSG/iwPY4+Xo1C xiUxpAYYfUuJQFVEvV7K84GfnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu57asn Lx0HneAb13f/UE1Y+l+PMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXrHqkXfSUEbYc9LpMsVUeH4s0o6zUiXavBcUQ4IC1dM/5iNptg88 wapHStWY6eQWKXmbwBOjlWvenacpKDz2Hn+COOOF+ujX6suueizCLPMMJO+EfJt6 DYOndR90lKgMf3//XZDyW7XfUh3HyrszPGzebmwDx1caclcvS6aZJW7p4omWhKTB 7PVnKnJVF0/mXrkdJOYuAdhjUaARjGd0CFmSqC8VKFbVo7REtB6aT3F0CH+VkfXK 4MFsJPaUClL2jZVF4xOBS1ivQQ3QRElNI/5/i27cHNsn1EIYs+jJ4YkEoLg3sEFo nLg219g604NdpcIjpF+i0+ln8c8304We -----END CERTIFICATE-----Generated at Wed Jun 18 11:32:18 2025 by rpki-client