$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: 6jCE9TxFbhPoZybNkXd2O1vzZ6+Ywc1W6geq/p/YH7Y= Subject key identifier: B2:B2:25:2E:3E:F5:9D:33:BD:9C:77:16:BB:B1:E6:61:75:EF:F1:2F Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 11F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 11F4 Signing time: Sat 14 Jun 2025 17:06:13 +0000 Manifest this update: Sat 14 Jun 2025 17:06:12 +0000 Manifest next update: Sat 21 Jun 2025 17:06:12 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: HZanrVkNadbQpVt9FFBKaK+vJQGBNnfnS4x4f0S1AZo=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: K7HgxObw49ZENnGpFVCXkeOTW3f6OFaznJ55myfPQSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4600 (0x11f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Jun 14 17:06:12 2025 GMT Not After : Jun 21 17:06:12 2025 GMT Subject: CN=684dac05-b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:6b:ab:ad:bd:b7:ff:0b:20:5d:ab:69:5c: 54:88:52:04:3c:22:1f:de:ba:6a:66:cd:bc:ec:58: ff:e1:db:fa:96:81:e2:4d:76:ec:01:ee:fd:de:c5: 0f:f1:03:1c:41:37:b5:7a:1b:34:eb:3c:93:98:a0: bc:b1:08:08:32:5e:83:ce:a7:c4:04:91:f9:c4:02: 3d:5d:07:94:51:fe:97:66:97:fe:81:df:0b:31:88: cf:32:d9:58:99:d9:2c:74:80:94:71:33:0f:30:6d: 47:de:6b:49:e4:e3:e8:ac:06:c7:a5:09:6f:5c:ec: 69:a8:45:e3:3c:40:09:da:6b:5e:6e:ca:fe:94:e9: 73:50:ba:5f:01:d6:a7:e9:ba:0d:f7:d9:c7:e9:5e: 00:09:e5:0f:78:19:a3:4b:fa:4e:25:bf:7e:47:d8: fc:e9:09:79:49:cd:a4:b7:71:e4:7a:eb:05:78:2f: 4a:1d:7a:84:9c:e1:eb:0f:49:32:ce:63:de:c7:16: c2:fd:9a:8f:a8:ba:1f:03:d4:46:77:83:b2:90:53: 90:c9:1c:4d:32:27:02:6c:08:82:c4:cb:51:b4:9e: 01:d3:62:a1:c8:63:2a:fe:ac:0c:9c:87:80:5b:a7: 80:2d:25:d5:b4:9c:31:9f:8a:b6:32:48:16:2f:bd: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:25:2E:3E:F5:9D:33:BD:9C:77:16:BB:B1:E6:61:75:EF:F1:2F X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:3f:c9:00:12:69:0a:30:48:de:11:ae:40:db:c7:4d:2d:94: 44:60:52:31:d2:66:64:1f:4e:cc:3c:63:b8:30:91:fd:9a:4e: 33:b3:17:d9:47:44:77:bd:4b:76:ec:9c:c3:80:93:c1:ae:cd: d8:5f:99:05:22:40:5d:b5:19:67:1d:e9:fd:23:52:2f:7f:ea: ce:2f:c8:35:74:84:b9:6d:6a:de:9c:92:e6:7b:b3:ba:2b:ac: e4:15:c0:98:74:a0:41:56:37:da:eb:56:dd:ff:20:c3:41:34: f5:b5:42:d6:7a:a8:2f:10:8f:47:08:d3:1a:d8:b6:4b:4e:df: 13:e5:8d:6e:5a:ae:41:d0:25:36:b5:fe:c1:c0:5e:51:c8:9e: 17:d0:1b:66:cf:a0:8b:6a:25:2f:e1:ce:b4:1e:11:aa:9a:a9: 7a:a9:2a:03:d9:47:9a:aa:06:9a:82:a7:34:3e:69:5c:70:52: 76:70:ae:79:05:e5:12:7c:28:92:ce:39:e2:ed:47:26:81:d8: c2:a3:c4:23:b2:3e:79:20:90:71:de:a2:b7:63:fc:6d:a0:d4: 2f:78:33:19:41:82:5c:0d:d9:18:e3:21:92:32:74:95:99:b5: f5:86:1b:ad:60:24:c8:14:f1:15:45:0c:17:91:3c:bf:bf:bd: 8c:7d:b7:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUwNjE0MTcwNjEyWhcNMjUwNjIxMTcwNjEyWjAYMRYwFAYD VQQDEw02ODRkYWMwNS1iNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhVrq629t/8LIF2raVxUiFIEPCIf3rpqZs287Fj/4dv6loHiTXbsAe793sUP 8QMcQTe1ehs06zyTmKC8sQgIMl6DzqfEBJH5xAI9XQeUUf6XZpf+gd8LMYjPMtlY mdksdICUcTMPMG1H3mtJ5OPorAbHpQlvXOxpqEXjPEAJ2mtebsr+lOlzULpfAdan 6boN99nH6V4ACeUPeBmjS/pOJb9+R9j86Ql5Sc2kt3HkeusFeC9KHXqEnOHrD0ky zmPexxbC/ZqPqLofA9RGd4OykFOQyRxNMicCbAiCxMtRtJ4B02KhyGMq/qwMnIeA W6eALSXVtJwxn4q2MkgWL72G6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKyJS4+ 9Z0zvZx3Frux5mF17/EvMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQP8kAEmkKMEjeEa5A28dNLZREYFIx0mZkH07MPGO4MJH9mk4zsxfZ R0R3vUt27JzDgJPBrs3YX5kFIkBdtRlnHen9I1Ivf+rOL8g1dIS5bWrenJLme7O6 K6zkFcCYdKBBVjfa61bd/yDDQTT1tULWeqgvEI9HCNMa2LZLTt8T5Y1uWq5B0CU2 tf7BwF5RyJ4X0Btmz6CLaiUv4c60HhGqmql6qSoD2Ueaqgaagqc0PmlccFJ2cK55 BeUSfCiSzjni7UcmgdjCo8Qjsj55IJBx3qK3Y/xtoNQveDMZQYJcDdkY4yGSMnSV mbX1hhutYCTIFPEVRQwXkTy/v72Mfbf6 -----END CERTIFICATE-----Generated at Sun Jun 15 04:45:45 2025 by rpki-client