$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: 2wKlb/aTWJgciYtcNcHQbGuNuXxvQpggTb6CVwmVYI8= Subject key identifier: CB:D0:2F:7C:E6:69:FE:7B:25:E8:44:8E:BC:75:DA:68:C8:55:EB:62 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0B48 Signing time: Thu 12 Jun 2025 18:57:14 +0000 Manifest this update: Thu 12 Jun 2025 18:57:14 +0000 Manifest next update: Thu 19 Jun 2025 18:57:14 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: y1paQ3sX+m1Rf4XV0Ni+kqCAS3PLLE+UAcSXKRVZ7f0=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: oocbcY3iFDyepn5SUv3wuDXzWJtrjmxt4UkH5Dd68Ak=) 3: 837821AA9B0811EDB5FDAF75C4F9AE02.roa (hash: kTlw3wh1lAf36RxrCeqt67ctmc2qb6ZS1z3/jQIhcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Jun 12 18:57:14 2025 GMT Not After : Jun 19 18:57:14 2025 GMT Subject: CN=684b230a-3013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:59:e8:59:3c:77:4c:31:1f:2d:29:d8:e9: eb:12:d0:e9:19:c5:a7:4c:dc:12:9a:85:d3:5b:66: 26:8e:b9:be:66:00:5d:0f:ff:92:a4:45:88:1b:c2: 7b:e5:e2:fd:8e:ea:72:82:40:0e:f3:95:e4:7a:c4: b6:2e:61:05:64:37:bc:c3:8b:92:c7:9b:88:48:79: 78:bb:9f:72:ea:c6:90:95:4a:3f:84:db:a1:3f:ef: ab:49:9c:0e:fa:ca:f0:2d:00:f7:69:9e:d6:51:ca: c8:ed:87:68:40:cd:ba:6f:0f:9f:25:ac:7c:d9:59: cf:fb:f9:ec:d2:3c:bb:8e:16:f0:45:83:3b:0b:59: b3:a4:05:3a:84:cb:2c:4e:8d:b6:95:a1:de:21:4e: 71:64:52:a2:84:ad:f0:d9:02:6c:0d:af:0f:1b:57: eb:71:0c:a2:e9:5d:da:b3:3c:ce:3a:e7:73:0f:af: 18:b4:32:b9:3f:e8:b0:f0:ae:92:41:ea:d0:0a:a7: 85:7c:77:af:70:e3:c5:d5:66:9c:2f:76:78:17:10: 7f:ee:06:2e:30:37:7b:73:68:53:03:4b:81:5f:1c: c4:39:7c:fa:2e:a7:93:f8:be:7f:1a:bf:14:bc:03: 2a:69:e4:83:a0:a4:16:e7:3a:d0:9b:db:20:fc:94: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D0:2F:7C:E6:69:FE:7B:25:E8:44:8E:BC:75:DA:68:C8:55:EB:62 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:b4:dd:f5:6e:c6:87:84:06:4d:90:9b:dc:41:e5:dc:13: 14:d7:fe:5c:ae:56:e0:4f:a4:4e:6c:92:e6:56:1c:e0:16:5d: b8:1a:66:2f:a4:16:e8:af:ef:ad:12:58:b0:2c:8c:32:46:ad: 07:d4:33:61:42:e8:82:8e:83:d9:6a:3d:7b:06:7b:f8:a2:43: 20:29:96:31:bb:b2:e8:62:80:d4:98:1e:22:d1:25:68:7a:77: ed:6e:e5:e1:23:9e:31:b7:e4:e8:c9:95:ee:10:22:f8:c8:4f: 8b:c6:5a:ad:38:0d:8f:e8:a1:26:a2:47:75:ee:13:5d:78:93: 6e:8a:e2:41:2c:b5:bb:d8:18:f6:c4:b8:c6:33:74:6a:08:81: ba:39:2f:f1:86:70:2b:4b:b5:f3:2a:34:8f:6a:ad:6c:70:ac: 52:aa:c3:62:fb:9a:54:b3:67:af:19:c4:76:17:63:12:22:dd: 6f:5f:a0:74:57:57:2e:5e:f7:8c:14:0c:d4:44:5c:f6:0e:96: d5:9f:14:85:18:00:dd:46:47:7a:bf:15:a1:e8:3c:e5:24:b0: 12:3a:d0:da:ca:1c:84:0e:c2:ef:f1:31:cf:42:5d:b7:21:ad: 5a:8b:a5:e1:d7:a2:2f:d7:97:cf:32:77:93:e2:16:05:96:18: d5:14:d4:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwNjEyMTg1NzE0WhcNMjUwNjE5MTg1NzE0WjAYMRYwFAYD VQQDEw02ODRiMjMwYS0zMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0g1Z6Fk8d0wxHy0p2OnrEtDpGcWnTNwSmoXTW2Ymjrm+ZgBdD/+SpEWIG8J7 5eL9jupygkAO85XkesS2LmEFZDe8w4uSx5uISHl4u59y6saQlUo/hNuhP++rSZwO +srwLQD3aZ7WUcrI7YdoQM26bw+fJax82VnP+/ns0jy7jhbwRYM7C1mzpAU6hMss To22laHeIU5xZFKihK3w2QJsDa8PG1frcQyi6V3aszzOOudzD68YtDK5P+iw8K6S QerQCqeFfHevcOPF1WacL3Z4FxB/7gYuMDd7c2hTA0uBXxzEOXz6LqeT+L5/Gr8U vAMqaeSDoKQW5zrQm9sg/JS5mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvQL3zm af57JehEjrx12mjIVetiMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC48rTd9W7Gh4QGTZCb3EHl3BMU1/5crlbgT6RObJLmVhzgFl24GmYv pBbor++tEliwLIwyRq0H1DNhQuiCjoPZaj17Bnv4okMgKZYxu7LoYoDUmB4i0SVo enftbuXhI54xt+ToyZXuECL4yE+LxlqtOA2P6KEmokd17hNdeJNuiuJBLLW72Bj2 xLjGM3RqCIG6OS/xhnArS7XzKjSPaq1scKxSqsNi+5pUs2evGcR2F2MSIt1vX6B0 V1cuXveMFAzURFz2DpbVnxSFGADdRkd6vxWh6DzlJLASOtDayhyEDsLv8THPQl23 Ia1ai6Xh16Iv15fPMneT4hYFlhjVFNS1 -----END CERTIFICATE-----Generated at Sat Jun 14 19:09:28 2025 by rpki-client