$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: skfDkRKejQWYWUksLeMF/hsWw9fZylIOXuvahw4uxz8= Subject key identifier: 25:C3:07:44:E5:EC:14:8F:4F:E9:59:81:7F:02:EA:A3:9C:C8:35:99 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 11F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 11D8 Signing time: Sat 14 Jun 2025 17:07:53 +0000 Manifest this update: Sat 14 Jun 2025 17:07:53 +0000 Manifest next update: Sat 21 Jun 2025 17:07:53 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: HIB9qAEAo4LP0jcwRiPNf/wwz+kE/DRaboWSQta76OM=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: AHDoKb/llb+LLqKjO48bsoYIkNNC05Md7hDccepwp54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4600 (0x11f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Jun 14 17:07:53 2025 GMT Not After : Jun 21 17:07:53 2025 GMT Subject: CN=684dac69-1213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f1:3e:84:dd:d5:44:f1:a9:06:0e:f2:1a:9f: 17:d7:39:58:2c:35:89:e7:03:b8:b6:34:b4:56:3d: 7f:0b:17:31:1f:b2:d4:87:84:5f:62:ce:c6:b0:01: 06:f3:4b:35:a8:ea:56:a7:32:ee:aa:89:79:6f:bd: ae:30:80:c6:79:0b:ba:d8:ec:03:7d:12:a0:d9:48: 43:c9:fe:39:16:c3:48:93:87:df:d8:fc:4a:a1:ca: f2:84:62:3b:0d:35:fe:b3:a0:f6:a6:da:11:e8:64: f8:5a:1f:8b:77:75:5e:e3:40:f2:ee:e0:0e:fc:9f: ff:18:00:84:87:7e:67:4f:e9:7f:50:9d:71:86:dd: d2:0e:e4:97:37:5e:7c:cd:38:dc:0b:a8:92:76:44: 74:30:1e:6e:06:54:4b:8b:ca:6d:bf:f5:c3:a6:4b: 7d:26:91:0e:f8:b5:54:07:cf:a0:57:eb:e3:e7:92: e9:9e:41:88:a3:3a:83:93:4b:2a:2f:60:74:23:3c: 83:83:0f:4e:ed:35:70:dd:d3:52:09:e7:05:68:df: b1:31:ad:c2:51:96:0b:6a:8e:2c:4b:0a:3f:77:35: b5:12:bd:08:bf:df:32:f6:2a:8d:7a:8c:62:ce:f7: fe:a2:3a:e1:30:a6:e7:3a:ba:05:46:b0:97:bb:12: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:07:44:E5:EC:14:8F:4F:E9:59:81:7F:02:EA:A3:9C:C8:35:99 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:75:a2:56:f9:de:9c:41:b8:be:db:7c:e9:d4:bd:d7:e7:50: 9e:c6:25:ef:f0:a1:95:cc:bd:ed:4c:53:99:60:42:46:d5:8b: b0:37:be:84:b9:e5:42:fa:61:04:d7:5b:f5:3d:90:67:ed:d1: d5:84:89:59:51:51:11:c9:9e:7e:de:d6:c2:5a:98:cb:12:54: d7:3d:66:43:eb:c2:af:8e:c7:91:4f:ff:0d:30:f8:0c:7b:79: dc:91:a1:ff:af:d8:69:bd:f1:d3:15:40:68:a2:f2:5c:b3:dc: 65:a8:97:66:1b:da:3e:f0:14:b1:cf:c7:1f:f3:cc:f4:22:8f: ae:f0:37:dd:f8:c3:4f:5b:8a:91:d7:51:4b:b4:dc:a9:07:b8: 90:e4:3f:e2:e0:00:bd:af:77:1a:71:ad:d7:ac:42:e9:fb:80: 34:99:8e:53:cc:43:56:bd:e9:49:05:0f:62:f7:89:c5:e7:8a: 48:fb:9c:6a:7d:d5:5f:42:dd:91:af:4f:66:de:b8:fe:49:ea: e4:ae:e2:c1:42:f8:15:4c:75:fa:b3:15:5f:a0:8a:0a:ed:30: bb:62:45:aa:1d:67:f3:c7:29:0e:bd:b9:73:7e:1c:06:25:6a: 49:d4:41:8a:23:4c:4e:5f:49:5f:79:b1:95:b5:d6:db:03:cf: b9:03:ba:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUwNjE0MTcwNzUzWhcNMjUwNjIxMTcwNzUzWjAYMRYwFAYD VQQDEw02ODRkYWM2OS0xMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fE+hN3VRPGpBg7yGp8X1zlYLDWJ5wO4tjS0Vj1/CxcxH7LUh4RfYs7GsAEG 80s1qOpWpzLuqol5b72uMIDGeQu62OwDfRKg2UhDyf45FsNIk4ff2PxKocryhGI7 DTX+s6D2ptoR6GT4Wh+Ld3Ve40Dy7uAO/J//GACEh35nT+l/UJ1xht3SDuSXN158 zTjcC6iSdkR0MB5uBlRLi8ptv/XDpkt9JpEO+LVUB8+gV+vj55LpnkGIozqDk0sq L2B0IzyDgw9O7TVw3dNSCecFaN+xMa3CUZYLao4sSwo/dzW1Er0Iv98y9iqNeoxi zvf+ojrhMKbnOroFRrCXuxK3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXDB0Tl 7BSPT+lZgX8C6qOcyDWZMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdaJW+d6cQbi+23zp1L3X51CexiXv8KGVzL3tTFOZYEJG1YuwN76E ueVC+mEE11v1PZBn7dHVhIlZUVERyZ5+3tbCWpjLElTXPWZD68KvjseRT/8NMPgM e3nckaH/r9hpvfHTFUBoovJcs9xlqJdmG9o+8BSxz8cf88z0Io+u8Dfd+MNPW4qR 11FLtNypB7iQ5D/i4AC9r3caca3XrELp+4A0mY5TzENWvelJBQ9i94nF54pI+5xq fdVfQt2Rr09m3rj+SerkruLBQvgVTHX6sxVfoIoK7TC7YkWqHWfzxykOvblzfhwG JWpJ1EGKI0xOX0lfebGVtdbbA8+5A7ot -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:23 2025 by rpki-client