$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: Elo0QHnOSf0cCSqnEA/ksedyToNe1kXeC9Upr74LAwY= Subject key identifier: 72:FA:32:F0:B4:1F:C1:31:2A:7D:C8:D9:2F:EA:E3:5B:DB:2C:4D:DF Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03B7 Signing time: Thu 19 Jun 2025 00:32:38 +0000 Manifest this update: Thu 19 Jun 2025 00:32:38 +0000 Manifest next update: Thu 26 Jun 2025 00:32:38 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: iXdRmr9Ya9xnzwi3u7VtJOUcly5yYmnmhYDb+0E1/lo=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Jun 19 00:32:38 2025 GMT Not After : Jun 26 00:32:38 2025 GMT Subject: CN=68535aa6-76b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:26:9a:c2:81:f1:e9:6d:9c:7b:35:78:6d: ec:0b:79:31:40:1a:ce:34:36:99:04:30:3c:b9:26: 84:6d:27:8c:ff:72:71:b9:8d:3f:9b:37:2a:e3:26: fd:26:88:d8:48:eb:e2:c2:85:c8:2c:37:47:ad:af: 07:61:00:9f:d1:ee:a3:99:88:fc:6c:95:4b:e4:32: bd:2b:e0:91:a8:f4:2c:94:44:5d:0f:51:44:62:d3: bd:43:89:b2:c9:61:21:e0:5e:19:70:55:3f:17:ba: 58:b1:7d:e8:d4:8e:9b:3b:73:f2:9e:cd:f2:45:f1: 94:23:6e:e4:94:05:d2:fb:60:0f:55:67:a7:34:f0: ef:85:1a:1d:4e:7e:f3:84:a7:38:6f:32:20:75:a9: 72:e9:9a:a1:90:89:95:43:2f:7c:bd:81:80:45:cb: 38:92:bc:02:2c:41:ef:9b:18:85:3d:f9:c2:5e:eb: f1:1a:8a:f0:4a:6b:04:2f:df:72:a7:78:f5:13:bf: a6:9d:86:87:b2:ee:c5:27:0a:6d:21:f6:5e:f6:f7: f6:fa:7c:2c:44:57:b6:8d:ff:1c:96:a5:63:39:a1: ef:bf:12:40:77:ac:b5:ca:f3:78:ec:4f:3d:be:b4: 90:a4:3f:86:b7:ea:7b:33:3f:06:69:f8:5a:45:a5: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:32:F0:B4:1F:C1:31:2A:7D:C8:D9:2F:EA:E3:5B:DB:2C:4D:DF X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:46:54:e4:6f:84:e5:28:e0:9d:e7:84:19:81:04:1c:14:0b: 61:5c:28:98:25:e9:c5:73:84:40:d9:0a:4b:d2:f4:2d:06:75: b2:9f:24:d2:93:26:79:7d:fa:1d:18:48:e0:8a:b9:43:11:ee: 0b:e6:84:5d:f3:f4:d9:73:56:57:ba:cd:73:7e:d3:5e:f9:2b: e8:4b:d8:e0:0c:a6:9e:5c:a1:2b:97:3b:07:aa:f5:42:80:64: 30:45:86:7c:58:fe:ba:a2:80:aa:13:54:16:6e:a6:33:40:91: ce:c6:a4:2e:c0:5c:f4:d4:52:ba:ba:ba:07:d8:d7:6f:61:a9: 38:0f:c7:04:fd:09:b1:f9:bd:bd:85:a1:72:c4:ef:4e:e4:9f: 21:6d:c9:ea:27:d9:ca:ce:ac:10:d6:98:b2:00:28:c6:8b:86: a0:08:7d:eb:f0:4f:00:c6:70:58:06:38:9a:a9:98:27:76:d7: 4c:83:17:b0:f4:57:5f:51:8c:e9:20:87:07:b3:67:85:63:d3: 68:0e:aa:1b:b3:0c:bf:4b:de:18:dc:01:5e:91:1d:49:1f:7e: 70:57:ac:4a:6e:d1:79:bc:66:5f:3e:34:51:c0:56:79:69:68: a2:98:d4:16:e6:ee:74:90:6d:75:d9:96:ed:0c:c1:92:4c:76: 96:a0:f7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwNjE5MDAzMjM4WhcNMjUwNjI2MDAzMjM4WjAYMRYwFAYD VQQDEw02ODUzNWFhNi03NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvMmmsKB8eltnHs1eG3sC3kxQBrONDaZBDA8uSaEbSeM/3JxuY0/mzcq4yb9 JojYSOviwoXILDdHra8HYQCf0e6jmYj8bJVL5DK9K+CRqPQslERdD1FEYtO9Q4my yWEh4F4ZcFU/F7pYsX3o1I6bO3Pyns3yRfGUI27klAXS+2APVWenNPDvhRodTn7z hKc4bzIgdaly6ZqhkImVQy98vYGARcs4krwCLEHvmxiFPfnCXuvxGorwSmsEL99y p3j1E7+mnYaHsu7FJwptIfZe9vf2+nwsRFe2jf8clqVjOaHvvxJAd6y1yvN47E89 vrSQpD+Gt+p7Mz8GafhaRaV87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL6MvC0 H8ExKn3I2S/q41vbLE3fMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0RlTkb4TlKOCd54QZgQQcFAthXCiYJenFc4RA2QpL0vQtBnWynyTS kyZ5ffodGEjgirlDEe4L5oRd8/TZc1ZXus1zftNe+SvoS9jgDKaeXKErlzsHqvVC gGQwRYZ8WP66ooCqE1QWbqYzQJHOxqQuwFz01FK6uroH2NdvYak4D8cE/Qmx+b29 haFyxO9O5J8hbcnqJ9nKzqwQ1piyACjGi4agCH3r8E8AxnBYBjiaqZgndtdMgxew 9FdfUYzpIIcHs2eFY9NoDqobswy/S94Y3AFekR1JH35wV6xKbtF5vGZfPjRRwFZ5 aWiimNQW5u50kG112ZbtDMGSTHaWoPe5 -----END CERTIFICATE-----Generated at Thu Jun 19 17:52:41 2025 by rpki-client