$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 11nY2osdHHCVLWEH3TOTN4zR1XvBzKJ5xqEIOUIklvg= Subject key identifier: 71:10:5B:5A:F7:D2:12:C5:28:12:D5:70:30:E1:40:5A:22:FE:20:68 Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 086F Signing time: Thu 12 Jun 2025 20:24:35 +0000 Manifest this update: Thu 12 Jun 2025 20:24:34 +0000 Manifest next update: Thu 19 Jun 2025 20:24:34 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: nR3f3+kGAdzvX67g9dcF1hPh0n5y93XsQZ3dPi0LTck=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Jun 12 20:24:34 2025 GMT Not After : Jun 19 20:24:34 2025 GMT Subject: CN=684b3782-53b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:5c:f2:96:ac:93:6a:cd:e4:91:14:88:f6: de:1d:cf:31:94:d8:be:93:a8:c3:44:04:72:d4:e9: 9a:51:ba:48:f8:0a:ec:1b:2f:49:2b:da:76:38:05: 4d:34:55:e5:c4:ad:7f:8d:c0:7e:1d:65:af:2b:fe: 33:39:41:c0:fe:83:7c:83:b3:ec:51:4d:93:ad:2d: 98:57:e7:1e:ad:a2:37:fd:7c:93:83:8f:95:83:e6: 4b:36:e9:d9:c1:a7:0a:97:5d:1a:d8:e5:1c:c1:70: 90:1d:00:da:fc:24:fd:43:27:c7:26:ca:9a:59:f2: 3c:76:50:ee:d4:01:cb:fa:33:29:dd:86:9b:0b:9d: 19:ac:76:48:c8:35:5a:12:53:97:c2:ff:57:d7:e2: 29:e8:25:2c:e6:0a:93:36:ad:70:02:f0:e8:b0:c7: 0d:62:49:40:b3:b0:b1:da:01:72:63:3c:e4:5d:fe: 29:ed:17:20:57:f2:7a:77:42:51:33:96:eb:ac:7d: 6c:f3:2b:86:30:e9:ca:ad:e2:70:b2:9f:43:8b:8a: 4b:76:f3:2e:43:66:88:10:5e:d6:b5:bc:fb:4d:d2: 95:2e:34:86:a1:e6:9e:57:53:62:1f:5a:aa:97:c2: 89:c0:da:14:45:3d:e4:5f:6d:8c:71:03:e3:11:a5: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:5B:5A:F7:D2:12:C5:28:12:D5:70:30:E1:40:5A:22:FE:20:68 X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:14:5b:c7:bb:f6:2d:ff:5e:87:21:72:69:0b:62:23:01:92: 1f:b0:cb:78:55:2d:81:1e:f6:3f:a2:ab:c1:66:01:b1:8d:d9: 9d:b4:9e:a4:cd:1d:c8:e9:87:56:e8:53:6b:95:a5:56:79:f7: 95:ed:13:95:19:46:3b:6b:bd:8d:c4:1a:22:37:29:dd:06:14: 70:be:1c:46:ff:f1:a1:75:19:2f:c4:02:41:a4:de:ce:9c:44: 79:6b:1c:5f:11:39:b6:a2:cb:b1:33:ae:3b:1f:10:ea:b6:8e: fd:db:bd:63:e8:8e:db:d2:90:b7:a7:6f:3c:5a:c7:ab:b1:a6: 09:19:da:96:b9:a1:d0:48:5b:fc:51:ef:97:61:2e:20:5c:40: c0:af:38:52:da:46:8c:00:99:e1:71:14:5b:87:58:68:fa:2c: 7b:bc:81:96:2d:23:98:5a:3d:fc:15:ce:23:ea:42:de:84:e9: 64:fa:9b:87:43:2a:27:ce:c4:44:cb:ec:ba:55:d9:18:ee:a7: ce:60:dc:b5:05:00:ab:44:09:c2:e2:4c:21:56:ce:f3:56:93: b2:ee:77:03:75:e1:2b:5d:13:fb:34:25:d9:34:4a:e1:b0:55: d3:5e:db:b3:21:26:3c:dc:0f:ef:43:37:3d:d2:ea:b3:a3:7d: c8:72:78:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUwNjEyMjAyNDM0WhcNMjUwNjE5MjAyNDM0WjAYMRYwFAYD VQQDEw02ODRiMzc4Mi01M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXhc8pask2rN5JEUiPbeHc8xlNi+k6jDRARy1OmaUbpI+ArsGy9JK9p2OAVN NFXlxK1/jcB+HWWvK/4zOUHA/oN8g7PsUU2TrS2YV+ceraI3/XyTg4+Vg+ZLNunZ wacKl10a2OUcwXCQHQDa/CT9QyfHJsqaWfI8dlDu1AHL+jMp3YabC50ZrHZIyDVa ElOXwv9X1+Ip6CUs5gqTNq1wAvDosMcNYklAs7Cx2gFyYzzkXf4p7RcgV/J6d0JR M5brrH1s8yuGMOnKreJwsp9Di4pLdvMuQ2aIEF7Wtbz7TdKVLjSGoeaeV1NiH1qq l8KJwNoURT3kX22McQPjEaXWXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEQW1r3 0hLFKBLVcDDhQFoi/iBoMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbFFvHu/Yt/16HIXJpC2IjAZIfsMt4VS2BHvY/oqvBZgGxjdmdtJ6k zR3I6YdW6FNrlaVWefeV7ROVGUY7a72NxBoiNyndBhRwvhxG//GhdRkvxAJBpN7O nER5axxfETm2osuxM647HxDqto79271j6I7b0pC3p288WsersaYJGdqWuaHQSFv8 Ue+XYS4gXEDArzhS2kaMAJnhcRRbh1ho+ix7vIGWLSOYWj38Fc4j6kLehOlk+puH QyonzsREy+y6VdkY7qfOYNy1BQCrRAnC4kwhVs7zVpOy7ncDdeErXRP7NCXZNErh sFXTXtuzISY83A/vQzc90uqzo33IcnhQ -----END CERTIFICATE-----Generated at Sat Jun 14 18:25:55 2025 by rpki-client