$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: OKu6/suF8xBG9+ECCeEt+gZcIL9G806xj8ft0KH69pQ= Subject key identifier: 2F:E1:E6:F3:4D:47:30:C1:D3:B9:51:93:23:7A:40:29:E8:9C:D9:E5 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 9A Signing time: Thu 19 Jun 2025 05:43:48 +0000 Manifest this update: Thu 19 Jun 2025 05:43:47 +0000 Manifest next update: Thu 26 Jun 2025 05:43:47 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: KX7ASWc/IsTC9RBoHMuWe4EHTYUrKWvn2DthEuNqYI4=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: r6mTJvt8SukGGtNb+WgynqBgaxV1KBCRpaFxjoCbFH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Jun 19 05:43:47 2025 GMT Not After : Jun 26 05:43:47 2025 GMT Subject: CN=6853a393-fac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:49:a3:5e:5d:1e:57:d1:fd:e7:6e:ad:71: 70:d1:26:1b:20:2b:85:62:8c:cb:5b:68:b1:b2:16: 39:a6:dc:8d:0f:94:7f:e7:ab:6a:9b:90:8b:f4:ee: 5e:cb:b7:c8:2c:3c:7f:69:6d:fe:ab:7c:9c:58:1e: e7:ff:9a:c3:c5:08:a6:9b:ab:b0:55:86:57:9e:db: f9:41:eb:ad:34:1f:d9:a9:16:b6:6d:44:c9:47:ec: f9:02:0a:a9:42:7d:c3:98:73:bd:01:f3:13:ee:38: ad:13:a1:5a:5b:5c:ab:56:bc:6e:16:d5:79:af:1f: a9:b5:d4:8c:28:1b:63:6f:b5:a1:4f:8a:da:dd:cd: c3:e1:89:9a:c1:2d:14:d7:78:f3:30:35:66:80:fb: a5:56:9f:70:61:46:d5:64:54:a3:c9:21:7c:28:12: f4:1f:a1:e3:51:71:d0:4d:01:75:cd:e3:ce:ce:16: ac:07:e6:f7:cd:59:ac:c9:e4:e0:2e:7b:5b:9c:aa: 6e:9d:ca:0c:75:aa:54:61:19:a5:92:51:f1:fe:e1: bb:a5:18:1f:ab:05:17:7b:62:a4:08:6b:77:db:bf: 32:41:3c:1d:a0:f8:1e:75:16:b7:df:6f:d0:4e:66: e2:2a:fd:e5:a2:dc:ff:a2:33:69:02:42:72:ac:37: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:E6:F3:4D:47:30:C1:D3:B9:51:93:23:7A:40:29:E8:9C:D9:E5 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:74:89:d1:4d:a3:7f:22:a9:ee:e3:bd:d7:e9:d3:bb:ec:fd: fd:0f:6c:33:32:0f:93:54:e3:ac:14:0e:91:b1:ed:d4:53:78: 34:f2:ff:c3:c9:1a:fa:41:aa:ab:97:3a:4b:c3:15:5b:fe:72: b6:37:2a:0c:74:a9:d4:46:9a:a7:ea:a6:3c:8c:32:25:af:1b: 12:55:d0:ac:18:f5:cb:47:88:0a:1d:27:4b:81:f7:99:e7:32: a4:08:54:b3:ba:72:6d:90:81:9b:4c:45:34:c9:ba:b6:e8:c1: 93:d4:db:40:19:1b:e2:94:ea:99:03:dc:47:6d:1f:8a:5e:bf: 07:bf:c2:79:b9:1a:1a:5e:8f:4a:ab:36:15:cb:bb:50:d0:07: 15:f6:4f:1a:15:ba:1d:d5:f5:a9:e3:b2:7f:4a:e0:85:57:58: f8:16:e5:c8:99:37:2c:fd:19:65:ca:2b:16:a5:d5:6f:e2:f0: f5:08:f7:4e:6e:6a:9c:4c:fa:d7:19:60:89:fc:a0:af:c6:86: 96:62:4e:a8:d6:71:e3:22:fd:b4:f4:02:99:3c:8e:72:7d:df: dc:5c:40:63:f6:df:bb:42:b1:5c:dc:15:a4:c6:46:19:8a:53: b5:36:9a:97:0b:79:e7:fc:2c:d6:aa:05:7e:03:47:0a:7a:9b: 71:5e:43:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUwNjE5MDU0MzQ3WhcNMjUwNjI2MDU0MzQ3WjAYMRYwFAYD VQQDEw02ODUzYTM5My1mYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ctJo15dHlfR/edurXFw0SYbICuFYozLW2ixshY5ptyND5R/56tqm5CL9O5e y7fILDx/aW3+q3ycWB7n/5rDxQimm6uwVYZXntv5QeutNB/ZqRa2bUTJR+z5Agqp Qn3DmHO9AfMT7jitE6FaW1yrVrxuFtV5rx+ptdSMKBtjb7WhT4ra3c3D4YmawS0U 13jzMDVmgPulVp9wYUbVZFSjySF8KBL0H6HjUXHQTQF1zePOzhasB+b3zVmsyeTg LntbnKpuncoMdapUYRmlklHx/uG7pRgfqwUXe2KkCGt3278yQTwdoPgedRa332/Q TmbiKv3lotz/ojNpAkJyrDeq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/h5vNN RzDB07lRkyN6QCnonNnlMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjdInRTaN/Iqnu473X6dO77P39D2wzMg+TVOOsFA6Rse3UU3g08v/D yRr6QaqrlzpLwxVb/nK2NyoMdKnURpqn6qY8jDIlrxsSVdCsGPXLR4gKHSdLgfeZ 5zKkCFSzunJtkIGbTEU0ybq26MGT1NtAGRvilOqZA9xHbR+KXr8Hv8J5uRoaXo9K qzYVy7tQ0AcV9k8aFbod1fWp47J/SuCFV1j4FuXImTcs/RllyisWpdVv4vD1CPdO bmqcTPrXGWCJ/KCvxoaWYk6o1nHjIv209AKZPI5yfd/cXEBj9t+7QrFc3BWkxkYZ ilO1NpqXC3nn/CzWqgV+A0cKeptxXkNN -----END CERTIFICATE-----Generated at Thu Jun 19 13:36:33 2025 by rpki-client