$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: M0hWeBR2wv812p6bXDAkmFE0eaGkF/yQoZ8ZhFzsv0U= Subject key identifier: C4:4E:56:53:86:CE:E3:9C:4F:0F:56:01:72:9E:23:A8:DC:BF:DE:43 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 09AA Signing time: Sat 14 Jun 2025 19:53:53 +0000 Manifest this update: Sat 14 Jun 2025 19:53:52 +0000 Manifest next update: Sat 21 Jun 2025 19:53:52 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: xyMhgjJi2VmnGHGByjDBs9dvUbYaAZbE3RJjanwUvnA=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Jun 14 19:53:52 2025 GMT Not After : Jun 21 19:53:52 2025 GMT Subject: CN=684dd350-fcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:8a:94:c9:b4:f6:94:a6:43:04:e0:c8:5d: 7c:b4:73:70:10:f4:65:38:ba:ae:07:6a:b5:03:d8: 94:5c:b5:cc:b8:b9:e0:6e:d7:f1:7f:37:39:7c:5d: 91:97:5b:c1:31:f6:08:0b:3b:44:9f:62:2d:3f:cf: 0c:1f:8b:9d:b8:56:05:d6:7f:46:3d:fd:f9:19:84: 2b:e5:8b:2e:42:20:e3:3c:80:ba:bd:85:c9:eb:96: 5f:86:8e:91:97:fb:05:56:c0:c4:4a:c2:a7:1d:5d: c3:7a:77:b0:14:13:ff:59:a5:5e:a4:af:03:ec:b4: 68:38:58:11:f7:8d:17:0a:53:e3:bf:66:73:06:06: 4d:c9:5f:6d:54:40:a6:d9:27:00:b7:1a:dc:31:5d: c1:81:bb:f2:71:6b:79:cf:fc:1a:db:7e:9e:fa:54: 23:11:8e:ac:47:c1:06:6e:e9:1d:8a:6e:74:f6:ed: 81:38:10:70:a3:a9:aa:5d:1e:24:76:94:d6:23:dd: cd:e6:9b:b4:df:08:d8:10:e3:8a:ea:4c:2a:bb:4f: 95:37:f2:9e:3e:e4:04:38:ac:c3:06:28:2d:33:10: c9:f6:c0:61:c0:a8:50:77:2e:f9:90:ad:19:3e:c2: 54:73:17:3e:b5:7a:c9:dd:9b:55:fb:b2:6b:3c:7f: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4E:56:53:86:CE:E3:9C:4F:0F:56:01:72:9E:23:A8:DC:BF:DE:43 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:e3:df:c8:c9:9c:07:c6:3a:0d:d7:db:eb:ce:bf:9e:c9: 77:7f:eb:02:0f:df:01:1b:24:02:d9:ab:c3:28:97:e9:b5:1e: 72:30:39:da:6e:47:cf:e1:e0:5c:59:ce:38:59:3d:00:04:0f: 22:4a:8a:7d:2c:0a:d5:ee:ab:b7:86:0d:eb:97:59:3c:64:80: ee:27:13:45:e1:c5:a0:49:ab:eb:b5:12:d2:21:0d:e8:6d:f0: d6:c1:c3:28:89:cd:de:f5:44:9b:d6:e7:ef:e4:c8:ea:f8:e9: ab:49:7e:29:62:6a:4a:54:a6:4a:8d:28:c8:5d:db:3e:2a:6b: 58:e9:67:61:c6:2e:34:f9:ae:9d:e5:e3:e3:6b:5c:07:fe:6a: ef:8a:ae:d7:e9:f1:07:d8:e4:c1:57:72:30:bc:9d:6e:d4:36: 67:ed:76:12:84:bf:4b:6f:4b:93:90:1c:3b:fb:ac:ea:a6:ae: 14:8e:52:35:fa:42:fc:bd:7e:5e:4f:73:c7:0d:c1:64:76:49: ef:41:9c:c5:58:1a:c6:52:2e:c7:af:f9:bb:62:fd:7a:4d:e1: 6a:26:a2:00:13:a6:3b:eb:8b:72:00:e8:c6:14:6c:8e:bd:92: 1e:1e:2a:07:4b:6d:43:e9:6b:29:9e:df:48:ec:64:fc:00:33: 22:6c:55:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwNjE0MTk1MzUyWhcNMjUwNjIxMTk1MzUyWjAYMRYwFAYD VQQDEw02ODRkZDM1MC1mY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx2KlMm09pSmQwTgyF18tHNwEPRlOLquB2q1A9iUXLXMuLngbtfxfzc5fF2R l1vBMfYICztEn2ItP88MH4uduFYF1n9GPf35GYQr5YsuQiDjPIC6vYXJ65Zfho6R l/sFVsDESsKnHV3DenewFBP/WaVepK8D7LRoOFgR940XClPjv2ZzBgZNyV9tVECm 2ScAtxrcMV3BgbvycWt5z/wa236e+lQjEY6sR8EGbukdim509u2BOBBwo6mqXR4k dpTWI93N5pu03wjYEOOK6kwqu0+VN/KePuQEOKzDBigtMxDJ9sBhwKhQdy75kK0Z PsJUcxc+tXrJ3ZtV+7JrPH+l/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMROVlOG zuOcTw9WAXKeI6jcv95DMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrX+PfyMmcB8Y6Ddfb686/nsl3f+sCD98BGyQC2avDKJfptR5yMDna bkfP4eBcWc44WT0ABA8iSop9LArV7qu3hg3rl1k8ZIDuJxNF4cWgSavrtRLSIQ3o bfDWwcMoic3e9USb1ufv5Mjq+OmrSX4pYmpKVKZKjSjIXds+KmtY6Wdhxi40+a6d 5ePja1wH/mrviq7X6fEH2OTBV3IwvJ1u1DZn7XYShL9Lb0uTkBw7+6zqpq4UjlI1 +kL8vX5eT3PHDcFkdknvQZzFWBrGUi7Hr/m7Yv16TeFqJqIAE6Y764tyAOjGFGyO vZIeHioHS21D6Wspnt9I7GT8ADMibFUh -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:38 2025 by rpki-client