$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: Gp2EGqsfJktLew76bOxk+CESL4npevvYxm3QVv0zBuo= Subject key identifier: 78:4E:06:D7:44:69:CE:AD:46:C7:59:2F:B9:C1:05:1F:0C:D2:FF:6A Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 025D Signing time: Tue 17 Jun 2025 01:21:34 +0000 Manifest this update: Tue 17 Jun 2025 01:21:34 +0000 Manifest next update: Tue 24 Jun 2025 01:21:34 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: cdEK8TvTa7Ie9VXNFZegUzOp7905+EY2F3QoCs6SQjg=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Jun 17 01:21:34 2025 GMT Not After : Jun 24 01:21:34 2025 GMT Subject: CN=6850c31e-990b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:e7:b5:34:24:7a:b9:0b:55:11:4b:5b:41: c4:62:24:d9:52:2c:07:a3:b3:e0:9c:79:1b:cc:30: 01:b6:f8:f5:da:80:5e:df:07:ab:ff:aa:21:a9:54: b9:a6:51:85:d6:f8:ac:cd:53:31:f6:5b:a1:ef:6e: 9b:33:5d:ac:14:28:bd:6d:53:ba:2a:79:1d:23:7e: c6:eb:58:75:99:c0:e1:db:4f:b2:aa:14:6f:28:24: 9b:9c:a3:8f:5a:28:0c:6e:35:86:4f:da:4c:1e:bb: 26:5f:01:5d:ae:3d:39:dd:09:87:f6:51:71:c6:86: 0b:76:37:1d:5c:56:4d:0e:d5:71:84:b6:44:67:7d: db:1a:e9:f4:73:36:b4:a8:fb:2a:46:23:bb:4b:b2: 3a:c6:ae:ba:20:df:95:7f:0f:47:f8:47:ff:e8:06: c6:89:b6:9c:b4:10:1b:54:69:0b:77:b8:89:17:23: 28:6a:0c:d1:3a:63:23:c4:cb:02:37:53:07:ae:87: c4:1d:54:54:44:0c:aa:dd:30:70:86:84:4c:f6:8e: 15:36:56:80:a9:f7:8c:d2:ff:31:bf:4b:1a:dd:8c: 93:7a:2e:fe:5e:8f:bb:7a:71:8d:b4:d8:da:66:79: cd:15:62:ae:53:26:eb:aa:c1:53:84:bf:d1:b2:a6: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:06:D7:44:69:CE:AD:46:C7:59:2F:B9:C1:05:1F:0C:D2:FF:6A X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:60:d1:1c:40:4b:b2:7c:a3:d0:e2:5b:f6:c2:d3:ad:41:ca: 06:7e:ca:20:29:81:b9:cf:43:e1:7d:64:8f:bb:9d:2d:b1:9a: 36:40:dd:0c:88:9c:24:6f:bf:3c:2e:a0:dd:da:b9:3f:8f:3f: 32:94:ff:25:1c:9d:bf:09:f3:0f:9a:48:f3:4d:c7:c2:49:b9: e7:79:25:e7:01:eb:a5:27:44:33:95:c0:3a:fc:95:76:1a:a7: fd:f0:1a:7d:3a:76:cf:16:de:03:0b:e9:4d:ab:e4:fc:09:49: 65:7e:70:1f:11:32:1f:59:5c:82:e5:6d:27:e2:bf:e7:6c:36: 8b:d3:f4:99:22:a2:5b:38:2d:ee:4c:ea:28:21:34:fa:03:41: c8:00:15:d8:f3:c9:8a:30:a8:c9:2e:0b:fa:fb:a6:4b:05:4a: 24:b2:1c:aa:75:92:26:9c:46:68:f2:a2:02:eb:a8:b1:77:86: bd:ba:a7:db:73:5a:a5:ce:9f:89:02:15:a7:38:d7:4c:d3:80: 13:5f:27:8b:24:10:e0:c1:aa:a1:15:c2:c8:e2:b2:f4:8d:3c: 54:83:4f:91:46:e2:9a:8a:45:c4:82:3b:95:ab:66:46:89:4d: 50:32:40:d6:83:fd:63:ad:b1:8e:73:1f:0c:a6:23:1b:8c:1e: bd:19:de:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUwNjE3MDEyMTM0WhcNMjUwNjI0MDEyMTM0WjAYMRYwFAYD VQQDEw02ODUwYzMxZS05OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArb3ntTQkerkLVRFLW0HEYiTZUiwHo7PgnHkbzDABtvj12oBe3wer/6ohqVS5 plGF1viszVMx9luh726bM12sFCi9bVO6KnkdI37G61h1mcDh20+yqhRvKCSbnKOP WigMbjWGT9pMHrsmXwFdrj053QmH9lFxxoYLdjcdXFZNDtVxhLZEZ33bGun0cza0 qPsqRiO7S7I6xq66IN+Vfw9H+Ef/6AbGibactBAbVGkLd7iJFyMoagzROmMjxMsC N1MHrofEHVRURAyq3TBwhoRM9o4VNlaAqfeM0v8xv0sa3YyTei7+Xo+7enGNtNja ZnnNFWKuUybrqsFThL/RsqbpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhOBtdE ac6tRsdZL7nBBR8M0v9qMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdYNEcQEuyfKPQ4lv2wtOtQcoGfsogKYG5z0PhfWSPu50tsZo2QN0M iJwkb788LqDd2rk/jz8ylP8lHJ2/CfMPmkjzTcfCSbnneSXnAeulJ0QzlcA6/JV2 Gqf98Bp9OnbPFt4DC+lNq+T8CUllfnAfETIfWVyC5W0n4r/nbDaL0/SZIqJbOC3u TOooITT6A0HIABXY88mKMKjJLgv6+6ZLBUokshyqdZImnEZo8qIC66ixd4a9uqfb c1qlzp+JAhWnONdM04ATXyeLJBDgwaqhFcLI4rL0jTxUg0+RRuKaikXEgjuVq2ZG iU1QMkDWg/1jrbGOcx8MpiMbjB69Gd4r -----END CERTIFICATE-----Generated at Wed Jun 18 06:51:11 2025 by rpki-client