$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: wkcApAPSXX1Xw3GczlpyE0u1+uV8hsXV4mlIKe51mic= Subject key identifier: 2C:4F:8A:C7:99:12:65:E4:91:D5:48:61:8C:E5:D5:CE:90:40:9B:E9 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 9F Signing time: Tue 17 Jun 2025 05:15:26 +0000 Manifest this update: Tue 17 Jun 2025 05:15:26 +0000 Manifest next update: Tue 24 Jun 2025 05:15:26 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: gXO3y2atUePslUra31mcTtKQtkm6tRAJ4fLhF6QjqAg=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: Cl2PJo7826qehYKKSG2/VdHV6kV/QSQl5KdRQS87oS0=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Jun 17 05:15:26 2025 GMT Not After : Jun 24 05:15:26 2025 GMT Subject: CN=6850f9ee-6dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:6e:08:78:66:ea:04:45:aa:77:ac:c8:5e: b3:8f:1e:19:8c:7b:f8:b6:c6:5c:31:6c:06:2f:50: cb:0c:5b:cf:6a:2c:65:61:1a:c7:29:87:26:9f:99: 18:fa:2f:28:8b:06:0b:e8:08:ed:99:48:56:b2:05: ca:9d:a4:a2:36:73:4a:b5:33:25:de:e4:4f:88:dc: d7:ac:b9:df:5a:00:a3:eb:6e:48:6b:15:6f:04:53: 64:8d:99:4e:1e:30:7a:d7:7f:1b:04:27:ee:62:fe: f6:00:10:36:8d:c4:15:b4:79:46:9a:d0:87:3c:70: aa:13:0d:40:84:d4:01:05:ea:4a:f4:b1:ce:9e:05: b7:c5:ca:da:e3:20:2c:be:9f:c6:da:69:76:0e:b7: 2c:f5:09:ec:9a:b5:b1:40:d2:6d:48:61:d6:a2:72: ea:2e:1d:e2:8e:93:1c:8f:fc:33:3c:7e:2d:a5:fe: 66:fc:66:71:c1:8c:77:26:f1:c1:dd:20:b8:95:69: bf:de:90:fb:4b:cc:a2:90:8b:7f:71:44:1b:2f:e5: dd:90:e1:9d:42:dd:33:fb:41:e6:aa:90:0a:4c:9d: 7b:8e:e0:47:6a:f1:ca:23:ec:84:da:f8:3b:dc:d1: c4:70:b2:cf:40:b3:8b:f5:da:5f:0a:c5:03:a8:42: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:8A:C7:99:12:65:E4:91:D5:48:61:8C:E5:D5:CE:90:40:9B:E9 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0c:30:b0:7e:75:2b:48:80:52:0b:b5:fe:a9:ed:60:66:21: 2c:13:b8:36:50:a8:23:5b:ff:7b:fe:c0:5f:e2:fa:2e:e4:99: db:78:32:b9:81:94:01:ad:b7:88:4b:2f:5c:dd:fd:8a:7f:f5: 14:e7:d8:c2:0c:a3:af:2b:95:ad:27:a3:34:db:2a:18:b2:33: b4:73:88:0a:e6:78:14:fa:9d:58:db:4b:b5:71:83:09:0b:45: b3:97:43:50:ab:e3:50:e2:63:bd:39:9b:cd:de:97:90:91:f4: 04:20:00:7b:90:99:2a:5e:f1:56:66:25:b3:57:c2:fe:9c:ce: d0:14:00:09:bd:d4:21:40:c9:24:4f:f7:18:5a:f3:9c:3a:c2: 9e:fe:c1:94:85:8d:f6:3e:f3:84:9b:2b:13:a5:21:f5:c7:ed: 6a:90:97:d5:ce:36:fc:78:e9:79:0e:6d:73:b0:3f:90:53:35: f3:5c:56:1a:5c:84:8b:85:f0:7a:01:a9:8f:ec:bc:ce:61:12: fa:11:d8:49:70:d4:f1:fd:30:3a:94:49:5b:17:57:6a:de:9e: 2e:05:cb:c4:42:d4:3a:ec:c1:a2:a2:27:cc:e7:e3:5f:bc:81: 43:45:f3:56:8c:ff:f7:ca:3d:14:e9:39:44:54:95:c5:d1:96: 42:78:1c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjUwNjE3MDUxNTI2WhcNMjUwNjI0MDUxNTI2WjAYMRYwFAYD VQQDEw02ODUwZjllZS02ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB1uCHhm6gRFqnesyF6zjx4ZjHv4tsZcMWwGL1DLDFvPaixlYRrHKYcmn5kY +i8oiwYL6AjtmUhWsgXKnaSiNnNKtTMl3uRPiNzXrLnfWgCj625IaxVvBFNkjZlO HjB6138bBCfuYv72ABA2jcQVtHlGmtCHPHCqEw1AhNQBBepK9LHOngW3xcra4yAs vp/G2ml2Drcs9QnsmrWxQNJtSGHWonLqLh3ijpMcj/wzPH4tpf5m/GZxwYx3JvHB 3SC4lWm/3pD7S8yikIt/cUQbL+XdkOGdQt0z+0HmqpAKTJ17juBHavHKI+yE2vg7 3NHEcLLPQLOL9dpfCsUDqEJWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxPiseZ EmXkkdVIYYzl1c6QQJvpMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2DDCwfnUrSIBSC7X+qe1gZiEsE7g2UKgjW/97/sBf4vou5JnbeDK5 gZQBrbeISy9c3f2Kf/UU59jCDKOvK5WtJ6M02yoYsjO0c4gK5ngU+p1Y20u1cYMJ C0Wzl0NQq+NQ4mO9OZvN3peQkfQEIAB7kJkqXvFWZiWzV8L+nM7QFAAJvdQhQMkk T/cYWvOcOsKe/sGUhY32PvOEmysTpSH1x+1qkJfVzjb8eOl5Dm1zsD+QUzXzXFYa XISLhfB6AamP7LzOYRL6EdhJcNTx/TA6lElbF1dq3p4uBcvEQtQ67MGioifM5+Nf vIFDRfNWjP/3yj0U6TlEVJXF0ZZCeBwO -----END CERTIFICATE-----Generated at Wed Jun 18 19:44:21 2025 by rpki-client