$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: i9jKRON0w/SyxSmI4XjQQUnph8JKkkjJO32V+iTayNs= Subject key identifier: 65:FC:34:E1:0B:9D:69:91:DB:1F:34:86:DC:6F:D2:43:C8:41:B4:73 Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 0164 Signing time: Sun 15 Jun 2025 03:09:57 +0000 Manifest this update: Sun 15 Jun 2025 03:09:56 +0000 Manifest next update: Sun 22 Jun 2025 03:09:56 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: HHM8zDlUBcrpVeapIwRKxaSVLw1yCPYGokYXvbAaQ+0=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5, serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Jun 15 03:09:56 2025 GMT Not After : Jun 22 03:09:56 2025 GMT Subject: CN=684e3984-d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:69:8d:25:7b:08:a7:45:4c:6e:eb:85:d4: bb:61:09:e5:05:a8:90:72:b8:46:2c:e7:04:d6:8f: bd:52:42:36:c9:e1:1c:a5:b1:93:96:2c:92:81:84: f7:76:3c:f7:29:c8:85:52:31:7b:6a:3c:a6:21:19: 6b:a9:ea:a3:49:ab:70:e5:6e:bc:82:60:16:be:57: f3:1b:27:c9:98:df:a0:27:7d:0e:f0:89:99:74:98: 72:52:62:2d:7d:77:80:78:94:ff:1d:a2:64:03:d9: a5:eb:6b:65:8d:1a:0e:3c:5c:dd:4c:2d:5b:b4:a1: 00:27:3e:99:81:28:ee:92:97:c3:7d:d7:eb:c5:19: 7e:f8:31:28:04:f7:c4:ce:00:0f:0c:1d:aa:e9:69: 4c:d6:36:f9:96:31:1e:db:af:af:00:14:9c:2e:65: 3d:90:fd:88:5d:ec:5b:ff:60:ab:93:14:a4:cb:c4: 64:4b:24:a2:90:d5:e5:86:b6:a8:16:e6:8e:88:7d: 40:e9:a7:f9:89:8e:07:22:c6:89:2c:5e:56:21:a3: ae:cf:7d:45:4b:f5:6a:cb:e5:70:9a:6b:36:35:04: 8f:8b:0f:3b:33:77:fb:dd:cd:16:8a:54:00:22:fd: 45:59:57:d8:d6:80:56:b7:01:91:9e:97:51:02:7f: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:34:E1:0B:9D:69:91:DB:1F:34:86:DC:6F:D2:43:C8:41:B4:73 X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a3:bb:1a:b2:27:00:f1:01:99:fd:49:c6:61:a6:6c:ac:0c: 15:47:3a:ec:86:7f:18:1c:84:d2:cb:0e:1a:7c:a9:1f:9b:cf: 40:0a:54:fe:6b:82:a7:bd:2a:75:87:eb:ce:62:65:13:a5:bb: e4:31:42:3a:5e:48:cf:56:03:b2:f6:a0:26:4f:33:5b:f3:c5: 72:a6:e8:25:ac:13:d6:dd:b8:1a:14:51:8b:18:5d:93:ba:79: ea:c9:fd:c0:63:4f:07:23:b1:fc:03:c9:1f:c1:2f:b4:34:8a: 18:df:cf:74:55:82:ab:26:20:5a:2b:ef:63:fd:97:04:df:45: 9b:54:de:26:a3:a7:60:49:43:53:a5:bb:5d:3b:48:55:1f:58: d3:b3:85:c5:fd:8c:6e:ca:39:e4:0a:55:63:26:42:27:3f:39: dc:cf:ff:fa:d5:47:38:5e:f4:46:89:32:21:d1:a8:d4:b7:fd: 44:08:12:51:bf:5f:b5:d7:82:fa:b8:6d:17:1e:5d:1d:c6:34: c1:60:83:6c:ff:b0:96:3e:9a:21:34:22:d7:ba:d5:73:11:eb: ff:0c:f9:4e:a4:44:8a:45:81:92:d7:f8:e4:be:ca:dd:3d:1e: 1b:4e:54:96:48:91:8f:39:5d:a9:2a:b5:11:16:c8:59:d1:62: a7:26:c4:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjUwNjE1MDMwOTU2WhcNMjUwNjIyMDMwOTU2WjAYMRYwFAYD VQQDEw02ODRlMzk4NC1kNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/tpjSV7CKdFTG7rhdS7YQnlBaiQcrhGLOcE1o+9UkI2yeEcpbGTliySgYT3 djz3KciFUjF7ajymIRlrqeqjSatw5W68gmAWvlfzGyfJmN+gJ30O8ImZdJhyUmIt fXeAeJT/HaJkA9ml62tljRoOPFzdTC1btKEAJz6ZgSjukpfDfdfrxRl++DEoBPfE zgAPDB2q6WlM1jb5ljEe26+vABScLmU9kP2IXexb/2CrkxSky8RkSySikNXlhrao FuaOiH1A6af5iY4HIsaJLF5WIaOuz31FS/Vqy+Vwmms2NQSPiw87M3f73c0WilQA Iv1FWVfY1oBWtwGRnpdRAn9O9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGX8NOEL nWmR2x80htxv0kPIQbRzMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0o7sasicA8QGZ/UnGYaZsrAwVRzrshn8YHITSyw4afKkfm89AClT+ a4KnvSp1h+vOYmUTpbvkMUI6XkjPVgOy9qAmTzNb88VypuglrBPW3bgaFFGLGF2T unnqyf3AY08HI7H8A8kfwS+0NIoY3890VYKrJiBaK+9j/ZcE30WbVN4mo6dgSUNT pbtdO0hVH1jTs4XF/YxuyjnkClVjJkInPzncz//61Uc4XvRGiTIh0ajUt/1ECBJR v1+114L6uG0XHl0dxjTBYINs/7CWPpohNCLXutVzEev/DPlOpESKRYGS1/jkvsrd PR4bTlSWSJGPOV2pKrURFshZ0WKnJsQV -----END CERTIFICATE-----Generated at Sun Jun 15 20:39:07 2025 by rpki-client