$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: UjLH8CmhNn/ys08HBK9XZDXbkSeWlys5a8h52GZyKoE= Subject key identifier: 62:B4:F3:20:7F:B4:1A:7B:65:5C:E0:0B:FB:E7:F0:80:0D:7B:F9:BD Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B22 Signing time: Mon 16 Jun 2025 19:08:31 +0000 Manifest this update: Mon 16 Jun 2025 19:08:30 +0000 Manifest next update: Mon 23 Jun 2025 19:08:30 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: JiPDwD305Y2btqG9eC9iZAFZ8H0hlBF4LU6caeWelWs=) 2: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: kJrPXWQ3cVQ93gBBPhrmFd1cH9nNscDnrQnZgqd+WBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Jun 16 19:08:30 2025 GMT Not After : Jun 23 19:08:30 2025 GMT Subject: CN=68506baf-3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:7c:f1:3d:cb:bf:09:49:3d:2a:50:78:1c: 11:b4:a5:2f:6b:f2:6f:89:b3:69:80:d2:f8:f7:52: e1:f5:b8:eb:c0:42:35:dc:97:cb:e5:83:aa:5f:7b: 10:91:3d:d4:05:78:ac:53:1e:5e:d7:cb:0f:9f:fc: 69:2c:39:c8:b7:32:61:2f:ba:37:eb:28:3b:c9:b4: 0b:e1:52:ef:87:d7:88:a8:14:3e:fd:2a:a7:8a:c1: a4:c8:7f:44:f1:f9:b3:f6:27:2d:1f:50:11:99:8d: 98:80:1f:fd:ee:08:c3:f9:53:34:07:31:87:3b:1b: d1:da:98:e9:75:d4:df:7c:9e:04:ac:05:f0:57:57: c4:b5:b1:6e:5c:2b:89:e5:63:a2:78:31:7e:17:c7: 8b:45:c9:ba:dd:6d:6f:b5:b0:be:19:4d:6c:fb:96: fe:ff:f4:e7:8d:67:f0:bd:bb:6f:d8:d9:ea:30:e1: 3b:fd:a0:01:14:67:63:16:1c:21:98:cd:16:39:0e: 8b:88:ec:ec:f2:9b:37:fa:62:29:f9:e6:30:83:12: a9:e9:94:b5:28:60:d2:7d:76:c4:d5:a6:b3:c0:0d: a9:2a:51:d6:39:1f:d1:38:22:76:db:50:e9:d9:bc: 2a:3d:9f:f0:83:a6:e1:fb:95:29:37:13:22:cc:ab: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B4:F3:20:7F:B4:1A:7B:65:5C:E0:0B:FB:E7:F0:80:0D:7B:F9:BD X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f6:4b:5c:b4:c2:02:7a:6a:f7:90:28:a6:23:86:70:66:30: 48:36:89:a2:91:5c:46:b0:b3:a1:ac:17:b8:77:b7:29:4a:68: ea:64:4d:0d:45:53:4b:77:f6:ab:d3:30:35:43:b6:e0:6f:c4: fd:60:a7:8c:ae:14:27:7a:5d:a7:46:16:bc:37:7d:e1:3c:8f: 34:27:5c:b5:d1:5d:b7:1b:f5:8d:31:44:59:7b:23:97:3d:7a: 4c:89:b6:10:37:11:a1:78:9a:e9:5e:5a:f8:13:88:6e:11:ef: ff:ec:cb:5e:51:e6:d5:fa:07:33:52:24:b9:4b:eb:e1:c3:00: b0:76:95:e7:5c:4e:5b:8d:b5:50:f1:9d:2c:79:21:50:de:3d: 8e:60:7e:ff:17:be:85:ba:26:5c:36:67:1d:b7:76:fa:60:73: 08:a3:e2:93:7d:0d:a1:b6:3e:5d:00:f0:fa:d3:cb:56:41:4d: 72:33:23:b7:7c:27:f9:15:24:02:30:f5:a5:eb:ee:94:ca:4e: 1a:b0:29:c2:f2:0a:28:c5:df:5d:8b:24:76:cc:e4:89:f2:91: 9c:c3:db:31:1f:a8:ab:6a:72:bd:f4:18:65:0a:d7:27:03:33: bb:33:9e:af:e4:99:aa:c0:31:43:4b:f0:1f:01:b7:50:ee:67: f4:e5:74:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwNjE2MTkwODMwWhcNMjUwNjIzMTkwODMwWjAYMRYwFAYD VQQDEw02ODUwNmJhZi0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9Z88T3LvwlJPSpQeBwRtKUva/JvibNpgNL491Lh9bjrwEI13JfL5YOqX3sQ kT3UBXisUx5e18sPn/xpLDnItzJhL7o36yg7ybQL4VLvh9eIqBQ+/SqnisGkyH9E 8fmz9ictH1ARmY2YgB/97gjD+VM0BzGHOxvR2pjpddTffJ4ErAXwV1fEtbFuXCuJ 5WOieDF+F8eLRcm63W1vtbC+GU1s+5b+//TnjWfwvbtv2NnqMOE7/aABFGdjFhwh mM0WOQ6LiOzs8ps3+mIp+eYwgxKp6ZS1KGDSfXbE1aazwA2pKlHWOR/ROCJ221Dp 2bwqPZ/wg6bh+5UpNxMizKvp3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK08yB/ tBp7ZVzgC/vn8IANe/m9MB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs9ktctMICemr3kCimI4ZwZjBINomikVxGsLOhrBe4d7cpSmjqZE0N RVNLd/ar0zA1Q7bgb8T9YKeMrhQnel2nRha8N33hPI80J1y10V23G/WNMURZeyOX PXpMibYQNxGheJrpXlr4E4huEe//7MteUebV+gczUiS5S+vhwwCwdpXnXE5bjbVQ 8Z0seSFQ3j2OYH7/F76FuiZcNmcdt3b6YHMIo+KTfQ2htj5dAPD608tWQU1yMyO3 fCf5FSQCMPWl6+6Uyk4asCnC8gooxd9diyR2zOSJ8pGcw9sxH6iranK99BhlCtcn AzO7M56v5JmqwDFDS/AfAbdQ7mf05XTu -----END CERTIFICATE-----Generated at Wed Jun 18 02:52:03 2025 by rpki-client