$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json) Hash identifier: KPOzGunEAEik5fgo9tMFf6oP1bW95vQxYbiTjzZ+8nU= Subject key identifier: CD:40:22:BE:6D:A7:41:F1:EF:79:EA:A0:D3:CF:BA:98:E7:69:48:E8 Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft Manifest number: 0C36 Signing time: Sat 14 Jun 2025 18:24:58 +0000 Manifest this update: Sat 14 Jun 2025 18:24:57 +0000 Manifest next update: Sat 21 Jun 2025 18:24:57 +0000 Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: z9xln/eByuvWVrd/CRJY3L7u4VzMgI7DmorO3WblVLE=) 2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Jun 14 18:24:57 2025 GMT Not After : Jun 21 18:24:57 2025 GMT Subject: CN=684dbe7a-2e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:bc:94:df:0a:53:22:87:65:28:88:85:76: 4f:b6:fe:2e:d3:a0:b2:e1:86:e5:a9:59:83:ec:3b: 9d:6c:c1:d1:77:9c:ed:f4:aa:ad:f9:6e:1e:37:6f: be:cd:f2:5b:99:8d:cd:fb:d6:2f:c3:ad:a2:c6:90: 2b:b7:e5:2c:ff:25:b4:b0:bf:c1:b1:8b:b4:92:40: 6e:2c:f2:5a:4e:8c:ff:86:38:8f:c9:db:b9:23:8e: 45:43:e2:7f:25:51:81:c8:17:e4:b9:85:5d:5d:ea: 14:8b:41:ce:ef:c3:e1:25:53:a3:bf:28:1a:e4:cb: 0b:67:68:f9:85:e5:c2:93:c8:7b:d6:36:ea:e8:ff: c2:b6:da:2e:9e:de:1a:33:ad:ec:2b:74:36:24:46: ab:50:84:e2:39:d9:98:25:d3:14:d5:92:15:54:a9: 02:af:63:92:0b:b1:f9:05:dc:f4:d5:c9:96:84:85: 60:c0:e6:e1:64:fa:49:38:a7:13:1b:29:26:de:8f: c7:a7:27:67:c3:97:2f:e9:93:fd:a4:0b:dd:89:da: ca:e4:09:d3:22:94:da:03:23:fa:aa:91:7b:66:eb: ee:ed:12:77:86:e7:69:cb:3d:cf:95:3f:49:46:ac: 78:97:84:d5:1c:27:4d:fb:8f:e1:44:9b:85:ae:e5: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:40:22:BE:6D:A7:41:F1:EF:79:EA:A0:D3:CF:BA:98:E7:69:48:E8 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b9:2a:9d:f3:8d:04:3a:1b:57:68:75:fc:82:e8:cb:bf:b7: fb:dc:83:90:e7:1a:9d:88:07:b5:59:21:10:3c:a9:ff:11:89: 2d:36:f3:c6:1e:11:b5:68:66:99:b4:60:53:84:a3:f2:c5:0a: 64:23:4a:5a:37:eb:0b:c2:14:06:00:aa:be:84:38:4d:6c:22: cf:13:af:41:68:85:2b:34:b2:16:b5:cf:79:65:65:9d:bd:58: f7:8a:b8:66:2a:f9:bf:ca:1b:75:26:1b:8e:c4:65:37:ee:04: 26:01:93:88:5e:68:7c:00:30:c0:46:9d:0e:c2:15:77:f1:cb: 9b:57:30:44:8b:a4:80:53:3d:15:66:cc:02:e7:54:6b:70:47: 02:94:61:22:6a:94:9f:72:4f:02:d1:66:fa:56:db:02:b6:57: 74:41:a0:12:07:9f:83:60:10:7f:fd:e5:65:14:c5:a6:fd:0b: 57:14:a9:7a:0c:91:a3:e0:f5:ad:92:ab:95:21:d4:9c:b3:ec: 8b:fa:02:49:86:bd:28:4a:b7:b3:ef:f0:2e:87:f7:0f:2e:c5: d7:2f:ed:fe:09:fa:79:fa:d3:e2:a0:93:e3:21:b2:f9:f1:14: a6:f6:c5:3f:03:e4:97:37:cb:90:3b:2c:9a:c0:a9:a2:cb:15: f8:fd:a1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjUwNjE0MTgyNDU3WhcNMjUwNjIxMTgyNDU3WjAYMRYwFAYD VQQDEw02ODRkYmU3YS0yZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WC8lN8KUyKHZSiIhXZPtv4u06Cy4YblqVmD7DudbMHRd5zt9Kqt+W4eN2++ zfJbmY3N+9Yvw62ixpArt+Us/yW0sL/BsYu0kkBuLPJaToz/hjiPydu5I45FQ+J/ JVGByBfkuYVdXeoUi0HO78PhJVOjvyga5MsLZ2j5heXCk8h71jbq6P/Cttount4a M63sK3Q2JEarUITiOdmYJdMU1ZIVVKkCr2OSC7H5Bdz01cmWhIVgwObhZPpJOKcT Gykm3o/Hpydnw5cv6ZP9pAvdidrK5AnTIpTaAyP6qpF7Zuvu7RJ3hudpyz3PlT9J Rqx4l4TVHCdN+4/hRJuFruVlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1AIr5t p0Hx73nqoNPPupjnaUjoMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTZFOC83QkNBRkYwMjA5MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlk V1pHU2pWbWsyMlZCR3BhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTuSqd840EOhtXaHX8gujLv7f73IOQ5xqdiAe1WSEQPKn/EYktNvPG HhG1aGaZtGBThKPyxQpkI0paN+sLwhQGAKq+hDhNbCLPE69BaIUrNLIWtc95ZWWd vVj3irhmKvm/yht1JhuOxGU37gQmAZOIXmh8ADDARp0OwhV38cubVzBEi6SAUz0V ZswC51RrcEcClGEiapSfck8C0Wb6VtsCtld0QaASB5+DYBB//eVlFMWm/QtXFKl6 DJGj4PWtkquVIdScs+yL+gJJhr0oSrez7/Auh/cPLsXXL+3+Cfp5+tPioJPjIbL5 8RSm9sU/A+SXN8uQOyyawKmiyxX4/aE1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:16 2025 by rpki-client