$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: UNQKGqlsSnHNtFuYlPeFKGgnFW5WujJIU5UsFEf73vM= Subject key identifier: DD:ED:63:C8:3D:28:80:FC:AC:65:43:74:BA:87:2F:11:BF:5C:99:DF Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0167 Signing time: Sun 15 Jun 2025 03:09:23 +0000 Manifest this update: Sun 15 Jun 2025 03:09:22 +0000 Manifest next update: Sun 22 Jun 2025 03:09:22 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: vhpSJMySAJQsyOTYaiyO7jTLuxX68l+1lPXDScqr/i4=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Jun 15 03:09:22 2025 GMT Not After : Jun 22 03:09:22 2025 GMT Subject: CN=684e3962-3117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:f0:88:b2:2a:73:70:7a:6f:b1:71:85:1d: b1:b2:a6:c1:ee:1b:6c:1c:7e:e6:8a:ff:24:1c:5e: ac:e7:88:f5:19:ae:2b:78:bb:fe:fe:c8:61:42:eb: 99:02:8d:3a:ef:f2:9c:2f:4c:16:32:30:62:8f:43: ac:32:0f:17:78:37:63:66:b8:2d:ad:69:11:1e:df: 26:fe:73:7d:6c:03:aa:d5:f5:fb:7b:a7:ec:d5:14: 43:91:dc:b9:f6:ca:35:a0:38:39:93:0b:a7:55:9d: 94:25:00:0d:e1:8e:b4:b7:ac:1c:d7:c1:52:3e:b0: 61:b6:d0:ee:73:a3:a2:7b:41:f4:ce:a1:f2:6b:f0: 65:14:2f:c8:28:46:21:c8:1f:81:e0:13:37:b9:3b: 52:73:0b:e1:88:5c:df:d0:5e:e7:28:15:cf:31:f6: 79:3d:76:bd:ef:66:2b:de:1d:4d:4d:1c:ac:a0:7c: b7:27:c2:6e:6a:46:5c:ea:0b:7f:e8:a8:0c:f9:86: ce:19:bf:c7:88:ca:50:f8:74:84:fd:04:12:f5:75: 14:b4:68:38:6b:f3:f7:37:39:aa:0b:19:32:62:6e: 57:c1:6b:ba:ea:e7:fa:22:56:1a:41:fc:6a:45:47: cd:2c:d4:ff:77:33:4d:08:5e:7e:c5:d5:fc:9c:20: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:63:C8:3D:28:80:FC:AC:65:43:74:BA:87:2F:11:BF:5C:99:DF X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c0:b2:88:41:8e:54:cf:e2:af:2a:ab:bc:58:96:87:44:36: 36:5f:b7:27:0a:4e:e8:71:94:47:23:ce:3b:71:5f:2a:30:9f: c9:f4:12:bf:45:70:2c:72:a6:76:8a:fc:e3:d5:71:5c:58:85: a1:a4:78:61:70:11:28:e8:fb:40:14:0e:5d:4e:b0:95:5c:da: d0:e9:7f:b2:b2:48:c8:49:a4:bb:09:28:20:b5:bb:02:bd:01: 80:12:b9:bd:08:24:f4:ea:db:0c:3c:f8:f5:d6:12:6f:88:64: 3f:c7:c8:64:b9:70:40:cb:60:23:e0:46:50:88:51:9d:39:dc: d0:e5:3a:2b:c0:c1:3c:a7:6f:19:f6:3f:0e:04:8a:aa:36:a9: 80:47:48:20:b9:7b:5b:7c:15:90:c2:97:27:bc:2a:9f:46:1a: 98:44:52:09:6d:59:c4:62:f4:a2:81:39:73:da:e2:bb:d5:90: 1b:f7:2b:a3:17:37:45:8a:49:e7:dc:d9:ba:bb:14:a2:04:67: 10:ee:4b:6f:3e:d3:d5:7b:d5:ed:b1:71:1e:6d:da:5a:8f:d7: 58:bf:75:32:86:5a:f5:e2:47:6d:05:f4:4d:57:91:c6:c8:06: 92:e2:e2:0d:bb:48:f1:c8:a4:13:0f:d3:35:a6:d8:be:e9:60: 95:54:78:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNjE1MDMwOTIyWhcNMjUwNjIyMDMwOTIyWjAYMRYwFAYD VQQDEw02ODRlMzk2Mi0zMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGjwiLIqc3B6b7FxhR2xsqbB7htsHH7miv8kHF6s54j1Ga4reLv+/shhQuuZ Ao067/KcL0wWMjBij0OsMg8XeDdjZrgtrWkRHt8m/nN9bAOq1fX7e6fs1RRDkdy5 9so1oDg5kwunVZ2UJQAN4Y60t6wc18FSPrBhttDuc6Oie0H0zqHya/BlFC/IKEYh yB+B4BM3uTtScwvhiFzf0F7nKBXPMfZ5PXa972Yr3h1NTRysoHy3J8JuakZc6gt/ 6KgM+YbOGb/HiMpQ+HSE/QQS9XUUtGg4a/P3NzmqCxkyYm5XwWu66uf6IlYaQfxq RUfNLNT/dzNNCF5+xdX8nCAUbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3tY8g9 KID8rGVDdLqHLxG/XJnfMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCwLKIQY5Uz+KvKqu8WJaHRDY2X7cnCk7ocZRHI847cV8qMJ/J9BK/ RXAscqZ2ivzj1XFcWIWhpHhhcBEo6PtAFA5dTrCVXNrQ6X+yskjISaS7CSggtbsC vQGAErm9CCT06tsMPPj11hJviGQ/x8hkuXBAy2Aj4EZQiFGdOdzQ5TorwME8p28Z 9j8OBIqqNqmAR0gguXtbfBWQwpcnvCqfRhqYRFIJbVnEYvSigTlz2uK71ZAb9yuj FzdFiknn3Nm6uxSiBGcQ7ktvPtPVe9XtsXEebdpaj9dYv3Uyhlr14kdtBfRNV5HG yAaS4uINu0jxyKQTD9M1pti+6WCVVHjr -----END CERTIFICATE-----Generated at Sun Jun 15 10:21:05 2025 by rpki-client