$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: Th+wjLqkiFe4JHsJ6dK0HEPlbXdUkudBbMl5IgiEwTo= Subject key identifier: 5D:53:D8:83:7A:32:C3:EE:53:45:A6:14:93:82:9E:F5:46:18:B3:0E Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: DA Signing time: Tue 17 Jun 2025 04:34:21 +0000 Manifest this update: Tue 17 Jun 2025 04:34:21 +0000 Manifest next update: Tue 24 Jun 2025 04:34:21 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: JcgEAVZF3Cp7cvVVkgArlOPJ/RPDB4izsCgp5ZhFW9Y=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Jun 17 04:34:21 2025 GMT Not After : Jun 24 04:34:21 2025 GMT Subject: CN=6850f04d-6c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:39:da:7e:6d:0c:15:6c:6b:d2:27:b0:fb: 7a:97:14:af:a9:88:e4:72:7f:1e:0a:96:65:b2:aa: e0:37:f1:95:fe:9a:25:94:4a:c1:7c:fd:70:e5:a2: 6b:46:eb:a6:ef:9f:5b:d0:41:d4:29:a1:96:58:ba: e7:c4:c4:47:26:c6:1b:97:32:29:05:55:e6:78:0c: 1a:a6:3d:8f:d3:e0:84:56:fc:c7:be:37:60:e0:1b: bb:f6:89:5a:37:74:05:5e:f6:89:86:d8:84:11:f0: 4b:5b:7e:e6:17:d3:5e:81:da:55:e2:8f:e3:aa:5f: 5f:52:85:ce:ab:73:e2:dd:00:8a:ff:89:e5:07:8c: 58:99:09:60:73:65:65:c4:45:75:cd:b5:9f:0d:de: 56:5f:98:0c:d5:ff:d1:ba:01:32:54:f9:44:12:32: f0:a8:bd:1d:db:42:85:c1:78:6f:ec:60:49:b3:cd: 85:e0:1c:86:a4:71:87:05:0e:28:31:30:02:c0:31: 07:21:56:82:20:5b:9d:ae:df:72:b2:81:4a:8c:7c: e0:ee:0a:7b:f0:93:a9:b2:6d:2d:79:b5:4e:3b:4e: 12:5e:ab:89:df:cc:56:63:a0:5f:8d:5a:74:55:c0: 34:ac:57:eb:14:af:05:97:57:ae:b3:52:d0:e6:52: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:D8:83:7A:32:C3:EE:53:45:A6:14:93:82:9E:F5:46:18:B3:0E X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b6:62:36:58:4b:78:e1:2c:f1:39:05:47:09:aa:02:df:18: 34:f3:5b:22:3a:31:8e:da:a3:68:5b:9a:0a:24:57:3f:0a:c7: 8a:83:1e:63:ab:8a:a4:30:ad:21:36:a8:60:ef:13:68:99:25: 64:19:ff:53:2b:dc:8f:d3:07:4e:d7:a3:84:b6:e2:84:65:50: 46:34:60:22:ad:e6:37:66:77:3c:30:da:1a:c1:e4:54:7c:e5: 7a:4c:11:c9:dc:e6:25:91:2f:4a:5d:dd:fb:b2:40:14:55:e7: bd:dc:d1:06:52:38:7c:78:c6:18:49:c5:18:1f:12:2b:f2:4a: f0:bc:cb:50:89:56:e7:18:8b:cb:08:a6:91:ba:03:ce:db:e6: 6f:89:66:f8:76:c1:df:de:cd:e0:d5:65:13:0d:09:cf:49:24: 79:59:ab:6c:aa:9f:a4:c0:3f:93:fe:b1:0a:73:ce:db:00:78: 3b:48:48:7c:b9:73:c7:e2:87:e7:5f:61:3a:9e:b4:ab:20:6c: d7:4d:f9:25:e5:d1:8d:78:72:00:4a:26:f2:8f:18:20:8c:7a: c6:aa:57:ce:e0:51:8c:21:7f:de:e5:16:0a:72:81:71:36:f3: 4f:41:f6:c3:41:0f:11:55:21:fa:7e:b5:90:0e:87:84:9e:44: 1a:34:e6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUwNjE3MDQzNDIxWhcNMjUwNjI0MDQzNDIxWjAYMRYwFAYD VQQDEw02ODUwZjA0ZC02YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HM52n5tDBVsa9InsPt6lxSvqYjkcn8eCpZlsqrgN/GV/pollErBfP1w5aJr Ruum759b0EHUKaGWWLrnxMRHJsYblzIpBVXmeAwapj2P0+CEVvzHvjdg4Bu79ola N3QFXvaJhtiEEfBLW37mF9NegdpV4o/jql9fUoXOq3Pi3QCK/4nlB4xYmQlgc2Vl xEV1zbWfDd5WX5gM1f/RugEyVPlEEjLwqL0d20KFwXhv7GBJs82F4ByGpHGHBQ4o MTACwDEHIVaCIFudrt9ysoFKjHzg7gp78JOpsm0tebVOO04SXquJ38xWY6BfjVp0 VcA0rFfrFK8Fl1eus1LQ5lKWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1T2IN6 MsPuU0WmFJOCnvVGGLMOMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBftmI2WEt44SzxOQVHCaoC3xg081siOjGO2qNoW5oKJFc/CseKgx5j q4qkMK0hNqhg7xNomSVkGf9TK9yP0wdO16OEtuKEZVBGNGAireY3Znc8MNoaweRU fOV6TBHJ3OYlkS9KXd37skAUVee93NEGUjh8eMYYScUYHxIr8krwvMtQiVbnGIvL CKaRugPO2+ZviWb4dsHf3s3g1WUTDQnPSSR5Watsqp+kwD+T/rEKc87bAHg7SEh8 uXPH4ofnX2E6nrSrIGzXTfkl5dGNeHIASibyjxggjHrGqlfO4FGMIX/e5RYKcoFx NvNPQfbDQQ8RVSH6frWQDoeEnkQaNObt -----END CERTIFICATE-----Generated at Tue Jun 17 11:46:24 2025 by rpki-client