$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: DAGuBNM+flBlGEYvAtpBC+n8HALdt9WJ78r6LnppQYY= Subject key identifier: E4:DE:DC:42:33:D5:D4:2D:9C:30:93:16:B4:28:08:E6:3B:7E:CA:8C Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 2E Signing time: Sat 31 May 2025 07:25:23 +0000 Manifest this update: Sat 31 May 2025 07:25:22 +0000 Manifest next update: Sat 07 Jun 2025 07:25:22 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: cvNP1ndDMTmDYy6JG2lKsucBrLMhwfaTr4kNqViXLDw=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: May 31 07:25:22 2025 GMT Not After : Jun 7 07:25:22 2025 GMT Subject: CN=683aaee3-4857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:de:f2:56:0e:55:f8:b8:32:30:fc:44:ed: 4e:56:58:fe:10:0c:98:1b:43:5a:92:4d:0e:7c:50: 98:6a:99:6f:52:1d:06:03:81:c3:87:f5:f5:31:63: 7e:25:b8:f3:1b:00:98:33:33:7d:31:1f:b1:a1:52: a8:c3:25:9b:26:d6:2d:6f:2e:d1:70:a9:fd:7e:d8: fc:43:29:a8:50:50:17:44:b1:a9:7b:a0:2a:72:b0: 32:dc:80:a0:48:92:1b:9a:84:e1:f1:3d:af:e9:a2: a4:83:1e:66:46:d0:80:5f:23:0f:3c:42:bb:7e:b7: f9:1a:81:b3:2c:9c:a3:39:a5:50:5c:e1:1a:69:db: 40:1b:44:83:04:2d:cc:51:8a:65:06:56:02:81:49: d8:60:30:ef:56:91:fe:3c:b0:50:db:9b:65:e8:ad: ae:c4:f4:e3:64:47:b2:2d:c4:62:66:28:2a:5c:2d: 2b:8a:10:97:33:9d:a0:3c:80:c9:8c:1b:00:ea:3a: b0:73:7f:53:24:a1:35:98:f2:34:65:8f:ed:22:4a: f8:61:16:d6:2a:53:89:06:33:91:5a:c8:3d:80:f7: e0:44:be:26:40:c0:ab:62:87:a6:08:99:11:9c:10: 18:35:b4:99:31:5f:0d:69:f6:fa:83:2e:ad:2d:68: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DE:DC:42:33:D5:D4:2D:9C:30:93:16:B4:28:08:E6:3B:7E:CA:8C X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9d:6f:83:c3:ba:e1:0b:2f:69:e6:c0:da:78:01:27:2c:78: 9c:21:0a:cb:2e:e4:8e:85:77:af:2e:6d:fa:f2:9a:f3:af:be: 96:48:04:77:a7:30:a2:d8:92:c3:61:90:6e:cf:53:0b:a1:6f: 19:46:f5:05:5b:a8:3c:c8:d6:c2:64:0a:5a:a9:42:13:59:37: 20:d0:d5:f0:10:a7:5b:88:3a:82:60:38:53:6e:7d:ed:c3:96: cb:b3:54:a5:24:61:b5:4b:53:ee:07:f5:08:ed:29:90:a1:24: c8:71:67:b5:80:96:c8:7c:28:04:42:26:c4:9e:38:8d:22:59: 31:8d:41:d6:8c:05:cb:eb:37:47:63:b1:2f:76:db:4b:19:94: 5a:fb:ab:d1:e1:ea:e1:9a:1f:ca:ad:ed:f1:28:07:bd:f6:b6: f1:bf:c8:71:7f:ee:e2:72:fa:85:7d:23:b2:99:66:91:16:e7: d2:8c:e3:16:36:6d:cc:79:8b:33:02:a0:10:67:0f:76:0a:8f: 85:2f:ea:e7:a5:71:95:7a:00:fa:9c:8c:3d:ac:82:76:ba:20: ac:b7:ee:25:a2:b7:f1:5f:ff:d2:e7:f0:d2:f9:66:40:e7:7d: 1b:7b:b1:bb:f1:10:12:e8:4e:e5:76:69:70:c6:56:7e:fb:7c: 78:3e:e5:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA1MzEwNzI1MjJaFw0yNTA2MDcwNzI1MjJaMBgxFjAUBgNV BAMTDTY4M2FhZWUzLTQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY497yVg5V+LgyMPxE7U5WWP4QDJgbQ1qSTQ58UJhqmW9SHQYDgcOH9fUxY34l uPMbAJgzM30xH7GhUqjDJZsm1i1vLtFwqf1+2PxDKahQUBdEsal7oCpysDLcgKBI khuahOHxPa/poqSDHmZG0IBfIw88Qrt+t/kagbMsnKM5pVBc4Rpp20AbRIMELcxR imUGVgKBSdhgMO9Wkf48sFDbm2Xora7E9ONkR7ItxGJmKCpcLSuKEJcznaA8gMmM GwDqOrBzf1MkoTWY8jRlj+0iSvhhFtYqU4kGM5FayD2A9+BEviZAwKtih6YImRGc EBg1tJkxXw1p9vqDLq0taOYXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5N7cQjPV 1C2cMJMWtCgI5jt+yowwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGdb4PDuuELL2nmwNp4AScseJwhCssu5I6Fd68ubfrymvOvvpZIBHen MKLYksNhkG7PUwuhbxlG9QVbqDzI1sJkClqpQhNZNyDQ1fAQp1uIOoJgOFNufe3D lsuzVKUkYbVLU+4H9QjtKZChJMhxZ7WAlsh8KARCJsSeOI0iWTGNQdaMBcvrN0dj sS9220sZlFr7q9Hh6uGaH8qt7fEoB732tvG/yHF/7uJy+oV9I7KZZpEW59KM4xY2 bcx5izMCoBBnD3YKj4Uv6uelcZV6APqcjD2sgna6IKy37iWit/Ff/9Ln8NL5ZkDn fRt7sbvxEBLoTuV2aXDGVn77fHg+5T0= -----END CERTIFICATE-----Generated at Sat May 31 16:42:57 2025 by rpki-client