$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: wmZXnb9SRd3xNTJsTsE++8zZSCbLI6Ey/GF+RJQrZA0= Subject key identifier: C8:B0:A7:CB:50:FD:C2:81:C6:33:8A:F4:4B:DA:42:46:1E:2C:AC:19 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 7F Signing time: Sat 31 May 2025 06:20:15 +0000 Manifest this update: Sat 31 May 2025 06:20:14 +0000 Manifest next update: Sat 07 Jun 2025 06:20:14 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: evlF6W8FddRtdYLKibTYq02x5hs5Udg6V5X3ou5tAhM=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: May 31 06:20:14 2025 GMT Not After : Jun 7 06:20:14 2025 GMT Subject: CN=683a9f9e-c99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:3a:33:fb:3b:b9:c3:c1:83:86:80:b7:a5: cf:55:e9:1f:5a:00:f0:0e:0a:b5:55:da:54:97:56: bd:17:6d:44:33:e8:37:18:4a:6f:2f:86:e7:a6:31: b1:44:8f:b9:c4:53:7e:05:54:7b:52:53:5e:c4:1b: cd:f5:fa:c5:cf:05:ad:4e:06:7f:53:8c:bf:cf:4f: 27:16:93:df:02:5a:d2:08:e0:d4:3a:45:ba:85:75: 60:ab:8a:6a:7f:65:c0:80:45:48:47:a9:02:ed:c8: 38:ba:fe:15:30:b0:e7:f2:e4:78:01:dc:f6:76:76: e8:e8:a2:e2:3c:85:59:ec:37:34:62:8c:e2:96:62: 0e:88:4c:86:36:21:e5:b7:ac:40:19:b1:e5:4a:8d: fc:23:42:ec:ec:a0:20:55:26:ef:66:5c:d8:3d:c2: 91:8c:77:59:d4:11:75:fa:de:91:03:d1:8a:6f:bf: e6:ff:e7:47:65:fd:3f:eb:5f:bc:54:4a:51:f7:cf: 92:49:58:b1:92:25:37:a0:c8:e8:4f:91:cb:69:90: 2b:60:6a:63:b1:79:96:87:e9:1a:a4:86:eb:61:0b: 40:61:92:bf:75:93:8a:0d:6a:fc:5d:fb:35:b8:cd: 39:44:9f:ab:96:3e:9e:28:a9:2d:b8:e4:92:cc:7c: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:A7:CB:50:FD:C2:81:C6:33:8A:F4:4B:DA:42:46:1E:2C:AC:19 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:03:3b:3b:97:3c:51:26:ae:c1:e0:f4:da:4f:30:78:8d:35: 7f:00:a5:47:4f:e8:7f:fb:c8:5b:71:68:55:aa:4f:79:28:78: e4:1b:aa:40:0e:b3:2b:ab:29:0b:1e:be:64:98:ce:f5:69:2b: 5f:25:43:90:34:ea:11:09:e1:43:54:71:0f:bc:01:93:01:2a: ae:cc:d4:37:b0:2b:45:b4:00:91:76:7e:9a:e1:e0:74:ef:78: 2e:1f:6b:ef:78:e3:82:57:ce:bb:8c:eb:eb:96:8d:90:26:fd: b8:f2:29:71:de:31:41:36:15:de:9f:45:29:35:3c:9e:ae:60: 7d:b6:2b:f9:b5:b9:ef:af:7c:67:bb:77:1b:27:05:a7:ac:36: 86:43:6d:8d:33:81:f7:cb:59:02:eb:42:32:6b:67:4c:b0:ad: 76:b3:b6:10:4f:68:2f:ce:f8:8c:8b:93:19:45:86:42:3c:09: c4:5e:58:ba:27:a4:df:88:41:06:1e:1d:06:88:c7:b4:6a:07: 04:64:28:4f:e6:bb:12:9c:1a:0c:dd:cb:2f:56:13:51:8d:66: df:e6:77:10:10:5e:a7:52:b4:ff:7b:f4:b6:1e:2f:bc:54:24: 39:98:fe:97:46:ff:88:51:2c:97:5a:57:f6:73:d3:65:7e:e3: be:69:fe:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFEODExMTAvBgNVBAUTKDJERThGMjE2RENEMkJFQzZEMzhGRUJGMDFFMDZEOEE5 OTAyNzBFQkYwHhcNMjUwNTMxMDYyMDE0WhcNMjUwNjA3MDYyMDE0WjAYMRYwFAYD VQQDEw02ODNhOWY5ZS1jOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R46M/s7ucPBg4aAt6XPVekfWgDwDgq1VdpUl1a9F21EM+g3GEpvL4bnpjGx RI+5xFN+BVR7UlNexBvN9frFzwWtTgZ/U4y/z08nFpPfAlrSCODUOkW6hXVgq4pq f2XAgEVIR6kC7cg4uv4VMLDn8uR4Adz2dnbo6KLiPIVZ7Dc0YozilmIOiEyGNiHl t6xAGbHlSo38I0Ls7KAgVSbvZlzYPcKRjHdZ1BF1+t6RA9GKb7/m/+dHZf0/61+8 VEpR98+SSVixkiU3oMjoT5HLaZArYGpjsXmWh+kapIbrYQtAYZK/dZOKDWr8Xfs1 uM05RJ+rlj6eKKktuOSSzHwf0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiwp8tQ /cKBxjOK9EvaQkYeLKwZMB8GA1UdIwQYMBaAFC3o8hbc0r7G04/r8B4G2KmQJw6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQ4MS84N0QzNTIwQTg5 RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3ZzYlRqLXZ3SGdiWXFaQW5E cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQ4MS84N0QzNTIwQTg5RTExMUVGODkyMTQwNERDNEY5QUUwMi9MZWp5RnR6U3Zz YlRqLXZ3SGdiWXFaQW5EcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqAzs7lzxRJq7B4PTaTzB4jTV/AKVHT+h/+8hbcWhVqk95KHjkG6pA DrMrqykLHr5kmM71aStfJUOQNOoRCeFDVHEPvAGTASquzNQ3sCtFtACRdn6a4eB0 73guH2vveOOCV867jOvrlo2QJv248ilx3jFBNhXen0UpNTyermB9tiv5tbnvr3xn u3cbJwWnrDaGQ22NM4H3y1kC60Iya2dMsK12s7YQT2gvzviMi5MZRYZCPAnEXli6 J6TfiEEGHh0GiMe0agcEZChP5rsSnBoM3csvVhNRjWbf5ncQEF6nUrT/e/S2Hi+8 VCQ5mP6XRv+IUSyXWlf2c9NlfuO+af54 -----END CERTIFICATE-----Generated at Sat May 31 17:46:25 2025 by rpki-client