$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: +/6n49sbVlkH2l86KEDIZPvHjPvpUHVPKinFp/fMNoE= Subject key identifier: 72:A5:1F:6C:20:D8:1D:F1:87:43:58:5C:6E:07:24:76:51:54:93:4A Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 014B Signing time: Thu 05 Jun 2025 03:33:00 +0000 Manifest this update: Thu 05 Jun 2025 03:33:00 +0000 Manifest next update: Thu 12 Jun 2025 03:32:59 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: vBeoa3DBW4N6kOZOKwI+ygOyHCWpeU+eG9K9uROxs3U=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Jun 5 03:33:00 2025 GMT Not After : Jun 12 03:32:59 2025 GMT Subject: CN=68410fec-2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:60:c4:5d:16:c7:1d:30:9a:55:5f:49:25: c1:49:d3:a7:07:04:49:10:d3:a0:3d:e6:f2:eb:d8: 33:4f:65:7a:7d:07:47:af:0f:69:58:61:67:7b:f7: ed:bc:d6:09:66:bd:5a:bf:2d:72:e0:0f:2d:ef:94: dd:8e:f1:c4:a4:b5:be:f9:ba:61:c7:81:05:48:4b: 71:87:ba:a0:45:9b:2f:15:b6:39:80:71:57:c2:3a: 7b:65:3d:fc:44:b6:0d:c6:38:cf:c8:8f:44:8e:cb: 71:10:ec:f6:a4:a4:7e:b7:75:72:80:40:bf:7c:33: 29:26:64:08:3b:92:70:10:0e:f0:b6:a6:a6:a6:ad: 3c:bf:9c:03:a3:e7:70:a5:26:c6:eb:88:13:de:ae: 39:1a:af:04:9f:97:a5:e7:7e:8e:e0:e7:38:31:4a: 45:56:88:3b:10:56:46:95:bb:0a:2f:b9:0b:64:3a: ae:e4:f0:3e:72:f4:ae:9f:6b:b9:bf:c8:61:48:1e: d7:f2:66:55:da:06:20:4d:72:b2:d8:03:8b:19:c4: b1:28:a0:5f:80:cc:e0:f5:3d:6f:02:e8:a3:aa:ea: ce:d5:18:1a:00:fa:a5:68:ce:f8:33:6f:76:de:76: 23:bb:38:f9:29:d5:de:44:c4:9d:df:bc:98:43:da: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:1F:6C:20:D8:1D:F1:87:43:58:5C:6E:07:24:76:51:54:93:4A X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fe:73:6d:4f:f4:a4:7a:2f:9d:87:e0:22:f2:4d:a8:1e:ea: da:b6:55:f7:3a:92:75:55:15:2f:7e:bd:76:86:a5:ff:a3:dc: 8a:c8:73:d5:6b:fa:28:0b:b2:f7:90:14:9e:f9:a1:5f:17:be: da:28:79:ed:22:45:d5:11:87:f9:31:14:f6:9c:61:e9:c8:87: 72:8a:53:a8:23:e8:0f:8d:38:f6:00:57:42:1d:7e:d4:b2:1d: 8a:32:a7:b2:29:30:39:f6:fe:9c:ec:a0:e6:c9:0f:00:de:a6: 7c:9a:d7:77:e2:ac:b7:41:fc:c6:4a:ba:3c:87:6f:c9:45:ce: f1:63:e7:e4:d5:48:cf:fe:d0:3e:b3:20:00:3b:00:e6:a8:66: 92:df:3e:6a:b2:44:9b:37:1c:48:80:26:d6:61:6b:85:b7:6d: 40:1e:a6:15:c4:0d:be:04:3f:50:ac:f3:28:4a:76:7e:56:95: 11:3b:d6:9d:49:7a:77:34:ba:26:b9:67:6d:49:a3:3d:bf:bb: ef:e0:2b:af:15:a1:1a:e2:d7:2a:c4:88:4b:f3:b4:be:e7:12: 2a:a8:f5:3f:3a:da:22:bd:62:9d:7e:f9:e9:cd:cd:ab:ef:c5: 99:c1:62:2a:b2:67:30:0d:74:0c:80:0b:74:71:6f:29:99:22: 51:b5:03:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNjA1MDMzMzAwWhcNMjUwNjEyMDMzMjU5WjAYMRYwFAYD VQQDEw02ODQxMGZlYy0yOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39pgxF0Wxx0wmlVfSSXBSdOnBwRJENOgPeby69gzT2V6fQdHrw9pWGFne/ft vNYJZr1avy1y4A8t75TdjvHEpLW++bphx4EFSEtxh7qgRZsvFbY5gHFXwjp7ZT38 RLYNxjjPyI9EjstxEOz2pKR+t3VygEC/fDMpJmQIO5JwEA7wtqampq08v5wDo+dw pSbG64gT3q45Gq8En5el536O4Oc4MUpFVog7EFZGlbsKL7kLZDqu5PA+cvSun2u5 v8hhSB7X8mZV2gYgTXKy2AOLGcSxKKBfgMzg9T1vAuijqurO1RgaAPqlaM74M292 3nYjuzj5KdXeRMSd37yYQ9r2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKlH2wg 2B3xh0NYXG4HJHZRVJNKMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi/nNtT/Skei+dh+Ai8k2oHuratlX3OpJ1VRUvfr12hqX/o9yKyHPV a/ooC7L3kBSe+aFfF77aKHntIkXVEYf5MRT2nGHpyIdyilOoI+gPjTj2AFdCHX7U sh2KMqeyKTA59v6c7KDmyQ8A3qZ8mtd34qy3QfzGSro8h2/JRc7xY+fk1UjP/tA+ syAAOwDmqGaS3z5qskSbNxxIgCbWYWuFt21AHqYVxA2+BD9QrPMoSnZ+VpURO9ad SXp3NLomuWdtSaM9v7vv4CuvFaEa4tcqxIhL87S+5xIqqPU/OtoivWKdfvnpzc2r 78WZwWIqsmcwDXQMgAt0cW8pmSJRtQOz -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:28 2025 by rpki-client