$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: NSVfiDT9VjCIOxtvkehx2aj+iUFDhjsXq1jfY/DZbS0= Subject key identifier: DD:B2:C9:8F:92:51:B9:37:62:C4:00:99:DE:1D:E6:AE:84:C0:D8:30 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 067B Signing time: Fri 30 May 2025 22:42:21 +0000 Manifest this update: Fri 30 May 2025 22:42:20 +0000 Manifest next update: Fri 06 Jun 2025 22:42:20 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: J+o2eZYLgwO4DM8D2/yeWdpp9z0W8RL32mU0qgX+yZQ=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: iHNv1D4CuKh0MplUtgE1k/nBfju2p94sD6YSJueQYIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: May 30 22:42:20 2025 GMT Not After : Jun 6 22:42:20 2025 GMT Subject: CN=683a344d-1f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:9d:b8:47:a3:50:46:59:4a:32:0a:85:ed: 93:2f:51:a7:a3:b3:37:21:a6:ca:c0:f8:5c:79:81: 19:a7:63:75:19:04:4c:01:e5:28:66:fd:11:60:ff: 3f:28:75:aa:79:6d:db:32:f7:0b:3d:c9:76:54:fb: 40:c4:e3:47:72:05:44:a2:0e:e7:c9:b3:86:63:20: 30:43:a6:ae:be:7b:c9:45:34:e5:d9:d3:10:a0:bd: 82:49:d6:88:db:61:3b:27:bb:bb:ba:13:19:36:f8: 58:67:4b:14:84:e4:89:3e:f9:3d:05:5f:18:86:80: 83:88:da:16:93:da:e7:4f:d8:17:85:cf:fe:b7:fa: dc:1f:18:7d:5d:95:2f:60:7d:44:a9:d3:d3:0f:35: b4:b2:7d:ea:03:ba:9e:71:60:22:65:20:ee:91:ad: 54:08:0c:1f:8d:62:28:3a:0e:3c:42:02:75:7f:4c: 37:1c:43:d8:27:8b:12:9b:35:95:60:6b:30:41:92: ce:4c:1e:a9:56:4b:01:39:79:4f:6c:21:89:ca:8c: a5:65:91:32:2f:43:36:1a:3c:5b:2b:e3:f7:80:6c: e5:e8:48:f1:46:0f:48:67:55:45:24:f0:4d:0a:1a: d3:ce:d2:26:0e:e7:be:37:ec:60:aa:e2:70:42:16: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:C9:8F:92:51:B9:37:62:C4:00:99:DE:1D:E6:AE:84:C0:D8:30 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3e:54:c7:3f:eb:fd:68:91:cb:95:c8:0e:16:84:eb:1e:fa: 02:4b:1c:6a:64:24:07:d2:5e:bc:be:bd:da:e1:ca:5d:21:08: 93:5d:99:52:ba:71:e2:10:d9:4a:d8:34:6d:18:3c:3f:e1:61: 71:a6:8e:9e:5d:4a:e0:28:13:62:bd:d7:56:b0:ea:47:54:ab: d2:6f:3a:a4:66:0c:ec:01:bd:98:e6:36:c9:a5:64:88:dd:da: 8d:56:5d:7f:72:23:af:6b:b0:ac:ab:0d:26:c8:0e:8e:e6:0d: 62:c6:a7:96:ee:4f:92:8c:52:8b:3b:37:22:34:9a:bb:17:0c: a3:1f:83:90:8b:68:5c:e5:be:a9:ef:e9:c6:82:55:5c:c9:17: 46:ce:6e:12:b2:90:9a:e3:c9:0f:e9:50:3b:de:83:08:d8:fa: 81:aa:87:49:f8:c8:7d:7b:c6:6a:35:43:fa:0d:4c:4c:ef:e5: 97:6c:ad:96:b3:21:d4:85:38:9e:5e:79:70:c6:dc:ef:b3:78: e8:fe:65:96:08:56:c7:a2:06:ba:47:3b:9d:e9:82:dc:9b:9a: dc:35:6c:d9:b1:34:68:0e:f0:e0:6d:b1:26:7e:79:e9:06:22: 9a:d9:09:a4:2a:3b:a4:24:26:09:06:d3:6f:d3:4b:00:15:85: 25:45:0c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUwNTMwMjI0MjIwWhcNMjUwNjA2MjI0MjIwWjAYMRYwFAYD VQQDEw02ODNhMzQ0ZC0xZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIKduEejUEZZSjIKhe2TL1Gno7M3IabKwPhceYEZp2N1GQRMAeUoZv0RYP8/ KHWqeW3bMvcLPcl2VPtAxONHcgVEog7nybOGYyAwQ6auvnvJRTTl2dMQoL2CSdaI 22E7J7u7uhMZNvhYZ0sUhOSJPvk9BV8YhoCDiNoWk9rnT9gXhc/+t/rcHxh9XZUv YH1EqdPTDzW0sn3qA7qecWAiZSDuka1UCAwfjWIoOg48QgJ1f0w3HEPYJ4sSmzWV YGswQZLOTB6pVksBOXlPbCGJyoylZZEyL0M2GjxbK+P3gGzl6EjxRg9IZ1VFJPBN ChrTztImDue+N+xgquJwQha9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2yyY+S Ubk3YsQAmd4d5q6EwNgwMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWPlTHP+v9aJHLlcgOFoTrHvoCSxxqZCQH0l68vr3a4cpdIQiTXZlS unHiENlK2DRtGDw/4WFxpo6eXUrgKBNivddWsOpHVKvSbzqkZgzsAb2Y5jbJpWSI 3dqNVl1/ciOva7Csqw0myA6O5g1ixqeW7k+SjFKLOzciNJq7FwyjH4OQi2hc5b6p 7+nGglVcyRdGzm4SspCa48kP6VA73oMI2PqBqodJ+Mh9e8ZqNUP6DUxM7+WXbK2W syHUhTieXnlwxtzvs3jo/mWWCFbHoga6Rzud6YLcm5rcNWzZsTRoDvDgbbEmfnnp BiKa2QmkKjukJCYJBtNv00sAFYUlRQxU -----END CERTIFICATE-----Generated at Sat May 31 16:56:08 2025 by rpki-client