$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft File: lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json) Hash identifier: Jbqmzr1bU3HXJmu+EZfK/UohcBB0Tm9q/3/Attuy67w= Subject key identifier: 83:A2:C5:5B:0F:72:25:33:D3:D2:E0:18:26:E7:07:D4:F8:66:50:72 Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 Certificate issuer: /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft Manifest number: 20 Signing time: Sat 07 Jun 2025 07:22:52 +0000 Manifest this update: Sat 07 Jun 2025 07:22:52 +0000 Manifest next update: Sat 14 Jun 2025 07:22:52 +0000 Files and hashes: 1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: XASBpovG206g/OrKJ1pK9pYlR/Q/o+VZhlb6MgNz5c4=) 2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Validity Not Before: Jun 7 07:22:52 2025 GMT Not After : Jun 14 07:22:52 2025 GMT Subject: CN=6843e8cc-4aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:0e:aa:37:77:ac:c5:d3:7b:9c:40:48:bb: 31:97:d6:7e:8c:e7:2c:ac:49:4c:fc:45:67:80:e6: 16:99:6f:fc:c2:c8:ad:f3:db:5e:5e:9d:b5:91:86: 36:b5:32:21:56:70:a6:bc:75:6e:8b:4a:b9:53:ae: 94:f0:42:15:b4:f1:c8:c0:2e:1f:a9:18:95:13:00: b9:a8:99:6a:ea:d7:ca:e0:58:b2:8d:9a:60:df:a7: f3:8d:25:9e:f0:b3:5c:55:88:2f:97:91:0a:34:44: 64:22:27:17:e5:40:e7:f1:f9:06:bd:f3:e2:0c:b4: aa:d8:2c:c3:47:c2:7a:05:09:22:78:b0:06:4b:af: ea:1c:1a:ce:26:13:f5:77:86:68:4e:33:4e:a2:2d: d8:11:b0:d7:7d:ec:31:28:b2:fe:e9:49:9c:ea:53: 1c:4f:a7:c0:f3:f1:43:23:23:8a:2d:ff:98:40:52: f0:47:8e:f9:80:c4:5c:5a:e9:d7:1d:03:7d:75:45: 5b:ce:c3:51:22:69:94:3b:a3:7d:85:79:46:4c:62: 92:dd:90:51:f3:f4:47:15:42:3b:92:ea:9b:24:ef: c0:d3:2f:2e:71:0b:36:59:3f:09:a7:a2:61:66:90: b6:b7:97:fd:f5:77:b7:fb:f0:54:7d:3c:fe:d8:d6: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A2:C5:5B:0F:72:25:33:D3:D2:E0:18:26:E7:07:D4:F8:66:50:72 X509v3 Authority Key Identifier: keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:25:4f:99:6c:7a:23:8b:03:74:74:d6:32:54:d6:92:16:f0: 03:72:74:38:8d:d6:4d:bc:fb:08:f2:4b:a0:8f:d3:87:26:46: ea:9b:48:94:21:96:42:3d:eb:42:46:5a:8c:48:d3:5e:27:64: b5:63:73:b8:5a:90:44:44:35:39:c4:fc:9e:6f:99:a2:0c:37: 4c:a2:09:84:e2:12:ae:09:76:78:1f:23:d0:ce:b3:6e:3f:5c: 00:15:2e:14:4b:70:91:ea:73:4d:71:8d:ce:8c:c6:5a:44:32: b3:c5:e3:ed:0b:e3:e9:28:c7:99:6d:1f:37:0f:a9:b5:03:6c: c7:59:0d:3c:f3:4b:12:25:40:d4:a9:b5:68:5c:7f:ef:55:cc: e4:9c:0a:8a:e0:b9:8f:f6:af:a8:e2:b3:88:33:52:76:1f:82: 29:9c:7e:c3:25:34:3a:22:e5:90:76:d0:86:ba:cc:e0:f5:54: 9e:89:32:5e:75:69:6f:f6:49:86:8a:45:15:d5:a6:46:df:0e: 54:27:17:45:b8:9d:50:6c:9d:c1:b8:42:44:0b:41:cc:4f:14: 6f:79:30:84:58:35:ed:7d:78:cd:e9:26:bc:f2:f0:6e:42:a0: c2:2b:a2:e4:dd:7e:a6:3c:99:50:dc:71:06:4a:b0:49:c1:0e: 6a:2d:1f:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTUzMjExMC8GA1UEBRMoOTQ1MDhCMkFBQjAzMkFBMzNGOUEwMDI4MjU4MjNGOUFC ODVDNzAxMjAeFw0yNTA2MDcwNzIyNTJaFw0yNTA2MTQwNzIyNTJaMBgxFjAUBgNV BAMTDTY4NDNlOGNjLTRhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTqA6qN3esxdN7nEBIuzGX1n6M5yysSUz8RWeA5haZb/zCyK3z215enbWRhja1 MiFWcKa8dW6LSrlTrpTwQhW08cjALh+pGJUTALmomWrq18rgWLKNmmDfp/ONJZ7w s1xViC+XkQo0RGQiJxflQOfx+Qa98+IMtKrYLMNHwnoFCSJ4sAZLr+ocGs4mE/V3 hmhOM06iLdgRsNd97DEosv7pSZzqUxxPp8Dz8UMjI4ot/5hAUvBHjvmAxFxa6dcd A311RVvOw1EiaZQ7o32FeUZMYpLdkFHz9EcVQjuS6psk78DTLy5xCzZZPwmnomFm kLa3l/31d7f78FR9PP7Y1uqxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg6LFWw9y JTPT0uAYJucH1PhmUHIwHwYDVR0jBBgwFoAUlFCLKqsDKqM/mgAoJYI/mrhccBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTMyL0YzN0JENjdBMTlD NTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FNX21nQW9KWUlfbXJoY2NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEZDTEtxc0RLcU1fbWdBb0pZSV9tcmhjY0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 NTMyL0YzN0JENjdBMTlDNTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FN X21nQW9KWUlfbXJoY2NCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwlT5lseiOLA3R01jJU1pIW8ANydDiN1k28+wjyS6CP04cmRuqbSJQh lkI960JGWoxI014nZLVjc7hakERENTnE/J5vmaIMN0yiCYTiEq4JdngfI9DOs24/ XAAVLhRLcJHqc01xjc6MxlpEMrPF4+0L4+kox5ltHzcPqbUDbMdZDTzzSxIlQNSp tWhcf+9VzOScCorguY/2r6jis4gzUnYfgimcfsMlNDoi5ZB20Ia6zOD1VJ6JMl51 aW/2SYaKRRXVpkbfDlQnF0W4nVBsncG4QkQLQcxPFG95MIRYNe19eM3pJrzy8G5C oMIrouTdfqY8mVDccQZKsEnBDmotH7E= -----END CERTIFICATE-----Generated at Sat Jun 7 12:51:01 2025 by rpki-client