$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: N82yTfW6Pi8ba0FDlSK0gp9uQN0+FOtpXFsFbtbBBiA= Subject key identifier: 6B:6E:3E:A6:41:81:D6:3E:C5:AE:05:CB:B1:38:AC:0E:FA:CD:E2:2B Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 08DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 08D5 Signing time: Fri 30 May 2025 20:40:33 +0000 Manifest this update: Fri 30 May 2025 20:40:32 +0000 Manifest next update: Fri 06 Jun 2025 20:40:32 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: Ry1cK6Sb0ZUKEgBHBt/Db1QJE/5TVAPJzmZVhaeNN3I=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: /AfMDdlUI8cvlyQqr8rioborDgBP3t18ByLX0Pcso10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: May 30 20:40:32 2025 GMT Not After : Jun 6 20:40:32 2025 GMT Subject: CN=683a17c0-e445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:07:c3:dd:68:a9:f4:59:2b:5a:10:1c:96: b9:2e:f1:bb:46:a6:24:ce:35:08:7a:52:ca:f7:fe: c5:d3:e6:ab:74:b7:5a:3c:f9:a1:56:b9:65:be:a5: c0:23:82:3b:2e:6f:d5:76:8a:6f:87:eb:8d:8d:db: c0:16:27:93:70:4e:a9:5f:b7:e0:97:19:a1:eb:34: dd:be:a0:bf:59:54:e1:9c:e2:ce:67:99:bf:e1:13: 8b:1e:cf:c7:56:28:71:a7:6f:ad:ac:5d:55:08:6d: f0:3b:d8:8b:ce:af:da:21:85:51:b5:3e:85:db:34: ae:02:e3:a7:36:28:9d:b5:a5:8e:8f:30:93:93:06: 54:a6:aa:04:34:48:e5:f2:b3:0d:1b:e8:b2:fe:d8: cc:bf:a3:ae:b8:3a:f4:3f:c3:62:e9:05:97:c2:b0: 9f:44:ac:1d:0c:2c:10:c6:9f:ee:cb:04:37:60:18: 4c:f3:85:04:97:2d:f0:fb:1e:1c:b8:38:e3:57:03: 4e:d8:1f:a6:67:52:90:66:54:53:08:1e:d4:cb:13: e9:48:2b:2e:5f:86:b4:44:cb:45:4a:2b:ae:a3:c5: 78:8e:5b:6a:31:d6:ad:c1:f8:f1:9e:26:0d:37:a5: 4d:ab:09:9d:e6:fd:e4:3d:f7:c9:dd:14:92:04:92: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:3E:A6:41:81:D6:3E:C5:AE:05:CB:B1:38:AC:0E:FA:CD:E2:2B X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:54:aa:45:5a:7c:a3:b1:0b:1f:b5:86:61:97:c6:15:b1:f2: 1a:b6:b4:93:6e:fa:46:65:46:04:99:f8:ea:ec:e3:1b:90:f5: e2:cc:58:c7:a9:7c:b0:49:63:fb:0c:2d:cb:5f:bb:f1:18:75: cc:3b:53:12:9a:3c:df:0b:f7:a5:7a:c5:bb:46:e6:7c:1b:fa: 6e:d4:95:df:6f:49:3b:e6:90:d6:16:1e:e2:fd:98:63:af:84: 91:3f:c4:ff:d7:27:a7:58:5a:f6:be:b2:03:55:02:6b:8a:20: 57:71:55:ab:1a:c9:f9:ad:90:5d:78:37:71:a6:1d:48:c2:ac: 2c:94:51:90:58:05:28:94:86:61:8b:77:75:1c:74:7c:03:4a: e5:8f:54:6e:1b:f0:ef:29:86:e7:95:cc:20:86:32:7e:41:b8: 72:e2:83:27:7b:36:5b:ce:c3:e9:ee:db:56:95:3a:7e:44:f5: c7:ff:36:12:16:d9:e3:d8:57:f6:e3:2f:64:75:e6:00:e2:97: 56:8b:2c:57:f7:8a:bb:eb:7e:cf:25:aa:df:14:c3:0e:5c:0e: 69:73:68:6d:da:e6:3f:fe:f3:db:5c:9f:3e:1b:b2:49:f8:45: 62:72:f2:45:58:31:70:01:c6:f8:6c:2c:88:3a:5f:8e:6c:55: ca:dc:f2:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwNTMwMjA0MDMyWhcNMjUwNjA2MjA0MDMyWjAYMRYwFAYD VQQDEw02ODNhMTdjMC1lNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RgHw91oqfRZK1oQHJa5LvG7RqYkzjUIelLK9/7F0+ardLdaPPmhVrllvqXA I4I7Lm/Vdopvh+uNjdvAFieTcE6pX7fglxmh6zTdvqC/WVThnOLOZ5m/4ROLHs/H Vihxp2+trF1VCG3wO9iLzq/aIYVRtT6F2zSuAuOnNiidtaWOjzCTkwZUpqoENEjl 8rMNG+iy/tjMv6OuuDr0P8Ni6QWXwrCfRKwdDCwQxp/uywQ3YBhM84UEly3w+x4c uDjjVwNO2B+mZ1KQZlRTCB7UyxPpSCsuX4a0RMtFSiuuo8V4jltqMdatwfjxniYN N6VNqwmd5v3kPffJ3RSSBJLgvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtuPqZB gdY+xa4Fy7E4rA76zeIrMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9VKpFWnyjsQsftYZhl8YVsfIatrSTbvpGZUYEmfjq7OMbkPXizFjH qXywSWP7DC3LX7vxGHXMO1MSmjzfC/elesW7RuZ8G/pu1JXfb0k75pDWFh7i/Zhj r4SRP8T/1yenWFr2vrIDVQJriiBXcVWrGsn5rZBdeDdxph1IwqwslFGQWAUolIZh i3d1HHR8A0rlj1RuG/DvKYbnlcwghjJ+Qbhy4oMnezZbzsPp7ttWlTp+RPXH/zYS Ftnj2Ff24y9kdeYA4pdWiyxX94q7637PJarfFMMOXA5pc2ht2uY//vPbXJ8+G7JJ +EVicvJFWDFwAcb4bCyIOl+ObFXK3PLp -----END CERTIFICATE-----Generated at Sat May 31 17:22:10 2025 by rpki-client