$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: iCNF3FBZdZVFKyxA3h+Yua+TfI4ivXFHSqqntKX2l+g= Subject key identifier: 9C:02:A0:86:44:6C:5A:54:F6:7D:87:CF:26:03:9B:D3:99:61:08:19 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: CC Signing time: Thu 05 Jun 2025 05:06:11 +0000 Manifest this update: Thu 05 Jun 2025 05:06:11 +0000 Manifest next update: Thu 12 Jun 2025 05:06:11 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: M/LmRMrJT6P4d/LXPi7HHMzpyPcqeB62cW7WMP94ItI=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Jun 5 05:06:11 2025 GMT Not After : Jun 12 05:06:11 2025 GMT Subject: CN=684125c3-9851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:41:9f:13:99:ba:08:61:4e:f0:af:b4:ae: be:58:49:48:e1:6b:c7:a9:47:7d:f7:ed:91:c5:70: 9f:e1:b5:eb:9a:76:a8:c6:1a:59:9b:84:16:46:12: 79:01:fe:16:08:fb:6d:48:57:59:47:6e:35:8f:d2: 03:0a:b0:66:6c:7b:81:10:0e:6d:b1:e0:c1:9d:e9: 71:c6:87:66:cd:e6:4d:ad:a4:58:4e:94:88:2e:be: ad:4f:b3:76:d2:44:58:53:13:98:a3:92:c0:86:38: 3f:d9:90:72:58:c9:4a:37:6c:c0:e7:8e:76:52:37: e8:7c:2f:95:92:f0:44:ce:a1:ff:b3:62:78:3a:5a: e2:c4:48:ad:57:13:11:9d:95:12:d6:50:57:a8:af: 09:fd:8a:4c:7f:12:8f:79:3f:ae:5f:f1:74:62:62: 06:73:87:9c:45:3b:bf:3a:2d:46:01:0d:81:fa:45: 42:08:60:d7:57:a4:2b:91:64:20:27:95:7d:65:93: 7c:da:d5:d2:7a:12:0e:09:2d:43:e6:3b:20:b2:98: fa:f0:6c:3f:5b:9f:41:96:ca:ec:9f:64:b3:c5:aa: 11:f0:55:ac:08:bc:28:7a:e3:37:bf:e9:a3:c4:72: 17:a5:db:ff:61:be:f3:1d:f6:62:59:6d:6e:72:08: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:A0:86:44:6C:5A:54:F6:7D:87:CF:26:03:9B:D3:99:61:08:19 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:cb:46:32:49:73:6a:92:60:ba:3d:71:05:8e:b3:39:fa: 5e:bf:b8:90:9a:a7:73:1a:77:05:94:f0:77:d6:15:02:48:1d: 10:87:d9:2a:60:ca:2e:04:ff:37:75:f5:bb:12:0a:d7:99:ca: b8:b6:c0:de:9d:cb:d1:11:6f:e8:da:19:cf:51:e8:05:96:9a: fe:97:f3:f5:c4:fa:0c:73:f9:02:9a:10:26:03:04:07:60:34: fb:ba:21:9d:39:eb:7a:a2:ca:0e:85:91:a7:f8:1d:19:73:a9: f4:e1:31:9e:25:a4:8a:a5:53:4e:cd:6f:bc:f4:86:20:9f:3b: 3e:3e:04:2e:e0:93:cb:46:1a:71:e1:be:fa:2e:4f:7b:2d:0b: 17:5e:c2:aa:41:8f:be:e3:2b:3b:52:20:b1:22:96:2c:37:23: 2b:99:74:52:f8:cf:e3:dd:91:3a:2d:17:82:2d:09:2e:33:74: cc:f6:02:7d:53:4f:51:a6:55:8c:57:04:b2:28:38:ff:d2:b0: 35:6f:f3:8f:64:37:03:7e:2c:b4:c5:32:04:ae:6a:4f:f7:1d: 06:48:52:c9:4d:0d:e4:c0:8f:a9:c5:e0:e5:26:4c:6e:5b:51: 4d:4e:35:15:31:64:c7:b6:1b:fe:ae:3e:5a:d7:e8:00:d3:65: 9f:c6:59:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUwNjA1MDUwNjExWhcNMjUwNjEyMDUwNjExWjAYMRYwFAYD VQQDEw02ODQxMjVjMy05ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO5BnxOZughhTvCvtK6+WElI4WvHqUd99+2RxXCf4bXrmnaoxhpZm4QWRhJ5 Af4WCPttSFdZR241j9IDCrBmbHuBEA5tseDBnelxxodmzeZNraRYTpSILr6tT7N2 0kRYUxOYo5LAhjg/2ZByWMlKN2zA5452UjfofC+VkvBEzqH/s2J4OlrixEitVxMR nZUS1lBXqK8J/YpMfxKPeT+uX/F0YmIGc4ecRTu/Oi1GAQ2B+kVCCGDXV6QrkWQg J5V9ZZN82tXSehIOCS1D5jsgspj68Gw/W59Blsrsn2SzxaoR8FWsCLwoeuM3v+mj xHIXpdv/Yb7zHfZiWW1ucgjUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwCoIZE bFpU9n2HzyYDm9OZYQgZMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1LMtGMklzapJguj1xBY6zOfpev7iQmqdzGncFlPB31hUCSB0Qh9kq YMouBP83dfW7EgrXmcq4tsDencvREW/o2hnPUegFlpr+l/P1xPoMc/kCmhAmAwQH YDT7uiGdOet6osoOhZGn+B0Zc6n04TGeJaSKpVNOzW+89IYgnzs+PgQu4JPLRhpx 4b76Lk97LQsXXsKqQY++4ys7UiCxIpYsNyMrmXRS+M/j3ZE6LReCLQkuM3TM9gJ9 U09RplWMVwSyKDj/0rA1b/OPZDcDfiy0xTIErmpP9x0GSFLJTQ3kwI+pxeDlJkxu W1FNTjUVMWTHthv+rj5a1+gA02WfxlnD -----END CERTIFICATE-----Generated at Sat Jun 7 06:45:47 2025 by rpki-client