$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: mznpjed5WmOelrtmQ2Tw5XsYa3NRi5vL+qwiAa55hhs= Subject key identifier: 5D:88:F3:4A:CE:EF:8A:8E:BF:C9:76:0E:68:B6:EA:2A:41:22:D9:3B Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 3506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 34CB Signing time: Sat 31 May 2025 14:15:36 +0000 Manifest this update: Sat 31 May 2025 14:15:35 +0000 Manifest next update: Sat 07 Jun 2025 14:15:35 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: jDwmg146hfPPskFLIDzEtNm2WUlhp/SL8Dj/kwSDce4=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: May 31 14:15:35 2025 GMT Not After : Jun 7 14:15:35 2025 GMT Subject: CN=683b0f07-e32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:dd:00:89:e4:56:67:89:eb:e1:8d:f6:2e: f4:d7:0e:a5:62:bf:bb:29:c4:21:4f:52:87:b5:98: c7:91:e0:63:c1:69:df:7e:cd:c2:ad:d1:a3:b4:07: c6:ff:39:ff:10:3f:ab:f3:e8:de:05:93:14:d8:b6: ce:1a:b4:3e:da:51:94:02:aa:b3:02:57:73:a8:d7: 04:14:f2:64:22:32:f6:88:92:42:81:18:52:2c:01: 34:0d:fd:23:cc:9e:20:27:63:0a:2d:ae:da:02:d1: 02:04:df:2a:9a:f9:b8:d8:27:b7:b9:60:28:92:76: e5:61:6e:0f:e1:48:86:21:c4:e6:e0:17:b5:5d:c1: 7b:e1:9a:8b:cb:87:7c:b2:2e:db:12:77:33:56:a1: ed:93:a0:9f:97:62:b1:2c:4c:3e:42:82:2f:c0:a5: c7:be:f2:ce:f3:e5:7a:b1:2a:65:d3:1d:70:9b:13: 06:c0:aa:7c:d9:f1:3c:ad:85:ee:38:70:3e:16:cb: ce:dc:1e:03:4d:d6:a6:34:a6:2d:80:7a:c5:46:31: a0:05:46:74:47:76:7a:82:4b:d4:88:f8:d4:00:f5: 43:67:33:bc:99:d3:41:01:92:43:81:94:61:2f:05: 85:90:fa:1b:81:33:5d:a9:a9:b3:66:12:07:c8:3c: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:88:F3:4A:CE:EF:8A:8E:BF:C9:76:0E:68:B6:EA:2A:41:22:D9:3B X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:da:49:dd:9d:3f:54:fd:0e:94:53:3a:f4:5a:27:4b:a0:10: a5:5c:e2:78:e2:67:3b:b1:0a:5f:88:18:d9:0d:2e:a4:31:2e: 48:93:af:e2:e1:d4:fb:8f:3c:b7:c7:4e:f4:c1:14:3a:7a:b1: eb:c6:d7:50:d3:53:45:b0:00:8a:47:f3:b2:d9:62:9f:60:86: f8:89:f6:60:bf:cf:ed:af:50:7e:ee:19:11:36:8f:89:dd:5e: 39:9a:11:dd:e9:32:3a:42:cc:63:ed:3d:66:79:8b:11:5c:72: 7b:3e:4a:6d:cb:f1:9d:31:be:11:e5:13:5e:7f:8a:3b:59:cb: 2a:b6:7d:3f:1c:25:26:ff:b6:77:56:fb:0c:f2:33:9e:dd:37: 5c:6d:70:d6:72:39:72:e3:db:22:65:7b:27:d8:93:4b:19:e0: 55:b2:a6:71:d7:9a:bf:43:85:91:8c:53:70:a2:b6:f1:86:46: 88:47:f0:de:2a:74:3d:21:07:bb:47:b2:4c:23:13:04:fa:0f: 36:a7:6a:d0:45:1d:5f:87:7d:5b:ca:6e:84:f5:2d:f0:df:17: 89:45:87:a1:93:16:5f:6a:25:98:e7:33:e3:86:14:32:69:0f: a5:94:87:f3:c1:4a:5b:98:36:b1:d5:13:20:9c:a3:31:23:9e: 96:62:90:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUwNTMxMTQxNTM1WhcNMjUwNjA3MTQxNTM1WjAYMRYwFAYD VQQDEw02ODNiMGYwNy1lMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpXdAInkVmeJ6+GN9i701w6lYr+7KcQhT1KHtZjHkeBjwWnffs3CrdGjtAfG /zn/ED+r8+jeBZMU2LbOGrQ+2lGUAqqzAldzqNcEFPJkIjL2iJJCgRhSLAE0Df0j zJ4gJ2MKLa7aAtECBN8qmvm42Ce3uWAoknblYW4P4UiGIcTm4Be1XcF74ZqLy4d8 si7bEnczVqHtk6Cfl2KxLEw+QoIvwKXHvvLO8+V6sSpl0x1wmxMGwKp82fE8rYXu OHA+FsvO3B4DTdamNKYtgHrFRjGgBUZ0R3Z6gkvUiPjUAPVDZzO8mdNBAZJDgZRh LwWFkPobgTNdqamzZhIHyDwifQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2I80rO 74qOv8l2Dmi26ipBItk7MB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt2kndnT9U/Q6UUzr0WidLoBClXOJ44mc7sQpfiBjZDS6kMS5Ik6/i 4dT7jzy3x070wRQ6erHrxtdQ01NFsACKR/Oy2WKfYIb4ifZgv8/tr1B+7hkRNo+J 3V45mhHd6TI6Qsxj7T1meYsRXHJ7Pkpty/GdMb4R5RNef4o7Wcsqtn0/HCUm/7Z3 VvsM8jOe3TdcbXDWcjly49siZXsn2JNLGeBVsqZx15q/Q4WRjFNworbxhkaIR/De KnQ9IQe7R7JMIxME+g82p2rQRR1fh31bym6E9S3w3xeJRYehkxZfaiWY5zPjhhQy aQ+llIfzwUpbmDax1RMgnKMxI56WYpCe -----END CERTIFICATE-----Generated at Sat May 31 16:50:45 2025 by rpki-client