$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft File: wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json) Hash identifier: kfm5A/fB72o5BQ/3Pbci0bd5DNu5yVcFwnx0Z+VEYNY= Subject key identifier: 31:02:72:F2:8D:7C:73:67:97:B7:D5:27:8C:4C:2C:E6:20:38:71:CC Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 Certificate issuer: /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft Manifest number: 11 Signing time: Tue 01 Jul 2025 08:51:35 +0000 Manifest this update: Tue 01 Jul 2025 08:51:35 +0000 Manifest next update: Tue 08 Jul 2025 08:51:35 +0000 Files and hashes: 1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: fSTeU4UfEHgv9223le7dfC24Vv61PuVwkrXEoe1SAHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Validity Not Before: Jul 1 08:51:35 2025 GMT Not After : Jul 8 08:51:35 2025 GMT Subject: CN=6863a197-7df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:b8:2a:6b:26:c9:3a:3a:ad:88:97:7b:58: dc:85:40:a8:1f:11:b4:32:64:6f:9f:02:62:c5:3f: 00:79:5f:f8:25:2d:aa:ee:97:27:43:2c:98:c9:69: bc:40:df:4a:6d:78:17:4c:a8:05:77:49:ab:86:3a: 0a:aa:bb:9c:66:8b:83:bc:02:59:2e:e9:d0:2e:b5: 2d:35:d6:b4:a8:b0:f4:f3:95:3e:f0:db:08:38:91: ce:86:d8:bf:bd:e4:6e:20:1b:d3:3d:9d:40:63:d9: 6c:11:a9:d5:a3:b5:a7:53:09:a9:4c:4d:71:c4:cf: f9:bf:38:1f:f6:73:ee:cc:d7:02:8b:34:39:2a:13: 75:05:ff:6a:5c:2b:9d:b4:4f:59:ed:ff:1d:eb:85: 89:0f:dc:e4:4f:f8:5f:c8:d0:38:b1:23:a0:1f:86: cd:50:c9:f6:ee:62:49:c5:3a:c6:55:84:50:b2:70: 54:c6:74:98:66:97:86:63:61:09:83:76:20:1c:20: eb:63:84:b1:2d:c3:70:a7:06:0d:bc:00:c1:ac:ef: 09:7b:88:a0:4c:1d:00:5b:5c:81:76:a5:ae:72:90: a8:fa:59:e7:60:56:6d:d5:f9:7a:0e:f4:ea:15:ba: 77:dd:09:58:6a:65:db:85:b6:c3:88:75:94:9e:d5: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:72:F2:8D:7C:73:67:97:B7:D5:27:8C:4C:2C:E6:20:38:71:CC X509v3 Authority Key Identifier: keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5e:52:80:7c:d3:81:b8:c5:b7:3a:4a:25:f0:35:ff:ba:9c: a7:52:4a:f6:80:82:75:ba:ec:01:98:8b:45:27:de:34:bc:d5: 7a:49:21:df:21:e2:84:5a:8f:c3:18:61:d8:cf:5b:e8:9b:b9: c9:14:8d:83:f8:4d:74:0f:fc:f6:52:99:85:f6:c4:22:11:ef: 8d:14:7e:4b:da:94:d7:60:b6:d1:5e:f0:c2:02:46:dd:08:d3: e9:45:e4:41:88:d1:6f:23:d2:da:bc:6e:a9:ad:34:ef:89:83: a0:1d:ec:be:0e:ce:43:62:07:14:8a:88:6c:56:dc:b5:e6:e0: 29:49:72:4d:2f:3d:5a:b6:fb:ae:22:ac:e6:85:c9:09:51:37: ca:17:45:af:e2:9e:82:8d:4e:42:33:89:b1:fe:dd:48:b4:a0: 65:71:e3:a5:50:61:14:95:cc:5a:5a:1a:e9:af:a1:53:e8:da: 1d:81:dd:a3:d5:4c:3f:d0:66:6b:74:a5:8b:45:65:38:bb:e4: a7:a1:89:1e:68:15:ce:8c:8b:84:30:10:4e:e6:66:51:61:c1: 7b:ca:25:f9:27:d6:3d:97:e1:5c:e1:b9:58:8b:51:4b:e1:d7: ef:ca:33:f3:34:f8:86:7b:73:58:43:36:c0:09:f4:db:b7:18: 85:b2:3d:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoQzBCNDY2RDk5OUI4MUJGOTVENkY5NUQ2QzEyQUIzQzlD NzVCNDJEMTAeFw0yNTA3MDEwODUxMzVaFw0yNTA3MDgwODUxMzVaMBgxFjAUBgNV BAMTDTY4NjNhMTk3LTdkZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCjrgqaybJOjqtiJd7WNyFQKgfEbQyZG+fAmLFPwB5X/glLarulydDLJjJabxA 30pteBdMqAV3SauGOgqqu5xmi4O8Alku6dAutS011rSosPTzlT7w2wg4kc6G2L+9 5G4gG9M9nUBj2WwRqdWjtadTCalMTXHEz/m/OB/2c+7M1wKLNDkqE3UF/2pcK520 T1nt/x3rhYkP3ORP+F/I0DixI6Afhs1QyfbuYknFOsZVhFCycFTGdJhml4ZjYQmD diAcIOtjhLEtw3CnBg28AMGs7wl7iKBMHQBbXIF2pa5ykKj6WedgVm3V+XoO9OoV unfdCVhqZduFtsOIdZSe1STZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMQJy8o18 c2eXt9UnjEws5iA4ccwwHwYDVR0jBBgwFoAUwLRm2Zm4G/ldb5XWwSqzycdbQtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0RFMzYzNDVDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19sZGI1WFd3U3F6eWNkYlF0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0xSbTJabTRHX2xkYjVYV3dTcXp5Y2RiUXRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0RFMzYzNDVDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19s ZGI1WFd3U3F6eWNkYlF0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9eUoB804G4xbc6SiXwNf+6nKdSSvaAgnW67AGYi0Un3jS81XpJId8h 4oRaj8MYYdjPW+ibuckUjYP4TXQP/PZSmYX2xCIR740UfkvalNdgttFe8MICRt0I 0+lF5EGI0W8j0tq8bqmtNO+Jg6Ad7L4OzkNiBxSKiGxW3LXm4ClJck0vPVq2+64i rOaFyQlRN8oXRa/inoKNTkIzibH+3Ui0oGVx46VQYRSVzFpaGumvoVPo2h2B3aPV TD/QZmt0pYtFZTi75KehiR5oFc6Mi4QwEE7mZlFhwXvKJfkn1j2X4VzhuViLUUvh 1+/KM/M0+IZ7c1hDNsAJ9Nu3GIWyPcY= -----END CERTIFICATE-----Generated at Tue Jul 1 22:13:24 2025 by rpki-client