$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: UaycJfWltIoKHILZeMhQoJH3oWN5xTazbu/hLbhV0PQ= Subject key identifier: D3:59:8B:DE:05:4E:02:2E:93:D9:AA:62:2C:4D:34:6C:2B:12:95:37 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0319 Signing time: Sat 07 Jun 2025 01:13:48 +0000 Manifest this update: Sat 07 Jun 2025 01:13:48 +0000 Manifest next update: Sat 14 Jun 2025 01:13:48 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: NOD2UMMmgbiNi7uFHyunb47bKx1sH7mdwTQGlEL5U90=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: MW8b0lzbn7akooUbZ8tV+oRNYmXktBHymwJPvbPr0T4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: pmgvt39f/aMkunvyVMO6rfLmljyqEtakdw2Wz0MGd3o=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: Vk4lMkqK5ng6B+iZp/Sl6mPlRDRoZ3QpBy8plRdehn4=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: RV0bq4XHGKUuOS8T3WS7G4aUlSWl2to/4furDRifxYQ=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: 6/3DevyJRKnv1xx6SHWcr3LVBgvTH0u4H55ECTrHATk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Jun 7 01:13:48 2025 GMT Not After : Jun 14 01:13:48 2025 GMT Subject: CN=6843924c-6ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:ea:19:fe:db:16:15:21:2c:fb:22:56:b4: 8f:f3:07:fa:7d:7a:c7:8f:d7:c5:79:0a:55:ea:fb: 56:7d:7b:20:90:0b:de:53:4b:83:54:8a:f3:2f:d1: f2:75:d3:3c:4a:4f:00:72:0e:45:71:6e:d6:14:7f: 24:26:f0:58:91:f0:2a:1c:dc:a0:30:77:34:23:72: 6c:90:82:7f:34:ff:dd:b6:d1:ad:48:c0:fd:6e:5b: 7c:f2:b2:a9:6f:52:24:0d:a9:5e:de:5f:65:af:e2: 75:5c:5d:c4:4d:3a:c2:2a:7a:9a:25:e4:70:84:ff: 18:88:69:95:96:6a:09:cf:4e:2a:41:96:c5:81:37: 53:d4:4d:9a:91:21:53:ca:c3:78:03:cd:4b:59:d9: da:85:ee:42:cc:8d:de:63:6f:5a:a0:d9:ee:53:ca: d4:0b:07:93:98:f0:24:a7:f1:f7:07:99:e4:b1:d1: e8:5b:b3:33:ac:59:f0:7c:a2:08:12:17:cf:17:d9: 68:85:f1:6c:14:73:b2:87:75:eb:97:9e:dc:e3:ef: 90:7c:39:95:df:2c:48:fc:93:03:8d:c7:31:48:3c: 0d:44:50:b8:b7:a8:b8:6f:05:bd:80:1e:59:bd:34: 1a:9e:a5:c3:c6:e7:27:2c:c8:b8:e6:21:ac:43:83: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:59:8B:DE:05:4E:02:2E:93:D9:AA:62:2C:4D:34:6C:2B:12:95:37 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0f:bb:cb:5d:39:04:a4:a1:da:a4:fc:15:5e:c9:84:e1:b3: 69:fb:5f:e9:ee:82:13:9a:e7:07:8d:3f:87:6b:49:8c:e0:df: 8f:a3:2c:a5:6b:9e:de:0a:d6:7a:08:01:51:2c:a5:9f:a7:cd: b6:82:10:0f:1e:8a:66:b9:e4:1d:a2:ff:72:67:e9:3f:45:e6: 3a:97:ca:ed:58:29:69:aa:b6:58:38:ab:95:18:c3:98:28:0d: be:b7:33:7f:26:ed:f4:10:be:7e:80:d9:74:11:39:db:25:77: 20:98:7c:39:25:5f:be:11:f0:a4:f5:3d:b7:d1:0b:24:99:5e: bd:83:fb:78:c5:6f:b0:21:01:ba:b2:c0:ad:93:38:3c:ab:b4: d9:a6:c7:2a:d6:51:d3:c8:61:76:92:bf:51:c6:a8:b1:4a:61: a5:a4:3f:78:7e:24:6c:fa:83:49:01:4c:c1:f6:e5:e5:52:4d: 35:5d:a6:41:b4:62:c4:70:84:5d:52:fe:e6:b2:86:5f:74:1e: 68:6a:e0:99:88:ac:6d:77:68:db:d3:ea:42:ac:1d:d3:fb:39: 74:c8:3c:80:67:92:42:25:99:62:b9:41:37:fb:ff:46:fd:a4: 14:f4:31:eb:f1:0c:26:12:11:6c:fd:6c:a1:81:ab:a5:3b:32: ac:f2:8c:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUwNjA3MDExMzQ4WhcNMjUwNjE0MDExMzQ4WjAYMRYwFAYD VQQDEw02ODQzOTI0Yy02Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36DqGf7bFhUhLPsiVrSP8wf6fXrHj9fFeQpV6vtWfXsgkAveU0uDVIrzL9Hy ddM8Sk8Acg5FcW7WFH8kJvBYkfAqHNygMHc0I3JskIJ/NP/dttGtSMD9blt88rKp b1IkDale3l9lr+J1XF3ETTrCKnqaJeRwhP8YiGmVlmoJz04qQZbFgTdT1E2akSFT ysN4A81LWdnahe5CzI3eY29aoNnuU8rUCweTmPAkp/H3B5nksdHoW7MzrFnwfKII EhfPF9lohfFsFHOyh3Xrl57c4++QfDmV3yxI/JMDjccxSDwNRFC4t6i4bwW9gB5Z vTQanqXDxucnLMi45iGsQ4Mq/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNZi94F TgIuk9mqYixNNGwrEpU3MB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2D7vLXTkEpKHapPwVXsmE4bNp+1/p7oITmucHjT+Ha0mM4N+Poyyl a57eCtZ6CAFRLKWfp822ghAPHopmueQdov9yZ+k/ReY6l8rtWClpqrZYOKuVGMOY KA2+tzN/Ju30EL5+gNl0ETnbJXcgmHw5JV++EfCk9T230QskmV69g/t4xW+wIQG6 ssCtkzg8q7TZpscq1lHTyGF2kr9RxqixSmGlpD94fiRs+oNJAUzB9uXlUk01XaZB tGLEcIRdUv7msoZfdB5oauCZiKxtd2jb0+pCrB3T+zl0yDyAZ5JCJZliuUE3+/9G /aQU9DHr8QwmEhFs/WyhgaulOzKs8oyV -----END CERTIFICATE-----Generated at Sat Jun 7 14:47:53 2025 by rpki-client