$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: qQcyfm0ozctXduKRHnwuzhEzzD2gwKGp5Mjk8SPyna4= Subject key identifier: CB:2C:EE:E1:B0:CB:94:7E:25:44:48:C3:ED:98:73:41:85:66:BA:36 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 040E Signing time: Sat 07 Jun 2025 00:27:42 +0000 Manifest this update: Sat 07 Jun 2025 00:27:41 +0000 Manifest next update: Sat 14 Jun 2025 00:27:41 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: FLmCJUKMvZ2OnXqrypJQGbM3lFTL5InBaC/nYG0WySs=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Jun 7 00:27:41 2025 GMT Not After : Jun 14 00:27:41 2025 GMT Subject: CN=6843877d-3d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bc:e0:80:5c:f1:a9:bf:cb:3c:7d:90:7b:b0: e5:4b:a6:27:5e:75:61:99:30:0f:b3:7e:db:a0:95: bb:21:24:64:9f:08:39:27:a6:ab:4c:4c:cb:fc:e7: bf:6d:74:68:06:b3:8d:26:92:b9:81:ad:35:f7:42: d5:4c:71:67:76:87:1c:e0:21:b5:36:dc:a6:1e:28: 7c:b1:b2:3b:8e:b0:86:f7:43:1a:a3:3d:25:7c:15: 20:95:73:f2:6d:47:b5:b6:b4:ca:0e:ce:c9:2a:56: 7a:2f:de:a4:4d:8d:14:f7:06:98:23:21:91:dd:f8: 0b:63:09:da:2e:a4:c0:9d:aa:42:88:86:01:19:f0: 0c:9d:79:ea:03:2c:01:b1:b0:b6:ff:54:49:d5:d7: 16:1d:48:05:a9:3e:5b:8b:5d:46:bc:3b:62:ab:b4: cb:71:35:73:e8:e3:98:5b:a9:5b:74:e1:cc:90:39: c5:98:e1:fc:c3:a5:4b:c0:0f:20:dd:17:f1:37:5d: 4f:0b:52:49:74:bc:23:4c:10:5b:c0:f2:39:6b:0d: cd:3d:3d:10:42:95:67:c4:e2:02:95:f4:f3:d6:23: b3:cb:df:e4:ec:6b:d6:03:da:4d:7a:f7:9d:c4:4f: 23:03:b2:48:b5:f6:d7:ce:fc:fa:ff:78:f6:28:11: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:EE:E1:B0:CB:94:7E:25:44:48:C3:ED:98:73:41:85:66:BA:36 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ef:f9:61:79:46:f9:d1:2c:28:47:7d:7a:46:f6:b9:e9:b0: bf:a1:4d:d9:88:7d:17:e0:b5:fd:ab:9d:9c:8a:43:69:52:f3: 81:50:ce:78:68:1a:7e:3d:e6:82:2a:11:74:f0:9f:62:cf:6a: a8:bc:56:b6:59:a2:44:ed:bf:05:d3:17:97:01:92:f5:25:e5: 53:c7:14:50:d1:39:04:09:54:e5:d8:32:fd:92:31:24:6a:e2: fb:1b:c9:6a:f0:66:cd:5d:a4:a0:46:58:f7:ae:de:e8:4f:d1: 30:e8:1e:a4:f7:95:a8:1b:ec:21:2f:a5:5f:4b:7b:23:fa:ad: f6:8d:35:4d:26:bb:a8:bb:ce:a1:6c:ae:36:bd:02:a2:f5:ff: 99:54:0d:34:e5:2a:fa:b5:27:24:06:f5:3b:9b:0f:4c:1d:e8: d9:ee:a2:01:c9:89:32:32:77:f2:88:d9:f3:13:2a:dc:f0:c0: e5:d5:18:af:29:83:f2:87:a5:6d:9d:17:b4:42:dc:a2:4a:63: a3:9d:65:af:eb:25:55:f4:54:cb:55:ad:28:b5:3c:80:91:85: d8:0a:13:26:22:36:36:72:84:fb:e9:f2:44:ff:83:3d:be:d4: 40:6a:7f:71:64:bd:8d:ac:ba:fb:39:d4:42:78:6c:6e:5e:11: 99:89:24:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwNjA3MDAyNzQxWhcNMjUwNjE0MDAyNzQxWjAYMRYwFAYD VQQDEw02ODQzODc3ZC0zZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LzggFzxqb/LPH2Qe7DlS6YnXnVhmTAPs37boJW7ISRknwg5J6arTEzL/Oe/ bXRoBrONJpK5ga0190LVTHFndocc4CG1NtymHih8sbI7jrCG90Maoz0lfBUglXPy bUe1trTKDs7JKlZ6L96kTY0U9waYIyGR3fgLYwnaLqTAnapCiIYBGfAMnXnqAywB sbC2/1RJ1dcWHUgFqT5bi11GvDtiq7TLcTVz6OOYW6lbdOHMkDnFmOH8w6VLwA8g 3RfxN11PC1JJdLwjTBBbwPI5aw3NPT0QQpVnxOIClfTz1iOzy9/k7GvWA9pNeved xE8jA7JItfbXzvz6/3j2KBFRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMss7uGw y5R+JURIw+2Yc0GFZro2MB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT7/lheUb50SwoR316Rva56bC/oU3ZiH0X4LX9q52cikNpUvOBUM54 aBp+PeaCKhF08J9iz2qovFa2WaJE7b8F0xeXAZL1JeVTxxRQ0TkECVTl2DL9kjEk auL7G8lq8GbNXaSgRlj3rt7oT9Ew6B6k95WoG+whL6VfS3sj+q32jTVNJruou86h bK42vQKi9f+ZVA005Sr6tSckBvU7mw9MHejZ7qIByYkyMnfyiNnzEyrc8MDl1Riv KYPyh6VtnRe0QtyiSmOjnWWv6yVV9FTLVa0otTyAkYXYChMmIjY2coT76fJE/4M9 vtRAan9xZL2NrLr7OdRCeGxuXhGZiSSh -----END CERTIFICATE-----Generated at Mon Jun 9 01:22:37 2025 by rpki-client