$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json) Hash identifier: o3bvJNknNtSiIPaPCc5AQt6BavRcqtgqO348WFIq0o8= Subject key identifier: E6:C0:E4:64:52:2E:3E:CA:E5:7D:F4:D7:E4:EB:B6:73:34:AF:4F:AB Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft Manifest number: 89 Signing time: Sun 01 Jun 2025 06:17:01 +0000 Manifest this update: Sun 01 Jun 2025 06:17:00 +0000 Manifest next update: Sun 08 Jun 2025 06:17:00 +0000 Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: IRdOZMBeK8dtWV9kg4YojQv1pDgKLn/mXNTjECERHbs=) 2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: Jun 1 06:17:00 2025 GMT Not After : Jun 8 06:17:00 2025 GMT Subject: CN=683bf05d-969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:3f:a9:a3:30:99:d2:bf:9b:04:ae:bb:e1: 1b:03:92:80:2f:b2:18:27:43:1f:1e:37:48:40:d8: d4:4d:74:5f:16:ce:39:15:d6:88:c8:d2:39:e1:50: 17:e4:3d:43:9f:98:12:12:4d:24:d3:2b:02:a6:2a: 51:a2:13:97:19:09:0d:a8:b3:3b:ce:be:66:ca:55: 0c:9e:4c:53:05:29:7a:55:95:07:99:cc:86:e8:8b: 9f:9a:dd:2a:8f:e4:08:f2:aa:90:b9:a2:c0:76:66: 2a:a7:2b:04:0a:2a:66:90:89:6c:38:b7:23:ed:08: 42:59:cc:f5:53:b8:2b:32:e9:0b:b8:fa:a1:13:a7: 8c:d5:1b:07:e3:60:4b:33:20:e0:a8:a2:e5:c1:54: 80:07:6c:7f:14:4e:e9:e6:98:ff:a3:2e:72:2a:8a: a7:a0:f0:6b:00:30:84:62:36:ac:99:59:7a:ac:ee: 95:7b:78:21:38:ec:df:97:73:e5:82:79:bf:28:47: fa:1d:0e:9a:2c:c9:3f:e4:9b:9b:c0:63:f6:38:16: 1c:a0:c4:cc:cc:ea:0f:ff:02:ed:91:9b:3d:61:26: ff:6d:a9:d4:1e:9b:3e:66:aa:a3:f5:1a:ab:be:f0: cf:8d:c0:87:f6:f7:14:ce:de:9d:2c:b3:33:f0:f0: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C0:E4:64:52:2E:3E:CA:E5:7D:F4:D7:E4:EB:B6:73:34:AF:4F:AB X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:65:30:37:f0:45:1e:a6:c0:72:be:55:31:cf:87:59:a0: 14:55:ba:95:fd:91:f6:71:f7:b6:b9:0a:68:04:10:2c:0c:ef: 83:c2:0f:43:68:a3:5d:64:0c:ef:a6:a6:f1:0a:21:12:92:3a: 8a:cf:0d:8b:89:f4:58:68:24:43:a8:84:95:ba:3d:42:be:55: 2e:d1:18:0e:78:4b:9d:a4:cf:9b:d3:8b:5f:eb:1a:54:63:3d: ad:ec:fd:d3:61:17:7e:c4:64:fb:e2:40:4b:ea:b4:6e:48:49: fe:a4:4d:d8:8a:26:96:18:21:ee:9a:ba:6d:d0:7e:5d:9d:98: bc:14:d0:8d:3b:4b:8c:c1:8f:fa:49:79:4e:6a:66:d6:65:1a: b3:4b:91:94:70:ef:ed:2c:5e:94:88:52:ec:99:a2:21:5a:08: e2:38:41:64:b6:ec:23:c6:2a:6e:79:68:28:50:12:ec:54:c2: b1:c5:29:d1:a3:4e:fc:ca:ee:69:1e:f5:ab:33:af:96:c8:d3: 4d:d0:e9:2a:57:7a:78:ae:fc:fe:ac:28:75:9a:1c:fd:f4:66: bd:5e:4e:38:01:c1:6c:e4:49:29:f9:12:5f:08:34:15:37:4e: 63:c7:e8:5b:00:9f:e0:9d:f3:cc:0b:44:03:30:e9:a9:2c:7c: 67:f8:e7:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy OEM3OTRCMDEwHhcNMjUwNjAxMDYxNzAwWhcNMjUwNjA4MDYxNzAwWjAYMRYwFAYD VQQDEw02ODNiZjA1ZC05NjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vE/qaMwmdK/mwSuu+EbA5KAL7IYJ0MfHjdIQNjUTXRfFs45FdaIyNI54VAX 5D1Dn5gSEk0k0ysCpipRohOXGQkNqLM7zr5mylUMnkxTBSl6VZUHmcyG6Iufmt0q j+QI8qqQuaLAdmYqpysECipmkIlsOLcj7QhCWcz1U7grMukLuPqhE6eM1RsH42BL MyDgqKLlwVSAB2x/FE7p5pj/oy5yKoqnoPBrADCEYjasmVl6rO6Ve3ghOOzfl3Pl gnm/KEf6HQ6aLMk/5JubwGP2OBYcoMTMzOoP/wLtkZs9YSb/banUHps+Zqqj9Rqr vvDPjcCH9vcUzt6dLLMz8PDEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObA5GRS Lj7K5X301+TrtnM0r0+rMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS9GNzIwOUMzMjcwQUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3Bs VFlDSlJkdURXcDRveDVTd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvLGUwN/BFHqbAcr5VMc+HWaAUVbqV/ZH2cfe2uQpoBBAsDO+Dwg9D aKNdZAzvpqbxCiESkjqKzw2LifRYaCRDqISVuj1CvlUu0RgOeEudpM+b04tf6xpU Yz2t7P3TYRd+xGT74kBL6rRuSEn+pE3YiiaWGCHumrpt0H5dnZi8FNCNO0uMwY/6 SXlOambWZRqzS5GUcO/tLF6UiFLsmaIhWgjiOEFktuwjxipueWgoUBLsVMKxxSnR o078yu5pHvWrM6+WyNNN0OkqV3p4rvz+rCh1mhz99Ga9Xk44AcFs5Ekp+RJfCDQV N05jx+hbAJ/gnfPMC0QDMOmpLHxn+OeY -----END CERTIFICATE-----Generated at Mon Jun 2 20:47:07 2025 by rpki-client