$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft File: LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json) Hash identifier: T/WfsAL5R80ShXJIGHy+qQsukOzZrimZ21mYwzcqe0Y= Subject key identifier: 5A:EF:3B:76:62:C4:E8:A9:AA:00:5F:7D:02:F8:EC:E8:CD:78:C2:EB Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 Certificate issuer: /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft Manifest number: 0D Signing time: Thu 05 Jun 2025 07:31:30 +0000 Manifest this update: Thu 05 Jun 2025 07:31:29 +0000 Manifest next update: Thu 12 Jun 2025 07:31:29 +0000 Files and hashes: 1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: 4J71ZRZjl34OOS/86Rg0ODdfQjbtXkIi3eYHv3ro/Hw=) 2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525 Validity Not Before: Jun 5 07:31:29 2025 GMT Not After : Jun 12 07:31:29 2025 GMT Subject: CN=684147d1-fb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:5b:8b:9a:1c:02:fa:61:fb:6e:7b:4c:a6: ff:4e:3d:87:a6:9b:52:7d:21:17:bb:93:fe:1f:3a: 1c:25:2c:86:27:93:46:15:93:19:2e:88:c2:8a:da: 45:c2:51:f7:11:71:97:f2:f6:7d:1a:0b:73:13:58: ef:01:85:d8:3f:a2:49:42:ff:58:cd:77:c7:62:b3: 95:f1:8d:de:02:2a:3e:e6:44:c6:c9:8d:8d:7c:a4: 58:b8:f0:bc:70:25:76:bf:1a:98:d4:1d:d5:cf:d2: 5d:f6:48:3d:51:f3:90:4f:f9:92:62:b3:f4:b8:ea: f0:5e:50:58:85:62:08:cb:db:bd:c3:63:15:41:8e: 46:3f:d2:4b:d7:b9:5c:b2:52:34:15:78:da:cb:07: b9:ea:66:39:8a:fb:de:68:cc:d4:db:a8:d4:5b:78: 06:59:75:b9:0b:2c:99:a8:a7:f9:49:67:c7:5e:90: 2b:6b:18:4f:fc:1d:86:51:ff:70:14:95:71:be:3f: a2:dc:58:05:95:1a:f6:b7:7c:ef:de:b1:27:88:40: 5f:7e:4e:ba:73:e5:82:4d:78:c4:06:a7:fb:25:3b: bb:c4:8e:58:43:f9:bf:58:0e:75:23:08:83:38:97: cc:07:1b:f6:49:54:45:e4:3f:f5:84:b8:e9:46:1e: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:3B:76:62:C4:E8:A9:AA:00:5F:7D:02:F8:EC:E8:CD:78:C2:EB X509v3 Authority Key Identifier: keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fb:79:74:7c:a9:44:f1:9e:67:5b:9a:76:50:17:c9:18:40: 57:01:5e:fb:74:7c:39:a4:5b:39:ef:4a:0b:3d:75:c0:f6:4b: 59:a6:0b:09:9b:1f:2e:95:74:37:b6:0e:46:0f:73:7c:ed:4a: 5b:b9:92:1f:ca:9e:c4:ca:28:a7:30:3a:dc:d6:b2:4f:f1:91: 6d:2f:fc:0e:a1:0e:3c:3f:7b:4d:8d:4b:1f:01:01:74:68:08: 86:ad:90:95:bc:ca:b3:7d:7c:e6:8d:4e:12:ea:3e:04:5c:0d: 39:28:b7:8d:3d:fc:2a:de:9b:58:4a:7c:c5:41:88:54:b1:b6: e0:7c:cc:b7:8d:e0:04:f0:54:7a:e6:1f:84:a8:0e:42:3d:b1: 31:0b:29:c0:85:80:75:58:b6:df:0b:58:fb:80:1c:f5:2d:30: 0a:4d:55:09:7f:be:d1:56:30:c2:29:41:35:fe:c9:2b:2e:3a: 36:b2:b8:96:c2:de:12:47:e6:28:8d:2b:8d:ea:06:27:b0:2a: 44:73:0a:95:9b:ff:fa:b6:b7:63:20:cb:27:cc:f5:b8:0c:7c: d8:a8:26:56:06:fe:21:e3:37:f3:cb:ed:1f:2e:22:20:35:aa: d4:62:ca:f4:1a:6b:6f:25:92:aa:14:2b:bb:55:29:2d:64:0b: 95:29:f5:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG MjZGNjUyNTAeFw0yNTA2MDUwNzMxMjlaFw0yNTA2MTIwNzMxMjlaMBgxFjAUBgNV BAMTDTY4NDE0N2QxLWZiODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwgFuLmhwC+mH7bntMpv9OPYemm1J9IRe7k/4fOhwlLIYnk0YVkxkuiMKK2kXC UfcRcZfy9n0aC3MTWO8Bhdg/oklC/1jNd8dis5Xxjd4CKj7mRMbJjY18pFi48Lxw JXa/GpjUHdXP0l32SD1R85BP+ZJis/S46vBeUFiFYgjL273DYxVBjkY/0kvXuVyy UjQVeNrLB7nqZjmK+95ozNTbqNRbeAZZdbkLLJmop/lJZ8dekCtrGE/8HYZR/3AU lXG+P6LcWAWVGva3fO/esSeIQF9+Trpz5YJNeMQGp/slO7vEjlhD+b9YDnUjCIM4 l8wHG/ZJVEXkP/WEuOlGHtZ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWu87dmLE 6KmqAF99Avjs6M14wuswHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/7eXR8qUTxnmdbmnZQF8kYQFcBXvt0fDmkWznvSgs9dcD2S1mmCwmb Hy6VdDe2DkYPc3ztSlu5kh/KnsTKKKcwOtzWsk/xkW0v/A6hDjw/e02NSx8BAXRo CIatkJW8yrN9fOaNThLqPgRcDTkot409/Crem1hKfMVBiFSxtuB8zLeN4ATwVHrm H4SoDkI9sTELKcCFgHVYtt8LWPuAHPUtMApNVQl/vtFWMMIpQTX+ySsuOjayuJbC 3hJH5iiNK43qBiewKkRzCpWb//q2t2MgyyfM9bgMfNioJlYG/iHjN/PL7R8uIiA1 qtRiyvQaa28lkqoUK7tVKS1kC5Up9R0= -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:35 2025 by rpki-client