$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: kNErzv50ceP+VtQqXGcaV4azzdtiAb9djNlY4RMRf5E= Subject key identifier: 2E:B8:18:4D:78:9F:AC:99:0E:5C:C9:03:C4:0B:E5:F4:E6:DE:D4:7E Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 64 Signing time: Tue 03 Jun 2025 06:52:37 +0000 Manifest this update: Tue 03 Jun 2025 06:52:36 +0000 Manifest next update: Tue 10 Jun 2025 06:52:36 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: cfeWI/7eJTSuuxPVueCPIvRpxNXACApIGIlsKg3N/Dg=) 2: 8DBD0EBCABCA11EF984C832AC4F9AE02.roa (hash: 8Dmn7khqMXjuTQiezguWUTsHSU/EM/tHFNVuXGCGR0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Jun 3 06:52:36 2025 GMT Not After : Jun 10 06:52:36 2025 GMT Subject: CN=683e9bb5-afac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:0e:d1:08:e2:0b:40:41:7e:8a:f2:f5:22: 74:0b:db:9e:08:e7:af:ff:c6:66:fe:44:e2:dc:66: 68:c0:b0:7a:d5:82:2f:20:16:34:a7:bb:08:6b:95: 1d:fe:f7:8b:e8:75:2a:b7:b6:21:02:fb:32:7c:96: f7:de:be:ae:31:7f:19:d9:14:d2:9a:02:48:33:04: 4e:cd:28:96:d5:d2:84:32:96:43:4e:ac:71:cb:2d: 20:6d:e1:ac:5b:79:b8:63:21:e1:e3:8d:80:be:42: 9c:57:fa:cd:2c:ce:a5:69:69:42:ce:b2:3f:cd:96: 9a:4b:56:9f:43:83:3e:6e:f1:45:4c:56:5a:ce:46: 51:8f:4b:f1:e8:e5:e9:e6:f0:90:f2:36:68:d6:bd: b6:94:f1:ed:ac:07:6c:d2:c5:59:b7:8e:11:67:c3: 24:73:19:77:e2:02:b5:0b:7d:d6:ab:5b:53:29:eb: 68:07:e5:14:7a:fd:92:c7:97:f9:e7:23:4e:94:7b: 37:e5:6d:f1:bf:5f:c8:21:54:3a:d1:f9:c6:29:4b: d3:9c:54:b7:aa:c6:4f:53:3b:14:20:f8:cc:b4:9d: 03:37:a8:ed:27:2c:53:63:f4:07:cd:ea:76:fe:e9: e5:59:10:80:80:5a:b0:f4:ae:c2:7a:bd:27:7f:d3: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:18:4D:78:9F:AC:99:0E:5C:C9:03:C4:0B:E5:F4:E6:DE:D4:7E X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:02:8c:4c:88:dd:83:da:5d:c6:12:a8:6d:90:6a:bb:f8:b7: f8:cf:f6:97:20:44:c0:58:4a:e9:1a:ee:af:42:c2:ec:9b:9d: 3d:d6:d3:fa:84:2d:7f:c9:61:df:13:34:13:a7:c6:5a:db:f8: d8:14:99:8c:ab:be:2c:60:94:26:6f:52:ff:4f:17:aa:3d:a8: 82:73:a6:a0:ed:1e:62:55:07:11:20:04:7f:ba:12:17:98:6d: d5:a1:5f:bd:c7:18:92:cd:7a:7e:37:a9:df:ae:70:3d:41:ec: c4:cb:8b:1e:b1:13:2b:a2:7a:dd:99:c2:d3:49:56:35:67:44: 30:b0:73:25:51:dd:63:0f:f5:8b:14:3a:9b:5d:4f:09:56:de: 5e:bb:e6:bc:7e:75:0f:bb:16:a0:1e:e5:55:d0:0e:a9:ed:04: 3d:52:23:9d:7c:0a:07:96:22:88:b5:91:0a:05:e0:8f:a0:11: d4:3c:a8:9e:d4:18:12:dd:00:18:53:32:f4:f5:bd:83:4b:7e: f8:25:12:1c:67:88:97:06:e1:e0:8b:42:69:fc:1b:46:6f:1e: 08:59:eb:c3:fe:f5:2a:41:53:3a:ed:d7:07:69:7c:3f:b0:33: 63:5b:53:46:97:e8:65:0d:e1:b4:98:e5:26:8c:56:a9:f5:f6: a2:c3:12:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoOTY0RDA4NzI3REFFREFDNzQwMzdBQjlDNDNBNTA4QkFE QkNGREFGRDAeFw0yNTA2MDMwNjUyMzZaFw0yNTA2MTAwNjUyMzZaMBgxFjAUBgNV BAMTDTY4M2U5YmI1LWFmYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5WQ7RCOILQEF+ivL1InQL254I56//xmb+ROLcZmjAsHrVgi8gFjSnuwhrlR3+ 94vodSq3tiEC+zJ8lvfevq4xfxnZFNKaAkgzBE7NKJbV0oQylkNOrHHLLSBt4axb ebhjIeHjjYC+QpxX+s0szqVpaULOsj/NlppLVp9Dgz5u8UVMVlrORlGPS/Ho5enm 8JDyNmjWvbaU8e2sB2zSxVm3jhFnwyRzGXfiArULfdarW1Mp62gH5RR6/ZLHl/nn I06UezflbfG/X8ghVDrR+cYpS9OcVLeqxk9TOxQg+My0nQM3qO0nLFNj9AfN6nb+ 6eVZEICAWrD0rsJ6vSd/09fLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULrgYTXif rJkOXMkDxAvl9Obe1H4wHwYDVR0jBBgwFoAUlk0Icn2u2sdAN6ucQ6UIutvP2v0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzJGMkI2RkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbGswSWNuMnUyc2RBTjZ1Y1E2VUl1dHZQMnYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzJGMkI2RkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL2xrMEljbjJ1MnNk QU42dWNRNlVJdXR2UDJ2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHICjEyI3YPaXcYSqG2Qarv4t/jP9pcgRMBYSuka7q9CwuybnT3W0/qE LX/JYd8TNBOnxlrb+NgUmYyrvixglCZvUv9PF6o9qIJzpqDtHmJVBxEgBH+6EheY bdWhX73HGJLNen43qd+ucD1B7MTLix6xEyuiet2ZwtNJVjVnRDCwcyVR3WMP9YsU OptdTwlW3l675rx+dQ+7FqAe5VXQDqntBD1SI518CgeWIoi1kQoF4I+gEdQ8qJ7U GBLdABhTMvT1vYNLfvglEhxniJcG4eCLQmn8G0ZvHghZ68P+9SpBUzrt1wdpfD+w M2NbU0aX6GUN4bSY5SaMVqn19qLDEn8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:50:24 2025 by rpki-client