$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: pdWofs72gW7QxZ2coN9Qd/15aJxEBGRmRsenGYFhWa8= Subject key identifier: 96:4A:37:E1:18:3D:E8:AD:8D:9B:CB:76:33:B1:F9:91:07:4E:EA:EF Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 0541 Signing time: Sat 31 May 2025 23:43:34 +0000 Manifest this update: Sat 31 May 2025 23:43:33 +0000 Manifest next update: Sat 07 Jun 2025 23:43:33 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: Dfyh3OEdX29pbipZioEVUUbLXQgwcPpaLHZP9U3t1Dc=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: IVU27JRYWuBmIt6QcWFMqPFM6vDpf9nhIJBTc75GYY0=) 3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iDEEL9U9FxQCZ93LBYj286NgN76ygoYjLl0M4z8SPpI=) 4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: U7esX+0iuEFV+x7WiXgxLOpS83nYnKPDWOfbwdSRies=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: OD4QLqvF0E7NjniUYIqO9yXt+jiElu9IZS+rh6A1NUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: May 31 23:43:33 2025 GMT Not After : Jun 7 23:43:33 2025 GMT Subject: CN=683b9426-1a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:fa:a8:d3:5f:66:eb:fa:71:9c:06:32:47: 0e:49:e3:87:32:7d:3b:e3:31:1a:4d:87:62:66:e6: bd:a2:26:30:18:2b:69:74:7d:25:19:61:25:f1:98: c5:58:4b:a5:ae:69:1d:9d:90:c2:24:1a:f4:57:e0: 0f:b0:d2:91:0e:92:40:44:54:86:a0:bf:7c:0f:2a: cd:ca:6f:34:77:5d:66:18:03:9e:91:b4:36:dc:2d: 04:98:23:8a:a9:11:59:f0:11:57:2b:90:9a:4d:4b: b9:88:d5:59:75:07:43:cc:b8:60:9b:51:65:1a:05: a9:4a:33:09:1d:f7:6d:51:fd:eb:e0:9d:45:96:dc: 4e:75:dc:1c:24:c0:a8:5a:52:23:a5:7b:93:5f:c5: d4:24:8d:c1:1b:49:2c:9b:b2:d8:35:59:b8:83:9a: 87:2b:34:3e:98:c1:3c:c3:00:e9:fd:e8:8f:8e:38: cf:42:75:fc:26:02:8b:e9:d5:77:6e:dc:44:fc:77: 7b:10:71:78:17:77:94:a7:d0:b1:bd:ae:27:7a:73: 19:39:27:3d:9b:4a:cd:33:e5:85:03:6c:bc:17:d6: 95:e3:cd:b6:a5:cc:8e:16:81:98:70:76:4c:71:8d: 29:b6:4c:89:61:7f:f6:98:a6:24:10:20:da:55:ab: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:37:E1:18:3D:E8:AD:8D:9B:CB:76:33:B1:F9:91:07:4E:EA:EF X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:97:55:5a:9e:d8:44:73:a2:96:95:9c:b0:93:03:00:31:b2: 2c:bd:62:94:f9:a6:42:78:8d:8d:b3:23:0d:3c:32:f6:7e:20: ec:e5:08:44:ba:33:20:cd:15:3a:8b:0a:e8:57:65:cf:f1:2f: f6:a7:a6:f3:05:65:ec:63:bf:87:25:14:0d:ea:fa:1b:56:3f: 4e:44:bd:d1:ce:50:11:a3:8c:bf:9f:c9:3c:f8:cc:6e:61:42: ec:07:40:05:4e:0b:ba:2f:b8:68:58:fb:54:d7:b8:9c:8e:07: 39:10:6a:1f:70:a2:d2:1f:cb:86:9c:22:87:42:c4:57:98:1d: 03:e3:a5:ce:83:2a:70:a7:7e:d0:4e:75:09:f2:40:04:54:d4: 62:6d:2e:c3:cb:75:5d:ab:a2:89:80:b1:46:f0:78:36:5d:69: 3a:bb:63:91:21:ad:55:5f:c0:c5:ce:55:75:54:3d:1c:bc:93: 16:70:cb:91:27:58:6c:8d:96:be:fc:a9:57:0e:fe:cd:25:69: a1:4c:3c:99:67:ab:d6:73:22:f2:1f:e4:b6:41:07:7c:76:d1: 43:9e:0c:ff:2d:ea:0b:25:1f:f7:85:25:a7:71:44:9f:d0:c9: eb:d9:fb:04:20:8f:bd:6b:3f:7c:61:a5:f6:45:82:32:d0:e9: e8:da:6b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwNTMxMjM0MzMzWhcNMjUwNjA3MjM0MzMzWjAYMRYwFAYD VQQDEw02ODNiOTQyNi0xYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvL6qNNfZuv6cZwGMkcOSeOHMn074zEaTYdiZua9oiYwGCtpdH0lGWEl8ZjF WEulrmkdnZDCJBr0V+APsNKRDpJARFSGoL98DyrNym80d11mGAOekbQ23C0EmCOK qRFZ8BFXK5CaTUu5iNVZdQdDzLhgm1FlGgWpSjMJHfdtUf3r4J1FltxOddwcJMCo WlIjpXuTX8XUJI3BG0ksm7LYNVm4g5qHKzQ+mME8wwDp/eiPjjjPQnX8JgKL6dV3 btxE/Hd7EHF4F3eUp9Cxva4nenMZOSc9m0rNM+WFA2y8F9aV4822pcyOFoGYcHZM cY0ptkyJYX/2mKYkECDaVauNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZKN+EY PeitjZvLdjOx+ZEHTurvMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSl1VanthEc6KWlZywkwMAMbIsvWKU+aZCeI2NsyMNPDL2fiDs5QhE ujMgzRU6iwroV2XP8S/2p6bzBWXsY7+HJRQN6vobVj9ORL3RzlARo4y/n8k8+Mxu YULsB0AFTgu6L7hoWPtU17icjgc5EGofcKLSH8uGnCKHQsRXmB0D46XOgypwp37Q TnUJ8kAEVNRibS7Dy3Vdq6KJgLFG8Hg2XWk6u2ORIa1VX8DFzlV1VD0cvJMWcMuR J1hsjZa+/KlXDv7NJWmhTDyZZ6vWcyLyH+S2QQd8dtFDngz/LeoLJR/3hSWncUSf 0Mnr2fsEII+9az98YaX2RYIy0Ono2mvv -----END CERTIFICATE-----Generated at Mon Jun 2 21:06:18 2025 by rpki-client