$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: t4+VXw66UlZJm9tp/98N5BGheuLMmSTgbipNGsMFFGM= Subject key identifier: 0B:51:F0:BB:7F:05:05:3C:F3:15:3D:81:73:EE:37:90:B4:DB:DE:4D Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 57 Signing time: Tue 03 Jun 2025 07:15:52 +0000 Manifest this update: Tue 03 Jun 2025 07:15:51 +0000 Manifest next update: Tue 10 Jun 2025 07:15:51 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: SHaf4KINYx/r3jN+XxhtzG3QV8oFXh/S9E3K5UJXUu0=) 2: 4F72C7AA33C411F0B8356486C4F9AE02.roa (hash: tOcCd19mJCPPiFoWg4m94bvWBWEGU041dFyGRGUoONg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Jun 3 07:15:51 2025 GMT Not After : Jun 10 07:15:51 2025 GMT Subject: CN=683ea127-2650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a8:76:02:83:d4:0f:b9:ff:c2:57:ea:39:d5: bf:f7:da:d3:33:b0:36:df:93:3e:15:a4:c7:cf:6b: a0:8f:ca:6c:6a:81:32:70:1a:86:75:1a:62:5e:2b: 43:62:77:22:01:7d:19:ab:29:47:71:69:d9:1f:c1: fc:86:fc:23:08:bd:77:fc:3d:75:ec:d5:a8:1c:0b: 1c:36:a0:a8:54:c7:07:46:4a:3d:72:73:b8:74:9d: b2:a5:2b:30:81:87:9c:d2:f9:d3:b9:91:4c:98:33: b0:17:45:49:b3:37:1c:02:38:62:cc:e9:a7:ca:2c: 8c:4f:c9:de:5a:9f:a4:59:17:14:cf:00:c9:6e:20: d2:70:46:b1:9e:69:f9:a9:db:ad:ae:46:f2:ff:a8: dd:37:0b:ef:10:d8:3d:3a:a4:0e:33:c1:d8:e0:05: 96:ef:e4:75:7f:1c:79:bb:29:37:f4:51:04:b9:e8: 4c:bd:42:e2:94:31:9f:d0:61:ee:1f:1f:5b:0d:c2: d5:f6:65:e8:e5:95:09:0e:f5:58:46:49:ea:64:57: 30:95:52:b1:a9:ca:4a:5b:a9:ea:93:aa:37:19:4c: 0d:1a:86:28:21:2c:df:20:be:c0:0c:ba:e0:f0:81: cf:fa:4d:a5:95:66:7f:56:33:45:7c:4a:bd:b8:23: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:51:F0:BB:7F:05:05:3C:F3:15:3D:81:73:EE:37:90:B4:DB:DE:4D X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:21:2e:2f:ea:32:36:4b:5d:56:5b:7e:85:88:6f:6b:23:5d: 59:23:36:6a:bd:6e:8d:96:53:c7:d0:79:24:cd:89:b5:53:eb: d0:17:40:80:4b:d8:f2:cc:81:71:61:63:1d:25:af:60:c4:bc: 22:d8:e5:4b:1e:d2:07:b0:32:c6:8a:ea:28:11:e0:1a:04:3d: ea:77:69:19:ff:e3:f0:98:75:fb:0e:92:a2:b1:49:37:5c:59: ca:c0:fe:0f:ac:29:f5:b6:74:29:39:2c:32:52:1c:13:e1:2e: 5f:f3:58:c4:5a:97:75:94:4f:40:d5:da:38:8b:4c:9a:6c:06: 60:63:c6:4f:4f:54:d0:7d:73:b2:d0:1c:10:2b:c6:36:2e:b7: 96:52:6c:10:c6:2c:4f:6b:06:65:fe:ff:24:2a:db:9b:9d:62: 72:da:96:a0:fc:5a:65:90:d7:4e:d0:d6:62:d1:a3:38:d6:73: fd:5a:5a:42:05:d6:8d:c3:8e:46:ab:0f:94:20:68:93:c3:a5: 41:b3:a6:07:72:88:d7:30:33:3e:84:2f:3f:ba:af:63:1b:35: c7:98:a7:9c:fd:68:25:78:a3:78:7e:5c:91:09:ef:b2:9f:21: 54:27:de:5e:b7:5f:f9:3e:aa:22:cc:8f:74:67:13:a4:53:07: d0:d1:50:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3RTRDNUY5MEQ5 ODEzODA1ODAeFw0yNTA2MDMwNzE1NTFaFw0yNTA2MTAwNzE1NTFaMBgxFjAUBgNV BAMTDTY4M2VhMTI3LTI2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrqHYCg9QPuf/CV+o51b/32tMzsDbfkz4VpMfPa6CPymxqgTJwGoZ1GmJeK0Ni dyIBfRmrKUdxadkfwfyG/CMIvXf8PXXs1agcCxw2oKhUxwdGSj1yc7h0nbKlKzCB h5zS+dO5kUyYM7AXRUmzNxwCOGLM6afKLIxPyd5an6RZFxTPAMluINJwRrGeafmp 262uRvL/qN03C+8Q2D06pA4zwdjgBZbv5HV/HHm7KTf0UQS56Ey9QuKUMZ/QYe4f H1sNwtX2ZejllQkO9VhGSepkVzCVUrGpykpbqeqTqjcZTA0ahighLN8gvsAMuuDw gc/6TaWVZn9WM0V8Sr24I2fdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC1Hwu38F BTzzFT2Bc+43kLTb3k0wHwYDVR0jBBgwFoAUlnuX2eMRJQ2ClC0n5MX5DZgTgFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0I2MjJGQThBRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG51WDJlTVJKUTJDbEMwbjVNWDVEWmdUZ0ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0I2MjJGQThBRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEy Q2xDMG41TVg1RFpnVGdGZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8hLi/qMjZLXVZbfoWIb2sjXVkjNmq9bo2WU8fQeSTNibVT69AXQIBL 2PLMgXFhYx0lr2DEvCLY5Use0gewMsaK6igR4BoEPep3aRn/4/CYdfsOkqKxSTdc WcrA/g+sKfW2dCk5LDJSHBPhLl/zWMRal3WUT0DV2jiLTJpsBmBjxk9PVNB9c7LQ HBArxjYut5ZSbBDGLE9rBmX+/yQq25udYnLalqD8WmWQ107Q1mLRozjWc/1aWkIF 1o3DjkarD5QgaJPDpUGzpgdyiNcwMz6ELz+6r2MbNceYp5z9aCV4o3h+XJEJ77Kf IVQn3l63X/k+qiLMj3RnE6RTB9DRUGQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:17 2025 by rpki-client