$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: 05mSJcPi4J3t7Zu0p/8CFC3tVFODrT5MDarV0og1pVo= Subject key identifier: 62:43:B3:0E:12:56:2C:DF:39:A6:0E:96:43:AA:0E:DA:93:A6:9F:40 Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 70 Signing time: Wed 11 Jun 2025 06:13:50 +0000 Manifest this update: Wed 11 Jun 2025 06:13:49 +0000 Manifest next update: Wed 18 Jun 2025 06:13:49 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 6iptv93nr8f2iToy3qoTAxZe642Oo0NpkwHq+NmLXuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Jun 11 06:13:49 2025 GMT Not After : Jun 18 06:13:49 2025 GMT Subject: CN=68491e9d-75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:80:cd:e8:ea:c9:11:01:17:7a:f1:14:f5: 0d:c2:80:a9:9a:86:29:79:6a:50:2c:39:af:ba:dc: 6e:dd:3f:ec:81:6f:16:76:4e:17:8d:02:97:91:9d: 61:22:a8:3d:a3:d3:80:03:3f:53:ae:4a:da:c1:95: 79:f2:95:f9:82:57:6a:34:23:c1:de:e0:10:0b:02: 7c:91:ee:60:1b:3f:ef:d3:9a:d0:21:05:d2:1f:b2: 57:06:c4:0a:8d:b0:e8:a9:ca:d9:aa:03:a7:63:61: 12:b3:0b:0f:93:d0:51:34:2b:bf:6d:58:18:50:6e: 7a:c1:5d:69:b1:47:1e:cd:3c:b8:4a:52:a5:8c:73: 18:bc:92:0c:d0:03:02:09:04:36:75:5b:f0:10:f1: 9a:43:fe:b9:1d:31:bd:61:ae:4d:51:1a:51:0b:75: 59:05:c4:b7:2e:c1:5a:26:4f:67:9f:61:0c:f3:92: 14:82:6e:be:f7:01:41:fe:1b:05:03:22:05:30:21: 00:69:bc:fd:7f:a4:70:58:6f:f2:29:eb:f9:ee:d4: d6:c2:7c:fc:6d:b3:ff:56:fd:d4:1b:c5:1f:27:2b: 0d:43:f3:60:99:f9:cd:32:20:61:b1:fe:f5:2f:25: 7d:21:43:06:9c:89:5b:0d:78:30:4b:e1:d8:7d:36: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:43:B3:0E:12:56:2C:DF:39:A6:0E:96:43:AA:0E:DA:93:A6:9F:40 X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:b9:51:bd:65:15:2f:d8:2b:00:b4:c1:e8:39:2a:11:9e: 1b:4a:0e:bb:03:1c:bf:6f:63:de:5e:c2:7f:c1:ad:37:c0:92: a3:c3:7f:92:9e:8b:33:dc:9e:c9:85:36:10:ce:f9:2c:4d:1b: 09:53:39:73:df:13:45:1c:4e:b8:48:76:ef:06:c4:a4:78:09: d1:f6:f1:c1:bd:83:d3:2e:d7:8a:47:0c:06:94:e2:9a:57:4f: 37:ea:e7:92:78:2c:3d:9e:4d:a7:45:12:05:65:35:37:91:71: 42:a8:31:ef:80:f1:6d:1b:f8:26:4b:76:f9:f4:58:76:ce:0b: 54:ce:da:f2:54:3f:3b:b0:26:cf:98:86:96:92:d2:dd:55:82: bd:6f:a4:8a:06:9b:d6:b7:12:a7:e8:66:07:2e:0e:42:72:df: 1e:ea:74:fb:f2:ae:b1:c4:de:60:76:86:c0:48:68:e9:2b:37: 38:dd:90:83:06:91:8d:60:26:61:37:5a:54:de:17:2a:b8:51: d9:61:d4:13:a3:7a:4d:e5:64:83:f1:e4:ed:76:65:19:52:bf: 8c:47:c4:ed:dd:6d:93:71:aa:ea:80:af:2e:87:0d:5a:33:25: 14:c2:9f:90:27:59:0b:6a:4d:78:1a:c6:df:13:1c:d5:f3:b0: 5b:75:03:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoOTc0QjRBNTY1NDg2RTA0OEQwQzE3Njk4RDcyMjc2NzBD RjNDOTlBNzAeFw0yNTA2MTEwNjEzNDlaFw0yNTA2MTgwNjEzNDlaMBgxFjAUBgNV BAMTDTY4NDkxZTlkLTc1YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd6YDN6OrJEQEXevEU9Q3CgKmahil5alAsOa+63G7dP+yBbxZ2TheNApeRnWEi qD2j04ADP1OuStrBlXnylfmCV2o0I8He4BALAnyR7mAbP+/TmtAhBdIfslcGxAqN sOipytmqA6djYRKzCw+T0FE0K79tWBhQbnrBXWmxRx7NPLhKUqWMcxi8kgzQAwIJ BDZ1W/AQ8ZpD/rkdMb1hrk1RGlELdVkFxLcuwVomT2efYQzzkhSCbr73AUH+GwUD IgUwIQBpvP1/pHBYb/Ip6/nu1NbCfPxts/9W/dQbxR8nKw1D82CZ+c0yIGGx/vUv JX0hQwaciVsNeDBL4dh9NtYPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYkOzDhJW LN85pg6WQ6oO2pOmn0AwHwYDVR0jBBgwFoAUl0tKVlSG4EjQwXaY1yJ2cM88macw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzM2RDVENjJDOUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1h Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDB0S1ZsU0c0RWpRd1hhWTF5SjJjTTg4bWFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVq UXdYYVkxeUoyY004OG1hYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEP/uVG9ZRUv2CsAtMHoOSoRnhtKDrsDHL9vY95ewn/BrTfAkqPDf5Ke izPcnsmFNhDO+SxNGwlTOXPfE0UcTrhIdu8GxKR4CdH28cG9g9Mu14pHDAaU4ppX Tzfq55J4LD2eTadFEgVlNTeRcUKoMe+A8W0b+CZLdvn0WHbOC1TO2vJUPzuwJs+Y hpaS0t1Vgr1vpIoGm9a3EqfoZgcuDkJy3x7qdPvyrrHE3mB2hsBIaOkrNzjdkIMG kY1gJmE3WlTeFyq4Udlh1BOjek3lZIPx5O12ZRlSv4xHxO3dbZNxquqAry6HDVoz JRTCn5AnWQtqTXgaxt8THNXzsFt1A1k= -----END CERTIFICATE-----Generated at Fri Jun 13 06:45:45 2025 by rpki-client