$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: vJ/bM0QJO0vkhYZBDXc4sAZZlPt2z2IVR6LQF8wuQqk= Subject key identifier: 9F:15:C4:78:0A:71:52:83:F5:87:6E:C6:29:DA:45:D5:52:FF:80:A3 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0233 Signing time: Sat 31 May 2025 02:05:57 +0000 Manifest this update: Sat 31 May 2025 02:05:56 +0000 Manifest next update: Sat 07 Jun 2025 02:05:56 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: l6ErglZ561YCP4aG1nMiS2oiT5PYIEXnwOLkoAEUySQ=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: May 31 02:05:56 2025 GMT Not After : Jun 7 02:05:56 2025 GMT Subject: CN=683a6405-a6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:56:7d:65:37:c4:3a:ad:db:c2:de:13:97: 82:15:0b:b1:7c:ba:53:99:a2:d5:ec:7a:bc:7e:b9: 95:93:e7:ca:0a:1c:6f:2b:8d:c3:6a:63:f7:ed:78: 6c:77:8a:d6:0e:7e:ed:cf:0a:9e:d7:90:b4:f1:8a: 7d:7f:0c:fb:41:09:18:49:bf:6e:22:c7:f8:0b:1b: 94:ff:94:3b:a7:40:85:9c:d8:5f:ff:f3:8f:4f:9d: b6:da:93:bc:cf:5a:e4:2e:50:47:9b:77:80:6b:96: a2:c0:c8:37:b6:df:46:ca:e3:95:fe:38:5a:0d:af: de:09:1c:e4:f5:81:02:56:0d:22:59:b2:73:a6:67: a1:28:c6:57:6e:3e:a1:8f:f3:24:97:e7:af:91:00: 54:32:06:13:f0:e6:5f:4c:ca:2b:df:05:71:66:75: 2e:d4:96:e8:5d:af:38:a1:48:1e:f3:4a:74:42:54: 56:63:8e:b6:4a:21:aa:d9:c5:f6:82:7d:75:d9:4a: 5a:dc:7d:76:12:de:70:de:79:b0:88:cd:77:79:41: 65:de:ff:0a:ba:ed:19:80:f2:cb:9c:ca:ef:97:15: b6:60:5c:6f:1c:db:8f:f2:90:2d:80:70:91:94:25: 0a:a6:bd:72:27:e9:1b:f0:19:d8:d6:54:b3:02:0f: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:C4:78:0A:71:52:83:F5:87:6E:C6:29:DA:45:D5:52:FF:80:A3 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1f:39:05:a5:0a:d6:67:ae:4e:27:3d:15:2e:86:e6:e7:c9: 68:76:b0:1f:eb:38:55:2f:13:71:61:54:59:c8:3e:02:68:ba: 02:4a:fc:4e:9b:46:ae:a0:35:b8:45:ad:15:f8:0f:6b:a5:a6: f6:66:a9:8f:af:b9:62:bb:af:f5:3d:4a:17:12:04:44:59:70: 5a:b8:b4:82:50:95:4a:dd:58:ef:8e:da:73:60:62:0e:39:d8: 35:db:8d:dd:cf:40:55:0c:68:6c:d1:e7:a4:c0:72:fd:19:1f: fd:59:8e:e4:46:b5:7a:6c:d5:3b:24:f1:42:f6:c6:62:7c:42: 88:1c:ca:9b:e0:78:5b:d1:98:70:f7:f5:8f:b9:77:71:8a:47: 72:52:c5:65:f9:db:db:27:41:5a:bb:fd:ad:60:be:d2:cd:f2: 6b:f2:f6:76:61:5f:4b:71:16:23:9a:89:f7:53:82:27:6e:c2: 1e:eb:a1:1a:72:c0:ed:fa:69:7e:cb:60:8d:21:30:24:88:09: b0:cf:58:0e:b6:1f:20:c3:5c:2b:26:04:70:05:f8:eb:8e:c6: f1:71:25:73:5f:3a:67:06:87:b7:0e:ac:80:62:7d:3c:dc:59: 0a:13:f8:02:b8:52:87:14:7c:cc:ed:4f:32:48:df:9c:7d:5a: 52:11:1a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwNTMxMDIwNTU2WhcNMjUwNjA3MDIwNTU2WjAYMRYwFAYD VQQDEw02ODNhNjQwNS1hNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOxWfWU3xDqt28LeE5eCFQuxfLpTmaLV7Hq8frmVk+fKChxvK43DamP37Xhs d4rWDn7tzwqe15C08Yp9fwz7QQkYSb9uIsf4CxuU/5Q7p0CFnNhf//OPT5222pO8 z1rkLlBHm3eAa5aiwMg3tt9GyuOV/jhaDa/eCRzk9YECVg0iWbJzpmehKMZXbj6h j/Mkl+evkQBUMgYT8OZfTMor3wVxZnUu1JboXa84oUge80p0QlRWY462SiGq2cX2 gn112Upa3H12Et5w3nmwiM13eUFl3v8Kuu0ZgPLLnMrvlxW2YFxvHNuP8pAtgHCR lCUKpr1yJ+kb8BnY1lSzAg+6KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8VxHgK cVKD9YduxinaRdVS/4CjMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPHzkFpQrWZ65OJz0VLobm58lodrAf6zhVLxNxYVRZyD4CaLoCSvxO m0auoDW4Ra0V+A9rpab2ZqmPr7liu6/1PUoXEgREWXBauLSCUJVK3VjvjtpzYGIO Odg1243dz0BVDGhs0eekwHL9GR/9WY7kRrV6bNU7JPFC9sZifEKIHMqb4Hhb0Zhw 9/WPuXdxikdyUsVl+dvbJ0Fau/2tYL7SzfJr8vZ2YV9LcRYjmon3U4InbsIe66Ea csDt+ml+y2CNITAkiAmwz1gOth8gw1wrJgRwBfjrjsbxcSVzXzpnBoe3DqyAYn08 3FkKE/gCuFKHFHzM7U8ySN+cfVpSERoQ -----END CERTIFICATE-----Generated at Sat May 31 17:36:02 2025 by rpki-client