$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json) Hash identifier: 4UpUNMcTFFCaSRL3iAWa/G9lsCKNH2mrbjzGM5uxjfg= Subject key identifier: DB:F1:61:F7:63:5C:C6:C7:A4:3F:69:60:BF:85:5E:65:CE:F0:21:41 Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft Manifest number: 01C7 Signing time: Sat 31 May 2025 02:40:51 +0000 Manifest this update: Sat 31 May 2025 02:40:51 +0000 Manifest next update: Sat 07 Jun 2025 02:40:51 +0000 Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: clPVHYG3jTDeGAtPvlgsU/FzEHxjWbNPusmTBEe5CfM=) 2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Validity Not Before: May 31 02:40:51 2025 GMT Not After : Jun 7 02:40:51 2025 GMT Subject: CN=683a6c33-2fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:fe:c5:f3:89:cc:50:8a:19:02:16:8d:e9: d7:5b:cf:4f:35:ff:d4:30:c8:b9:ad:83:56:fd:01: a9:92:81:80:bb:2a:37:94:4e:0c:e6:db:b4:94:9e: b4:81:01:2d:88:4e:99:0c:f6:f9:ee:55:31:28:b6: 91:02:a5:1c:0d:dc:f0:bf:79:db:06:ed:63:29:a3: b4:01:29:33:da:5d:7b:5f:a2:ce:61:45:23:97:dd: e4:36:3c:8b:2c:08:64:e5:0f:13:4a:61:ba:e4:31: bd:a9:65:54:99:f4:1f:30:3c:50:7f:95:20:cd:a7: 54:f5:57:da:3e:db:62:6a:07:7b:f5:15:24:25:d8: 36:cb:95:dc:5c:bd:75:6b:6e:fa:46:51:77:dd:5e: b3:04:27:8e:5a:54:59:25:33:df:3d:43:59:9d:9f: 15:83:31:60:79:08:7c:f0:81:0c:06:ec:f9:18:3c: 6b:01:0f:9e:c0:da:ff:fa:ed:91:d5:cd:ea:9b:53: 6c:6a:b5:f5:73:81:3f:48:d0:87:b9:06:ca:bc:99: 3f:8c:54:3f:9e:7d:d1:57:70:eb:e3:29:8d:1e:c1: 58:d5:13:fe:ad:1d:ea:91:64:18:db:8c:ad:a7:66: f3:b0:15:cd:01:93:0b:bc:d6:0b:6b:39:41:d8:d4: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:61:F7:63:5C:C6:C7:A4:3F:69:60:BF:85:5E:65:CE:F0:21:41 X509v3 Authority Key Identifier: keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fd:b1:2c:d4:6c:3d:64:88:0f:27:fd:e0:f1:c2:ee:b8:fe: 7e:14:e1:01:ea:61:79:5b:8f:fc:df:c2:37:25:d3:e8:ce:cb: e7:af:52:9a:74:b4:e4:88:f8:be:8a:56:a8:e5:fc:cf:93:20: d4:2a:58:da:68:84:c5:3a:75:e9:f3:bf:ad:37:f1:28:90:40: 56:12:0d:40:af:74:1d:23:60:15:1c:21:6a:26:64:56:88:43: 61:70:1f:38:4f:99:8b:7f:4e:d8:50:4c:bf:01:fd:68:fb:38: 35:2b:b5:03:37:ef:fe:a9:2a:c6:93:56:c0:cb:58:1c:d0:9c: 17:86:19:85:74:1e:74:f9:d5:ad:67:35:65:20:26:57:4f:b5: bb:81:9e:58:00:e2:7a:45:47:5a:a8:86:9e:ed:25:ff:ad:92: fc:02:2c:be:9a:4d:cd:82:8e:39:d8:9d:c8:38:a6:03:4c:70: 88:59:10:4c:a5:ca:76:99:fc:94:83:af:5c:d2:98:92:96:e0: 5e:0e:93:2f:4a:8c:4f:14:ff:f4:4a:c3:37:33:43:3b:13:b9: 3b:ad:df:ea:6d:14:dc:e7:a8:c0:93:a4:ab:f4:6f:a2:7e:25: 3f:c5:f0:f1:40:27:c9:f8:c6:be:0d:f1:6d:b1:72:dd:2a:30: e0:0c:83:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB Q0Y2RDIyQjYwHhcNMjUwNTMxMDI0MDUxWhcNMjUwNjA3MDI0MDUxWjAYMRYwFAYD VQQDEw02ODNhNmMzMy0yZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Hv+xfOJzFCKGQIWjenXW89PNf/UMMi5rYNW/QGpkoGAuyo3lE4M5tu0lJ60 gQEtiE6ZDPb57lUxKLaRAqUcDdzwv3nbBu1jKaO0ASkz2l17X6LOYUUjl93kNjyL LAhk5Q8TSmG65DG9qWVUmfQfMDxQf5UgzadU9VfaPttiagd79RUkJdg2y5XcXL11 a276RlF33V6zBCeOWlRZJTPfPUNZnZ8VgzFgeQh88IEMBuz5GDxrAQ+ewNr/+u2R 1c3qm1NsarX1c4E/SNCHuQbKvJk/jFQ/nn3RV3Dr4ymNHsFY1RP+rR3qkWQY24yt p2bzsBXNAZMLvNYLazlB2NQamQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvxYfdj XMbHpD9pYL+FXmXO8CFBMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0 RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85 U01FeDBJWUs4c0dzOXRJclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT/bEs1Gw9ZIgPJ/3g8cLuuP5+FOEB6mF5W4/838I3JdPozsvnr1Ka dLTkiPi+ilao5fzPkyDUKljaaITFOnXp87+tN/EokEBWEg1Ar3QdI2AVHCFqJmRW iENhcB84T5mLf07YUEy/Af1o+zg1K7UDN+/+qSrGk1bAy1gc0JwXhhmFdB50+dWt ZzVlICZXT7W7gZ5YAOJ6RUdaqIae7SX/rZL8Aiy+mk3Ngo452J3IOKYDTHCIWRBM pcp2mfyUg69c0piSluBeDpMvSoxPFP/0SsM3M0M7E7k7rd/qbRTc56jAk6Sr9G+i fiU/xfDxQCfJ+Ma+DfFtsXLdKjDgDIP2 -----END CERTIFICATE-----Generated at Sat May 31 16:44:49 2025 by rpki-client