$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: VIh4dZ51Tw/dtGCtdf8qoHy1U1BatE5vSbKkcafzc9s= Subject key identifier: 01:42:02:FC:FD:C7:79:84:52:56:50:FA:5A:B3:F4:B1:A4:EA:3D:3B Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 05F7 Signing time: Fri 30 May 2025 23:06:25 +0000 Manifest this update: Fri 30 May 2025 23:06:24 +0000 Manifest next update: Fri 06 Jun 2025 23:06:24 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: H0Har2B3Bi+wxIsGwUoJutGW9BlFItsmi1qXoJMDA8w=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: Q1d1g05zi4G/ogm4b/r2cc7LZ3pSsv6EHqXO8XveQLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: May 30 23:06:24 2025 GMT Not After : Jun 6 23:06:24 2025 GMT Subject: CN=683a39f1-4aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:d4:89:31:5a:d9:07:4e:b0:7b:10:5c:5f: 8f:ff:36:b6:bf:c9:ea:e9:e5:87:95:66:cc:40:83: 62:5e:de:3a:66:82:86:88:c6:5f:43:32:dd:f9:1a: a0:47:2e:15:5a:c2:56:e3:99:36:56:32:e7:0e:17: a5:7b:17:a1:2f:61:b6:bb:e4:80:cd:39:03:ff:75: 07:3d:5b:f3:b3:02:e3:15:05:44:2d:9c:22:8d:92: 3a:93:be:63:8c:77:4a:e4:43:4e:d1:b6:ea:91:cd: f7:e3:20:7f:88:3e:21:15:cd:98:75:fa:9b:a6:40: b7:92:36:8d:67:b9:ee:41:80:ea:59:34:dc:f4:60: aa:7e:fb:58:6a:2d:88:80:40:8b:5d:fa:a3:ca:34: 26:ff:5f:f2:71:44:01:56:bd:8a:3b:ca:8a:ca:74: b5:91:9b:d1:ee:cb:e7:ad:e4:4b:7b:ee:e3:71:27: 0b:99:39:25:79:66:fd:5f:77:80:07:3e:36:10:8c: 69:69:e9:3f:a4:af:eb:13:5e:41:3a:c5:ba:7a:e9: b4:f0:68:b9:e0:be:e7:ce:00:a6:d5:cb:9e:95:a4: 70:98:69:61:a8:4c:1d:d9:ee:be:ff:5c:e2:a1:d6: a6:b2:36:f6:7a:85:db:25:b7:9e:ee:dc:62:fa:d3: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:42:02:FC:FD:C7:79:84:52:56:50:FA:5A:B3:F4:B1:A4:EA:3D:3B X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:90:37:4e:0e:30:f1:91:e2:57:a8:66:31:df:d6:cd:e8:c3: 16:e7:c5:9b:0d:84:c9:25:7e:c5:ee:7e:86:5b:4a:c7:12:ca: 1e:18:9e:f3:51:3b:77:0c:22:46:7c:37:99:8d:e5:07:60:20: 6b:cf:cc:8e:2f:0f:e8:5d:ed:43:10:20:e0:6f:41:a4:68:64: 4e:30:65:8b:8b:50:5d:9a:eb:42:e2:27:98:6b:9c:bf:f0:34: 88:46:87:ba:5b:1e:6e:91:ce:97:66:82:b8:ac:93:a1:14:76: 5d:6d:41:42:d8:4d:83:10:77:3c:a8:24:bd:5f:26:4c:73:2d: f1:f0:ba:9b:00:b5:3b:9c:c5:99:0e:cc:31:16:f1:8b:57:42: 02:d0:66:9e:f9:6b:a6:71:b3:94:2e:5e:bb:25:60:9a:c0:b3: 3e:67:f4:d2:40:dc:1c:5e:56:c8:fb:09:05:9d:bb:3b:bb:7a: f9:7b:6a:26:00:cb:ff:fe:4b:6e:92:36:e3:8a:07:24:50:fb: ff:03:22:37:ff:a9:70:28:49:f1:fb:86:19:26:22:47:a8:7e: b2:30:cf:69:e4:41:30:7b:14:1e:b9:75:7b:e2:e5:03:76:63: a1:e0:15:ca:51:4d:ea:11:96:c9:f3:ad:06:70:66:6b:d7:2d: 8a:65:54:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwNTMwMjMwNjI0WhcNMjUwNjA2MjMwNjI0WjAYMRYwFAYD VQQDEw02ODNhMzlmMS00YWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzefUiTFa2QdOsHsQXF+P/za2v8nq6eWHlWbMQINiXt46ZoKGiMZfQzLd+Rqg Ry4VWsJW45k2VjLnDhelexehL2G2u+SAzTkD/3UHPVvzswLjFQVELZwijZI6k75j jHdK5ENO0bbqkc334yB/iD4hFc2YdfqbpkC3kjaNZ7nuQYDqWTTc9GCqfvtYai2I gECLXfqjyjQm/1/ycUQBVr2KO8qKynS1kZvR7svnreRLe+7jcScLmTkleWb9X3eA Bz42EIxpaek/pK/rE15BOsW6eum08Gi54L7nzgCm1cuelaRwmGlhqEwd2e6+/1zi odamsjb2eoXbJbee7txi+tPHPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFCAvz9 x3mEUlZQ+lqz9LGk6j07MB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZkDdODjDxkeJXqGYx39bN6MMW58WbDYTJJX7F7n6GW0rHEsoeGJ7z UTt3DCJGfDeZjeUHYCBrz8yOLw/oXe1DECDgb0GkaGROMGWLi1BdmutC4ieYa5y/ 8DSIRoe6Wx5ukc6XZoK4rJOhFHZdbUFC2E2DEHc8qCS9XyZMcy3x8LqbALU7nMWZ DswxFvGLV0IC0Gae+WumcbOULl67JWCawLM+Z/TSQNwcXlbI+wkFnbs7u3r5e2om AMv//ktukjbjigckUPv/AyI3/6lwKEnx+4YZJiJHqH6yMM9p5EEwexQeuXV74uUD dmOh4BXKUU3qEZbJ860GcGZr1y2KZVSw -----END CERTIFICATE-----Generated at Sat May 31 15:06:09 2025 by rpki-client