$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: KgqBNIeXs7css+k8qkTG+65hCEM5TiHNOFyFCUTim+Y= Subject key identifier: 32:25:9F:37:35:D8:52:33:5B:F6:1F:24:54:90:5C:FC:D1:17:5A:E3 Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 348A Signing time: Fri 06 Jun 2025 15:20:07 +0000 Manifest this update: Fri 06 Jun 2025 15:20:07 +0000 Manifest next update: Fri 13 Jun 2025 15:20:07 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: 3hIdjWN2OEL2Z8raiD1yNhhuKxeAXJXMgYNuCF1V3sE=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Jun 6 15:20:07 2025 GMT Not After : Jun 13 15:20:07 2025 GMT Subject: CN=68430727-9cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:d9:71:97:34:90:d8:10:54:99:bc:77:71: 34:b0:08:e4:ab:32:ee:d5:a4:5e:e9:44:18:f6:46: 08:7d:ee:fd:81:63:a3:0e:59:a0:77:4e:e9:33:bb: 57:40:ae:b9:e4:a9:1c:95:44:a6:9d:f5:fa:5d:81: 0b:92:13:22:50:e9:3f:00:77:88:17:c9:58:e5:46: d9:6e:03:b6:7b:f3:3d:92:d3:59:fe:e7:3e:5e:68: 10:41:b0:3e:de:e8:9f:de:fc:a4:3c:95:a7:fc:2b: 7f:2d:82:81:35:ce:09:98:c4:2c:49:36:6c:22:b8: 21:39:5b:b6:24:d5:8d:6e:e7:c9:22:15:67:e2:4a: 33:5f:df:3f:d2:e5:37:0b:6a:f8:2e:29:02:47:e7: db:16:76:9e:fe:92:6b:2b:91:d4:9b:2f:a2:c7:55: d3:bd:5c:e7:8c:12:fe:1d:2f:c0:d4:a6:9f:77:44: a2:74:0f:82:cc:7a:e9:ba:3b:9c:63:63:54:1c:2d: 59:12:60:36:0e:17:6b:a3:30:44:0a:0c:56:a7:c7: 88:51:d2:ae:46:90:50:f7:30:7e:78:15:db:27:38: 13:7f:5d:64:c1:e1:e0:49:e2:e3:04:df:25:ff:58: df:63:18:34:56:68:24:14:c4:91:a6:fd:63:42:b3: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:9F:37:35:D8:52:33:5B:F6:1F:24:54:90:5C:FC:D1:17:5A:E3 X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f9:71:3e:e2:7a:c7:24:35:90:4c:c0:7d:f8:7b:b6:b4:88: b9:dd:30:e5:45:49:06:1c:d5:0e:5f:8f:f2:9f:56:2c:aa:a8: 58:52:2d:ef:57:41:5a:25:db:fb:ed:63:b6:35:c8:84:46:1a: 95:d9:83:34:c4:de:9d:40:26:6f:52:ac:aa:50:c0:d5:b7:39: 08:e5:45:bb:8e:d1:6e:29:8f:a9:12:5f:18:d5:66:b2:25:da: 4f:01:bb:2c:53:e0:ff:86:9c:a7:1d:1f:99:61:64:f4:66:c3: 5b:58:b0:d5:b4:a1:ef:1a:39:31:19:b5:71:df:eb:3e:05:70: 6d:15:3c:ad:6b:1a:a1:14:51:b3:1c:70:23:a9:30:94:87:a3: 52:17:55:94:5c:f5:c9:5f:5f:e1:dc:c7:7e:7c:e9:fc:1b:f5: c9:dd:59:16:b7:98:19:8a:62:24:6c:01:7d:d7:c9:12:3a:fa: 4f:66:0d:72:dc:44:17:0b:56:16:78:a8:31:14:ea:8b:03:b6: fe:40:aa:71:c8:86:83:4c:ee:b2:66:60:13:57:11:51:f7:a2: 31:29:e4:2f:a0:ca:40:a1:7d:fc:01:45:02:a4:f6:db:dd:42: 82:24:f6:42:42:12:fd:58:e7:c7:10:4d:f5:b2:7a:79:db:21: 18:75:d2:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUwNjA2MTUyMDA3WhcNMjUwNjEzMTUyMDA3WjAYMRYwFAYD VQQDEw02ODQzMDcyNy05Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVfZcZc0kNgQVJm8d3E0sAjkqzLu1aRe6UQY9kYIfe79gWOjDlmgd07pM7tX QK655KkclUSmnfX6XYELkhMiUOk/AHeIF8lY5UbZbgO2e/M9ktNZ/uc+XmgQQbA+ 3uif3vykPJWn/Ct/LYKBNc4JmMQsSTZsIrghOVu2JNWNbufJIhVn4kozX98/0uU3 C2r4LikCR+fbFnae/pJrK5HUmy+ix1XTvVznjBL+HS/A1Kafd0SidA+CzHrpujuc Y2NUHC1ZEmA2DhdrozBECgxWp8eIUdKuRpBQ9zB+eBXbJzgTf11kweHgSeLjBN8l /1jfYxg0VmgkFMSRpv1jQrNJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIlnzc1 2FIzW/YfJFSQXPzRF1rjMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+XE+4nrHJDWQTMB9+Hu2tIi53TDlRUkGHNUOX4/yn1YsqqhYUi3v V0FaJdv77WO2NciERhqV2YM0xN6dQCZvUqyqUMDVtzkI5UW7jtFuKY+pEl8Y1Way JdpPAbssU+D/hpynHR+ZYWT0ZsNbWLDVtKHvGjkxGbVx3+s+BXBtFTytaxqhFFGz HHAjqTCUh6NSF1WUXPXJX1/h3Md+fOn8G/XJ3VkWt5gZimIkbAF918kSOvpPZg1y 3EQXC1YWeKgxFOqLA7b+QKpxyIaDTO6yZmATVxFR96IxKeQvoMpAoX38AUUCpPbb 3UKCJPZCQhL9WOfHEE31snp52yEYddJR -----END CERTIFICATE-----Generated at Sat Jun 7 05:38:51 2025 by rpki-client