$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft File: lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft (raw, json) Hash identifier: dgEcIl55DWcuK+hUyFnGVmWZnBKqsI53YMg2nCmXsro= Subject key identifier: 3F:BF:11:71:38:93:A9:1C:53:A8:E7:38:27:EE:D3:17:04:6D:89:C5 Authority key identifier: 94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 Certificate issuer: /CN=A916B0A3/serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Certificate serial: 26B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft Manifest number: 3220 Signing time: Fri 30 May 2025 15:50:32 +0000 Manifest this update: Fri 30 May 2025 15:50:32 +0000 Manifest next update: Fri 06 Jun 2025 15:50:32 +0000 Files and hashes: 1: lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl (hash: obm6kxjP1Oan448NWwWNE9pjvrW1sfad+7G9hB9j5jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9912 (0x26b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0A3, serialNumber=94A15BC9916C5B2CA18E359051501E54642C08D3 Validity Not Before: May 30 15:50:32 2025 GMT Not After : Jun 6 15:50:32 2025 GMT Subject: CN=6839d3c8-81ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:be:ee:86:ac:6f:31:ca:46:9c:11:6f:73: 73:ad:09:55:ec:7b:4c:1b:99:f8:61:dc:35:b4:7c: 88:99:29:66:a9:c8:d1:b5:50:49:3c:48:ae:6c:43: 58:63:d3:41:f6:0f:ac:8d:95:57:c8:cf:2c:96:4d: af:d5:60:90:6e:94:a9:bc:b9:b5:4a:82:6a:89:9f: 28:03:d8:5c:10:2c:4c:ea:01:8f:ba:d5:5c:1e:03: f1:88:61:24:bc:61:a5:0f:64:0d:d8:bd:31:ea:68: e0:1f:33:d3:d8:29:97:ac:52:ed:d9:30:f1:53:c1: da:7a:cc:27:86:ab:ca:87:21:bf:81:d6:24:f8:59: 64:d8:b2:52:e2:9b:4f:41:35:51:dc:bc:d5:46:92: 1e:c3:3e:c0:d7:06:e6:7d:83:28:70:31:f4:cb:29: 08:19:41:ea:77:11:eb:c8:d4:c7:3c:c2:dc:69:94: 98:e2:27:f4:16:fa:60:36:38:30:fa:4a:f6:67:7d: af:5f:9c:49:6c:ba:07:86:3a:9a:2f:6e:96:4c:81: 9e:b4:d3:f3:b3:83:c0:53:98:69:15:48:09:77:b7: b6:7a:d8:2e:fb:21:21:1a:e4:47:79:f7:a1:22:b2: 54:1c:c4:36:b4:09:a2:56:04:85:3b:e0:9f:dd:90: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BF:11:71:38:93:A9:1C:53:A8:E7:38:27:EE:D3:17:04:6D:89:C5 X509v3 Authority Key Identifier: keyid:94:A1:5B:C9:91:6C:5B:2C:A1:8E:35:90:51:50:1E:54:64:2C:08:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKFbyZFsWyyhjjWQUVAeVGQsCNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0A3/71ADE1FED82811E4AA7C8A47C4F9AE02/lKFbyZFsWyyhjjWQUVAeVGQsCNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:60:9f:6d:bd:6c:6a:1c:50:f5:a5:a7:fe:cb:2d:9f:77:35: 64:7b:73:54:66:b7:bd:e4:b5:5c:d5:59:81:50:8f:b7:5e:13: 7f:33:e7:d7:4e:6d:32:cf:a2:b2:f0:60:e1:95:f9:3e:5a:fd: 62:14:20:1b:c8:cf:77:0a:c5:88:0d:27:a5:c9:71:31:dc:fd: 49:6f:d7:be:ab:32:dd:cd:c4:c8:da:e5:84:29:15:9a:4a:08: 6a:14:43:05:e6:b2:72:e3:03:a3:78:32:b2:90:a2:75:dc:a3: f1:3d:c8:9d:d9:fb:62:e5:9a:cf:77:c9:43:f9:1c:cf:8f:e0: e7:a7:7a:f4:97:f5:b9:d0:fb:6c:85:bf:22:f4:ce:51:b5:97: a5:38:d9:c6:8a:b7:12:c4:a7:57:ff:0b:a5:d5:71:71:d0:68: 4b:07:93:a4:25:9b:67:9b:1a:e0:67:27:11:60:6f:00:79:a9: e0:f0:10:eb:30:cb:b2:4c:26:2f:55:4c:b4:67:61:fb:f1:4f: a0:d4:63:a2:68:87:ce:98:b6:6e:61:39:cf:0e:4b:59:fa:b7: 25:3a:ac:cc:63:3f:46:b1:af:a8:4b:74:89:35:4e:79:a8:6e: d7:30:9c:86:0d:46:a6:2f:ce:69:bd:71:e8:3a:5d:52:2d:39: de:b2:61:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwQTMxMTAvBgNVBAUTKDk0QTE1QkM5OTE2QzVCMkNBMThFMzU5MDUxNTAxRTU0 NjQyQzA4RDMwHhcNMjUwNTMwMTU1MDMyWhcNMjUwNjA2MTU1MDMyWjAYMRYwFAYD VQQDEw02ODM5ZDNjOC04MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSu+7oasbzHKRpwRb3NzrQlV7HtMG5n4Ydw1tHyImSlmqcjRtVBJPEiubENY Y9NB9g+sjZVXyM8slk2v1WCQbpSpvLm1SoJqiZ8oA9hcECxM6gGPutVcHgPxiGEk vGGlD2QN2L0x6mjgHzPT2CmXrFLt2TDxU8HaeswnhqvKhyG/gdYk+Flk2LJS4ptP QTVR3LzVRpIewz7A1wbmfYMocDH0yykIGUHqdxHryNTHPMLcaZSY4if0FvpgNjgw +kr2Z32vX5xJbLoHhjqaL26WTIGetNPzs4PAU5hpFUgJd7e2etgu+yEhGuRHefeh IrJUHMQ2tAmiVgSFO+Cf3ZDWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+/EXE4 k6kcU6jnOCfu0xcEbYnFMB8GA1UdIwQYMBaAFJShW8mRbFssoY41kFFQHlRkLAjT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBBMy83MUFERTFGRUQ4 MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5eWhqaldRVVZBZVZHUXND Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLRmJ5WkZzV3l5aGpqV1FVVkFlVkdRc0NOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBBMy83MUFERTFGRUQ4MjgxMUU0QUE3QzhBNDdDNEY5QUUwMi9sS0ZieVpGc1d5 eWhqaldRVVZBZVZHUXNDTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8YJ9tvWxqHFD1paf+yy2fdzVke3NUZre95LVc1VmBUI+3XhN/M+fX Tm0yz6Ky8GDhlfk+Wv1iFCAbyM93CsWIDSelyXEx3P1Jb9e+qzLdzcTI2uWEKRWa SghqFEMF5rJy4wOjeDKykKJ13KPxPcid2fti5ZrPd8lD+RzPj+Dnp3r0l/W50Pts hb8i9M5RtZelONnGircSxKdX/wul1XFx0GhLB5OkJZtnmxrgZycRYG8Aeang8BDr MMuyTCYvVUy0Z2H78U+g1GOiaIfOmLZuYTnPDktZ+rclOqzMYz9Gsa+oS3SJNU55 qG7XMJyGDUamL85pvXHoOl1SLTnesmGQ -----END CERTIFICATE-----Generated at Sat May 31 17:03:35 2025 by rpki-client