$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: WyVdmf+KMK5VuTfPiWfsu0Sg2miOWBzIa5JZFcFpN4U= Subject key identifier: 58:AD:F0:8D:A5:E0:7F:63:D0:80:4D:57:A7:19:0F:CA:84:30:73:C4 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: D7 Signing time: Sun 01 Jun 2025 05:17:39 +0000 Manifest this update: Sun 01 Jun 2025 05:17:38 +0000 Manifest next update: Sun 08 Jun 2025 05:17:38 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: 6poqR7Oxqq+9XlYnL0iNB+j87cpDo0Il9KamuNF4eJI=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Jun 1 05:17:38 2025 GMT Not After : Jun 8 05:17:38 2025 GMT Subject: CN=683be272-16ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:6a:78:eb:a8:44:09:2d:8d:7f:f8:73:97: 13:fa:92:4b:56:eb:e8:0f:9c:21:f5:19:c9:e4:5b: ec:c6:e5:ae:6f:9d:70:8c:a1:ef:84:0e:47:51:9e: 1a:de:e0:f7:cd:0c:6e:6a:87:17:85:a2:49:61:8c: eb:e0:96:80:f2:37:6d:98:13:a9:5c:6c:a9:9f:9d: 5c:b8:25:c4:86:88:5b:58:51:4b:35:f2:0d:3c:cf: 7d:08:51:41:78:8d:84:53:fe:ee:46:86:24:70:98: 6f:b9:97:b7:fd:5c:e7:2b:9f:22:23:98:bb:91:1c: 23:ab:2c:43:a6:7a:6e:21:75:0c:a0:41:84:05:3f: a1:fc:5d:95:6f:d2:a9:9e:c9:4b:45:73:9b:44:bf: b7:58:a3:80:66:3d:7c:15:6f:98:56:34:af:1f:35: ed:2c:c2:02:6c:68:af:c2:1d:aa:0f:de:9e:4c:db: ad:de:f1:0c:31:ab:21:fd:68:80:3c:75:2f:ec:f7: 06:cf:49:23:0f:cc:6b:d4:36:e7:5b:23:d6:a5:e9: 21:43:07:1a:1e:30:bd:d9:0a:3a:9a:67:69:9e:a4: 79:af:12:f9:54:57:3d:ad:a7:6e:32:f0:38:f1:10: 8b:c6:8d:0e:02:62:35:41:9f:c2:34:2c:f5:a3:2a: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AD:F0:8D:A5:E0:7F:63:D0:80:4D:57:A7:19:0F:CA:84:30:73:C4 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:1d:e3:24:97:fd:44:e1:f6:9b:36:9a:0e:01:c0:91:d5: 95:fe:f1:e2:e4:44:6f:d2:f4:c1:e7:84:84:f7:27:6c:2d:87: ec:20:0d:c3:2c:48:17:11:f3:69:28:f7:45:1a:dc:1b:00:9c: 02:3f:b5:cb:38:3f:fe:9e:42:02:e0:74:a1:01:83:2d:34:e5: 55:f3:fa:17:36:a8:ad:16:31:b8:c9:19:e3:71:df:e2:9d:66: eb:85:bb:08:2f:26:6a:0d:da:1a:f3:61:b9:b9:f4:5f:4b:6f: b7:cf:1e:3c:ac:e5:cb:01:60:76:c9:01:53:6f:9d:00:ed:48: 5c:0e:7c:1c:07:3f:18:33:a1:80:5c:de:22:37:6c:69:d7:cc: 39:30:03:f3:b4:dd:f2:20:9a:fa:3e:9f:5e:cb:f5:bb:92:6b: 60:94:09:cb:61:34:e3:0f:a6:e7:2a:4f:9e:46:94:dc:e0:c7: a2:ed:cf:95:88:bf:03:48:52:a1:a8:6e:33:a3:9f:5c:3a:a4: 79:df:77:da:48:9c:6f:8e:45:04:ed:48:ed:24:d0:a7:40:66: 87:fb:d8:91:b2:89:97:d8:d7:37:20:37:92:eb:a5:b4:e0:54: c2:ed:1d:69:38:db:fa:43:3c:64:26:b8:a7:b3:a4:f9:f8:d8: 32:dc:84:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwNjAxMDUxNzM4WhcNMjUwNjA4MDUxNzM4WjAYMRYwFAYD VQQDEw02ODNiZTI3Mi0xNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fxqeOuoRAktjX/4c5cT+pJLVuvoD5wh9RnJ5FvsxuWub51wjKHvhA5HUZ4a 3uD3zQxuaocXhaJJYYzr4JaA8jdtmBOpXGypn51cuCXEhohbWFFLNfINPM99CFFB eI2EU/7uRoYkcJhvuZe3/VznK58iI5i7kRwjqyxDpnpuIXUMoEGEBT+h/F2Vb9Kp nslLRXObRL+3WKOAZj18FW+YVjSvHzXtLMICbGivwh2qD96eTNut3vEMMash/WiA PHUv7PcGz0kjD8xr1DbnWyPWpekhQwcaHjC92Qo6mmdpnqR5rxL5VFc9raduMvA4 8RCLxo0OAmI1QZ/CNCz1oyr10wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFit8I2l 4H9j0IBNV6cZD8qEMHPEMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO2R3jJJf9ROH2mzaaDgHAkdWV/vHi5ERv0vTB54SE9ydsLYfsIA3D LEgXEfNpKPdFGtwbAJwCP7XLOD/+nkIC4HShAYMtNOVV8/oXNqitFjG4yRnjcd/i nWbrhbsILyZqDdoa82G5ufRfS2+3zx48rOXLAWB2yQFTb50A7UhcDnwcBz8YM6GA XN4iN2xp18w5MAPztN3yIJr6Pp9ey/W7kmtglAnLYTTjD6bnKk+eRpTc4Mei7c+V iL8DSFKhqG4zo59cOqR533faSJxvjkUE7UjtJNCnQGaH+9iRsomX2Nc3IDeS66W0 4FTC7R1pONv6QzxkJrins6T5+Ngy3IRk -----END CERTIFICATE-----Generated at Mon Jun 2 06:54:49 2025 by rpki-client