$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: fhOPtaXnBUkIU2bQiG0vmRIW1GXZT+z9HZMUKS6P7kw= Subject key identifier: 8F:E1:12:58:49:F5:C1:0C:CE:0D:EB:CA:C2:6B:1F:1F:45:AB:3F:E7 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 010D Signing time: Tue 03 Jun 2025 04:40:52 +0000 Manifest this update: Tue 03 Jun 2025 04:40:51 +0000 Manifest next update: Tue 10 Jun 2025 04:40:51 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: ZM0mtHoX6pO9+4qDkvkgXd+ro01+CyIGF6SATtnnh64=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Jun 3 04:40:51 2025 GMT Not After : Jun 10 04:40:51 2025 GMT Subject: CN=683e7cd3-732c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:f3:63:51:9d:fb:e7:af:74:3b:77:25:c9: 43:37:a8:0b:d6:85:a0:86:dc:7a:c9:eb:07:cc:06: 67:e1:bd:fa:3b:00:9f:a2:9f:7c:f6:ba:a0:9f:43: 5d:c8:b6:61:e8:af:08:02:9e:d3:18:9f:be:9e:08: 74:1c:07:2e:b9:13:2a:2a:9c:0c:3e:5d:74:6a:a3: ee:bc:f7:62:ac:e9:a3:6f:d5:fd:eb:9d:bf:71:28: d2:57:bd:32:25:6b:13:af:f7:c7:73:09:df:ac:f6: 2f:78:8b:14:27:f7:10:6e:5a:1a:42:5c:05:f0:d5: 96:30:7b:87:bf:30:f6:71:89:07:46:91:39:48:b4: 66:72:5f:dc:58:87:0e:f6:04:50:6d:40:80:e8:ca: 4a:a1:92:ee:e4:e2:7c:ca:04:fa:c8:10:0d:ff:6c: 63:23:50:f2:9d:9c:ee:f8:1f:7b:18:f6:0c:65:44: d1:d0:f7:a4:8a:4a:db:19:d4:66:c7:7a:ff:19:28: 2e:cc:07:84:8b:a9:31:6e:4f:0b:47:00:9e:8f:d7: f3:1a:ec:f7:95:9b:34:bd:78:bf:6b:72:16:09:71: ac:03:41:ba:8d:ca:23:f8:2f:8a:68:9d:9d:93:b4: c7:3b:d9:1a:8e:ed:73:84:0a:eb:7c:70:80:ac:e0: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:12:58:49:F5:C1:0C:CE:0D:EB:CA:C2:6B:1F:1F:45:AB:3F:E7 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a0:d3:57:fd:43:2e:be:83:9a:a4:00:98:6e:bc:53:4f:94: 4f:7a:da:ec:73:06:53:03:4b:b3:44:d6:e1:60:4b:11:bc:dd: 21:39:86:3c:d1:19:0e:ab:46:e7:7d:d0:3f:b8:6c:6a:ca:be: 91:38:b1:44:f3:ee:6d:0a:af:3a:e2:57:b2:77:24:ca:08:e8: ac:22:32:2a:53:9e:cf:d4:5f:63:f2:f9:d4:4f:11:69:91:08: ac:9d:e2:f9:68:6c:3c:c3:f6:19:4f:26:e2:f0:08:b8:dc:6f: 70:b0:ed:91:5f:38:12:cb:18:61:eb:42:92:25:2d:1a:f2:ca: e6:68:7a:e4:79:be:b4:dc:e4:7c:63:5b:fb:dc:30:7b:0c:52: 14:bd:7d:27:e2:c6:1e:a2:6e:96:d7:8d:de:3c:a7:2f:4e:f8: 84:34:b6:3d:d3:07:d1:3c:12:15:37:fe:ea:b6:53:48:ac:29: 86:8d:3b:2e:ef:7f:bc:71:88:41:bb:f6:cc:1d:73:29:59:d3: 08:3f:99:3f:63:26:47:9c:43:bb:a6:a5:4d:44:b4:b2:cd:6c: 6d:3c:8a:b0:93:3e:33:21:6b:2a:2f:8d:58:1e:9b:53:29:fe: 53:a6:88:c2:20:8d:77:0c:60:7f:88:6f:84:9e:1f:27:11:b9: f3:81:ce:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwNjAzMDQ0MDUxWhcNMjUwNjEwMDQ0MDUxWjAYMRYwFAYD VQQDEw02ODNlN2NkMy03MzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pbzY1Gd++evdDt3JclDN6gL1oWghtx6yesHzAZn4b36OwCfop989rqgn0Nd yLZh6K8IAp7TGJ++ngh0HAcuuRMqKpwMPl10aqPuvPdirOmjb9X9652/cSjSV70y JWsTr/fHcwnfrPYveIsUJ/cQbloaQlwF8NWWMHuHvzD2cYkHRpE5SLRmcl/cWIcO 9gRQbUCA6MpKoZLu5OJ8ygT6yBAN/2xjI1DynZzu+B97GPYMZUTR0PekikrbGdRm x3r/GSguzAeEi6kxbk8LRwCej9fzGuz3lZs0vXi/a3IWCXGsA0G6jcoj+C+KaJ2d k7THO9kaju1zhArrfHCArOCZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/hElhJ 9cEMzg3rysJrHx9Fqz/nMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9oNNX/UMuvoOapACYbrxTT5RPetrscwZTA0uzRNbhYEsRvN0hOYY8 0RkOq0bnfdA/uGxqyr6ROLFE8+5tCq864leydyTKCOisIjIqU57P1F9j8vnUTxFp kQisneL5aGw8w/YZTybi8Ai43G9wsO2RXzgSyxhh60KSJS0a8srmaHrkeb603OR8 Y1v73DB7DFIUvX0n4sYeom6W143ePKcvTviENLY90wfRPBIVN/7qtlNIrCmGjTsu 73+8cYhBu/bMHXMpWdMIP5k/YyZHnEO7pqVNRLSyzWxtPIqwkz4zIWsqL41YHptT Kf5TpojCII13DGB/iG+Enh8nEbnzgc4G -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:50 2025 by rpki-client