$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: u8bsc+Qmm6nZUKW6h6FEId1GyYqNPVXytuO+KWTskUo= Subject key identifier: 27:CF:89:BA:17:5F:D4:CD:54:B3:10:2B:6F:0E:D9:73:C0:28:4C:BD Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 012A Signing time: Fri 13 Jun 2025 03:37:28 +0000 Manifest this update: Fri 13 Jun 2025 03:37:28 +0000 Manifest next update: Fri 20 Jun 2025 03:37:28 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: ULbVwNFA5JQfwr/sh/W3qae2qXon5SRgPafrMWOSPC4=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: Jun 13 03:37:28 2025 GMT Not After : Jun 20 03:37:28 2025 GMT Subject: CN=684b9cf8-573f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:01:58:6c:d2:05:2a:7e:75:8d:eb:01:65: 63:87:12:3c:48:e9:ba:67:ce:1a:51:49:33:84:13: c4:67:80:85:c3:ae:7f:d6:59:87:46:f3:a1:11:20: ef:c3:8f:d5:07:73:5e:91:50:95:f3:c2:14:90:2d: b7:86:50:c0:46:c8:bd:96:ec:4c:bf:8f:32:5d:79: 00:ab:e7:e1:99:51:2f:ac:e2:2f:fb:61:02:ae:d9: 02:ac:3e:67:6e:b5:76:49:66:ee:cd:1d:ab:d9:af: 21:03:e4:18:67:e3:46:6d:37:0a:ac:71:34:3f:ef: 97:12:c3:57:0b:63:0e:ea:af:99:ff:cc:da:88:be: 5d:4b:e0:3d:c9:8a:f4:da:64:46:2d:66:c5:9d:0c: e0:e3:12:6d:cb:11:3d:5e:09:6b:e6:fd:36:7c:6d: 41:46:ea:41:d3:b7:d8:dc:54:e5:f2:05:51:c1:e2: d1:5e:1a:4c:f0:d8:03:a1:d7:d3:15:73:bd:25:7d: 1f:03:72:c4:e3:46:dc:7e:3a:02:4f:be:7a:28:66: 19:3a:b5:5d:e9:76:c2:71:c8:96:da:ff:0b:d4:1f: a3:af:b4:b9:e2:65:f4:57:52:20:74:67:6f:52:67: 3c:6a:26:5c:4f:95:b0:b3:97:3c:7b:08:29:1d:6d: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CF:89:BA:17:5F:D4:CD:54:B3:10:2B:6F:0E:D9:73:C0:28:4C:BD X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:dd:91:90:7b:77:43:7d:6d:2b:f5:8a:db:5e:69:5d:e8:55: c4:11:4e:40:90:b0:35:b2:24:1a:ea:8e:93:74:44:28:3e:e9: 7f:90:44:cd:d8:cd:c7:01:20:fb:56:2f:c2:27:d8:93:f1:8e: 4c:51:f4:1a:6e:31:96:95:35:65:00:5c:30:0b:32:3c:1c:c8: 13:72:44:bf:90:e3:f7:a4:32:4a:89:f3:65:2f:5e:20:d0:a9: 0c:08:d3:64:dd:c0:7f:e8:df:33:45:27:c3:42:1c:00:2b:c9: 96:de:e4:f0:15:36:08:ee:69:14:14:b8:64:42:c6:79:c8:4f: f8:b3:fa:4f:5f:28:95:c2:4e:9b:18:0f:d8:67:25:6f:a1:fc: 5f:cb:92:0d:39:3f:f0:34:1e:ce:2e:d7:c3:1e:9d:7b:69:20: 18:d8:e3:a8:bf:9e:e4:24:bb:d1:37:bb:09:18:2b:b7:f5:7b: 15:bb:3d:07:1b:89:0a:1c:4b:15:e4:af:86:2f:66:50:c6:0b: 99:c7:d6:5d:02:07:8c:6a:57:52:80:02:99:2c:15:4e:ae:95: 90:d8:c2:06:b7:5c:62:d3:59:88:f6:66:77:aa:19:20:77:2b: c9:9c:e0:df:ae:cd:0e:63:40:f5:81:54:04:51:a5:72:27:ae: ae:26:58:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF MDJBOUE3QTQwHhcNMjUwNjEzMDMzNzI4WhcNMjUwNjIwMDMzNzI4WjAYMRYwFAYD VQQDEw02ODRiOWNmOC01NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt94BWGzSBSp+dY3rAWVjhxI8SOm6Z84aUUkzhBPEZ4CFw65/1lmHRvOhESDv w4/VB3NekVCV88IUkC23hlDARsi9luxMv48yXXkAq+fhmVEvrOIv+2ECrtkCrD5n brV2SWbuzR2r2a8hA+QYZ+NGbTcKrHE0P++XEsNXC2MO6q+Z/8zaiL5dS+A9yYr0 2mRGLWbFnQzg4xJtyxE9Xglr5v02fG1BRupB07fY3FTl8gVRweLRXhpM8NgDodfT FXO9JX0fA3LE40bcfjoCT756KGYZOrVd6XbCcciW2v8L1B+jr7S54mX0V1IgdGdv Umc8aiZcT5Wws5c8ewgpHW22JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfPiboX X9TNVLMQK28O2XPAKEy9MB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2 QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm YmFTdU50bmdERVRnS3BwNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3ZGQe3dDfW0r9YrbXmld6FXEEU5AkLA1siQa6o6TdEQoPul/kETN 2M3HASD7Vi/CJ9iT8Y5MUfQabjGWlTVlAFwwCzI8HMgTckS/kOP3pDJKifNlL14g 0KkMCNNk3cB/6N8zRSfDQhwAK8mW3uTwFTYI7mkUFLhkQsZ5yE/4s/pPXyiVwk6b GA/YZyVvofxfy5INOT/wNB7OLtfDHp17aSAY2OOov57kJLvRN7sJGCu39XsVuz0H G4kKHEsV5K+GL2ZQxguZx9ZdAgeMaldSgAKZLBVOrpWQ2MIGt1xi01mI9mZ3qhkg dyvJnODfrs0OY0D1gVQEUaVyJ66uJljc -----END CERTIFICATE-----Generated at Sat Jun 14 22:23:18 2025 by rpki-client