$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json) Hash identifier: geFl3bigaRU7cpCGRz2K3K4OU8iuRjPdZNl8OXWWpEs= Subject key identifier: 06:B3:AF:6A:84:C9:D9:D4:5C:11:C2:75:C1:75:9D:CA:BB:FF:32:D9 Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft Manifest number: 06 Signing time: Sat 31 May 2025 07:42:16 +0000 Manifest this update: Sat 31 May 2025 07:42:15 +0000 Manifest next update: Sat 07 Jun 2025 07:42:15 +0000 Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: sGAb+EKwj3x1yqzKLvY/yJsY7+MBy7Q6g2BHEQbFUcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Validity Not Before: May 31 07:42:15 2025 GMT Not After : Jun 7 07:42:15 2025 GMT Subject: CN=683ab2d8-2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:05:39:f2:6e:8e:5a:4a:86:06:6d:13:0b: 88:67:cb:34:16:23:85:f6:ff:60:28:12:9f:55:d5: 02:de:b6:42:12:d6:8e:24:2f:ec:d0:32:cb:65:48: 69:f7:28:14:da:67:e9:46:03:b7:2a:a3:b7:2e:93: e2:65:1e:e3:2a:cb:be:09:2d:dd:d6:96:53:1f:de: 82:fc:e7:a0:c1:8e:3a:99:a7:af:13:b6:36:ee:24: 0b:39:9c:a6:71:5b:01:f9:58:ca:9a:50:57:d1:73: a2:1a:af:76:7e:b2:4c:d8:60:a7:1b:cc:a8:01:69: 4c:f5:cd:be:1d:ed:2f:ff:a3:d9:11:f8:71:df:7b: 7d:1e:8e:4c:72:e3:1d:47:d6:43:69:25:e9:2a:b8: 5d:d7:fd:b6:e9:05:ee:9c:4a:38:f5:4b:74:5a:0f: 2d:51:13:d8:ec:89:f7:46:73:97:98:b4:f6:95:07: b0:a0:2f:7f:d2:59:18:e6:8f:3a:9a:9d:55:ad:39: 7d:a8:b4:79:3e:a0:e8:e3:95:32:8c:86:9c:ed:de: a0:f3:9e:36:bb:4f:dc:db:a5:b6:19:c0:d4:79:8b: 54:49:e5:2e:ae:ed:7b:53:f3:6a:f8:2c:f3:8b:4b: 38:95:65:4c:ab:ee:15:1d:3f:c1:70:df:1d:94:e1: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B3:AF:6A:84:C9:D9:D4:5C:11:C2:75:C1:75:9D:CA:BB:FF:32:D9 X509v3 Authority Key Identifier: keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:51:76:4d:2a:77:61:f6:01:98:18:bd:f7:9c:a2:75:fa:bc: 63:3e:60:3e:8a:cf:ae:4b:26:3a:62:2f:ad:b1:eb:5c:0f:d5: 6d:6d:7b:63:38:e6:77:e6:c4:ac:98:16:08:6c:39:2c:6d:08: 89:e8:44:70:7d:6b:b5:0d:0f:48:89:7d:5d:c0:b7:35:d6:7b: 81:cc:91:00:8b:60:70:e9:74:65:d1:28:95:7c:1a:15:84:35: 24:c9:b0:4c:58:61:17:37:d5:23:ed:69:3e:bd:da:7b:70:63: 02:c8:66:62:9f:dc:0e:38:79:8e:cb:64:8f:2f:3c:8c:bd:7b: 3c:3d:01:17:24:ff:18:b6:8c:d9:4d:d1:5d:01:a0:ed:07:0d: 4c:c9:0b:8f:48:dd:1d:06:c6:d0:a7:93:d7:26:f3:90:30:7c: f1:bc:be:94:55:74:9a:06:6f:26:05:d6:5f:2f:d0:c9:67:08: 2d:33:6c:75:2c:35:cd:e2:d5:97:12:8b:bf:83:8d:dd:60:fd: 06:f2:50:4c:4f:59:b0:e5:b4:b7:03:32:5e:e3:0c:4e:25:00: 27:a7:2a:8a:8b:00:96:69:5b:e2:a1:7c:8f:aa:95:cb:45:50: e6:8a:1e:4c:ec:08:b2:ac:13:87:70:41:63:bd:02:1b:43:4c: a5:a4:2e:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTVCMzExMC8GA1UEBRMoMkQwMUExOTQyQkFGRDlEM0IzMUREQkZFNzUzMjRCQUQ2 MkI2MDk1ODAeFw0yNTA1MzEwNzQyMTVaFw0yNTA2MDcwNzQyMTVaMBgxFjAUBgNV BAMTDTY4M2FiMmQ4LTJmNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjSAU58m6OWkqGBm0TC4hnyzQWI4X2/2AoEp9V1QLetkIS1o4kL+zQMstlSGn3 KBTaZ+lGA7cqo7cuk+JlHuMqy74JLd3WllMf3oL856DBjjqZp68TtjbuJAs5nKZx WwH5WMqaUFfRc6Iar3Z+skzYYKcbzKgBaUz1zb4d7S//o9kR+HHfe30ejkxy4x1H 1kNpJekquF3X/bbpBe6cSjj1S3RaDy1RE9jsifdGc5eYtPaVB7CgL3/SWRjmjzqa nVWtOX2otHk+oOjjlTKMhpzt3qDznja7T9zbpbYZwNR5i1RJ5S6u7XtT82r4LPOL SziVZUyr7hUdP8Fw3x2U4V37AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBrOvaoTJ 2dRcEcJ1wXWdyrv/MtkwHwYDVR0jBBgwFoAULQGhlCuv2dOzHdv+dTJLrWK2CVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NUIzLzI2QjFFMThBMzFF RDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNW Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFFHaGxDdXYyZE96SGR2LWRUSkxyV0syQ1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NUIzLzI2QjFFMThBMzFFRDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRP ekhkdi1kVEpMcldLMkNWZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1Rdk0qd2H2AZgYvfeconX6vGM+YD6Kz65LJjpiL62x61wP1W1te2M4 5nfmxKyYFghsOSxtCInoRHB9a7UND0iJfV3AtzXWe4HMkQCLYHDpdGXRKJV8GhWE NSTJsExYYRc31SPtaT692ntwYwLIZmKf3A44eY7LZI8vPIy9ezw9ARck/xi2jNlN 0V0BoO0HDUzJC49I3R0GxtCnk9cm85AwfPG8vpRVdJoGbyYF1l8v0MlnCC0zbHUs Nc3i1ZcSi7+Djd1g/QbyUExPWbDltLcDMl7jDE4lACenKoqLAJZpW+KhfI+qlctF UOaKHkzsCLKsE4dwQWO9AhtDTKWkLmU= -----END CERTIFICATE-----Generated at Sat May 31 17:23:40 2025 by rpki-client