$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: mD1qQhmn9H2TqpJOINK0CfIWPC3kRhwkGHI2q+YJZec= Subject key identifier: 7D:8A:6A:9A:14:1A:A1:4F:09:F2:48:11:E7:C8:3C:82:0D:95:F6:8D Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: CF Signing time: Wed 11 Jun 2025 05:04:42 +0000 Manifest this update: Wed 11 Jun 2025 05:04:41 +0000 Manifest next update: Wed 18 Jun 2025 05:04:41 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: bmPaDpdok4hxgnESdq0ajrJ+5wzybxq9hnAL6Ci2Tac=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: Jun 11 05:04:41 2025 GMT Not After : Jun 18 05:04:41 2025 GMT Subject: CN=68490e6a-f70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ea:90:83:58:c4:8a:d3:ff:50:42:cb:00:4f: 8a:d7:bc:b1:31:9e:6f:63:62:37:5d:55:1c:fb:d9: 40:b9:13:92:69:d9:c3:39:5f:bf:94:cd:bb:92:6b: 0e:c0:91:f4:21:d8:de:36:18:02:db:21:48:1d:a2: 49:5d:e3:d8:f2:b2:a4:44:95:0f:68:bf:02:74:0d: 11:70:e5:d2:3b:ea:8f:de:8a:07:96:16:63:fc:bd: 00:ab:2c:db:e7:b0:d5:c0:a7:90:7c:4e:b0:3d:a1: 03:3a:6a:b2:5e:dd:3f:c4:f2:ed:21:33:cc:41:59: 01:c3:fc:52:83:5c:3f:01:cc:6b:9f:ee:09:47:e2: 04:5d:96:0d:48:27:97:e9:28:a2:cb:9b:9f:ff:17: 7a:32:13:9c:66:5c:fd:6e:9d:07:55:95:41:0c:a1: 27:3a:78:3b:ed:50:e4:50:e8:36:6a:9b:2a:3d:21: 9b:97:c8:9d:be:d5:ac:df:6e:38:c7:32:23:9a:8c: ff:8f:23:b0:34:45:8f:15:a3:d9:9b:b7:ae:31:e7: 0b:66:14:f0:ad:c4:eb:b7:95:ab:0d:70:4f:37:4b: f9:db:1d:b1:d1:5d:54:fd:6f:48:bc:94:b9:8e:a5: 2f:67:e6:97:cb:14:4f:9b:80:b8:c8:be:a8:a2:51: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8A:6A:9A:14:1A:A1:4F:09:F2:48:11:E7:C8:3C:82:0D:95:F6:8D X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:85:cd:5e:90:fe:ae:2d:7e:fb:cd:59:41:c8:0c:b5:8e:a4: 4c:0c:7b:c0:2e:01:c8:05:14:54:0f:b2:41:30:73:ab:f9:9a: 46:f6:99:f1:91:ad:86:af:95:13:64:9c:ae:19:11:98:40:0c: e5:f4:2e:c0:6d:ff:a8:c8:77:95:ea:93:10:ce:dd:33:f7:48: 06:d2:6e:9d:3d:f6:6f:11:26:f8:3f:e8:cc:3d:ad:1d:51:4d: c3:6b:f4:a8:8e:e9:24:8d:f0:45:39:66:3e:6c:94:12:90:69: de:87:43:45:93:46:b3:3d:5e:e6:d4:ca:7f:23:a9:48:ca:0f: 1e:a2:75:d1:cd:33:a3:52:cc:0c:bd:2c:ad:90:21:9f:64:b1: 05:d4:d5:ce:df:71:1b:1a:0e:f0:18:75:be:f6:98:85:cf:9d: 29:2b:07:ed:ff:d4:dc:8c:2d:12:0e:f7:15:2f:4c:46:ab:f7: 40:b5:3c:35:40:96:3f:6f:5c:b0:7f:85:d4:6c:e6:3e:51:a7: 91:d9:f4:36:0b:69:fd:23:70:b5:ee:d0:0d:3a:e8:78:62:40: 76:3e:f5:96:dc:c0:6e:21:8a:67:2b:9c:df:e6:28:01:86:84: 0e:6c:35:3d:85:f0:ae:9e:df:be:be:b6:33:9e:77:ff:96:f4: 10:3b:0d:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNjExMDUwNDQxWhcNMjUwNjE4MDUwNDQxWjAYMRYwFAYD VQQDEw02ODQ5MGU2YS1mNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+qQg1jEitP/UELLAE+K17yxMZ5vY2I3XVUc+9lAuROSadnDOV+/lM27kmsO wJH0IdjeNhgC2yFIHaJJXePY8rKkRJUPaL8CdA0RcOXSO+qP3ooHlhZj/L0Aqyzb 57DVwKeQfE6wPaEDOmqyXt0/xPLtITPMQVkBw/xSg1w/Acxrn+4JR+IEXZYNSCeX 6Siiy5uf/xd6MhOcZlz9bp0HVZVBDKEnOng77VDkUOg2apsqPSGbl8idvtWs3244 xzIjmoz/jyOwNEWPFaPZm7euMecLZhTwrcTrt5WrDXBPN0v52x2x0V1U/W9IvJS5 jqUvZ+aXyxRPm4C4yL6oolELpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2KapoU GqFPCfJIEefIPIINlfaNMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYhc1ekP6uLX77zVlByAy1jqRMDHvALgHIBRRUD7JBMHOr+ZpG9pnx ka2Gr5UTZJyuGRGYQAzl9C7Abf+oyHeV6pMQzt0z90gG0m6dPfZvESb4P+jMPa0d UU3Da/SojukkjfBFOWY+bJQSkGneh0NFk0azPV7m1Mp/I6lIyg8eonXRzTOjUswM vSytkCGfZLEF1NXO33EbGg7wGHW+9piFz50pKwft/9TcjC0SDvcVL0xGq/dAtTw1 QJY/b1ywf4XUbOY+UaeR2fQ2C2n9I3C17tANOuh4YkB2PvWW3MBuIYpnK5zf5igB hoQObDU9hfCunt++vrYznnf/lvQQOw2D -----END CERTIFICATE-----Generated at Wed Jun 11 08:12:57 2025 by rpki-client