$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft File: LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft (raw, json) Hash identifier: dwHzGoa2VbMha/pdvtr82PwAfMa67QZpmO7vZsKJMDk= Subject key identifier: F1:61:9C:5A:11:37:6F:5A:2B:B6:55:8D:98:DA:74:88:5C:89:8B:BB Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft Manifest number: 0B24 Signing time: Tue 10 Jun 2025 19:13:27 +0000 Manifest this update: Tue 10 Jun 2025 19:13:26 +0000 Manifest next update: Tue 17 Jun 2025 19:13:26 +0000 Files and hashes: 1: LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl (hash: dis5YLWB7PYhtnzuoXALaks0typKsZrJ1IDoG0gSzmY=) 2: 155B355E414311EE8E969116C4F9AE02.roa (hash: 8n8jzkGbayepgQzEpsL65F4oyNOM3A+zDOLQR9DNID8=) 3: 1629BA5A414311EE8E969116C4F9AE02.roa (hash: KzwFd8PDenGf+ZwF13ldlpLL32AHpZJ+BkfX9UFd2E8=) 4: 953250CAE90011EB8DE96E50C4F9AE02.roa (hash: 1/sB6pu/nvBS4QJYppsZekVqlkIQlRDFcO4hqm31NTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Jun 10 19:13:26 2025 GMT Not After : Jun 17 19:13:26 2025 GMT Subject: CN=684883d6-b594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:b3:97:f8:ee:d1:89:4a:ad:59:0c:74:1e: a9:2e:c8:ce:9b:d8:a4:96:af:9e:7d:44:94:39:fc: 92:8c:2a:05:81:d4:c6:32:f9:76:41:23:33:e8:8b: 10:6b:ec:9b:4b:04:81:c2:64:68:3d:42:38:30:cb: dc:7b:f7:28:b2:64:df:60:d3:60:29:0d:00:c9:fe: 17:65:14:5f:f3:c3:51:75:91:9e:42:97:23:89:b0: 37:c4:57:f2:12:c3:43:c0:7d:2c:59:40:79:86:81: 01:d1:f5:ad:4a:68:12:fb:32:ba:8d:14:11:8f:8e: 20:03:c7:70:16:8a:11:df:16:4d:66:cc:1a:e5:01: 36:eb:b1:a9:e9:7b:d6:0d:9e:16:ff:d0:3c:31:dc: 1f:ae:d8:6d:c9:ad:89:04:af:0b:25:f3:a8:eb:3b: 26:b5:8e:66:7d:92:80:f4:b5:5d:4c:bd:b6:5d:33: f2:10:83:b6:b3:71:a0:cd:a0:d8:f7:f2:79:47:63: fd:e3:84:80:b9:77:4d:9a:bb:8d:88:c9:c7:ec:c3: d0:e4:1c:a3:46:a1:7b:f4:ee:3d:5a:a8:8e:37:54: 53:97:be:89:0e:f6:42:89:3c:62:87:a8:67:7f:43: d1:64:0f:02:ee:9f:e3:ba:b5:2c:99:a3:14:d1:72: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:9C:5A:11:37:6F:5A:2B:B6:55:8D:98:DA:74:88:5C:89:8B:BB X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:41:93:47:25:82:3b:6f:8d:b1:c6:d9:44:66:46:4d:01:c7: c0:e9:3d:08:4e:4c:f9:9f:90:ab:da:b9:8d:ba:3b:cb:0e:de: e4:c4:ce:3a:0e:05:19:dc:8d:f2:f1:f3:4f:a2:28:95:2a:87: 8b:67:4f:a8:39:50:a5:a5:dc:e8:f5:d7:78:d3:44:6f:53:95: 38:d7:da:69:fc:a4:93:55:c1:8e:1b:19:e6:fe:b1:1e:9d:1b: 44:84:49:88:c5:fe:a5:af:e9:dd:0f:12:39:74:74:e6:6d:26: e6:61:e6:8e:23:42:c3:03:05:9d:34:68:03:2e:bd:29:27:5d: 33:fc:e8:95:50:4b:59:9f:8f:a5:43:53:42:de:20:bb:97:2c: 27:a3:fa:97:2d:7d:b3:ef:76:e9:2b:c0:df:89:13:73:e5:fb: 7c:e9:b6:6b:6e:b0:89:95:8b:83:30:9c:05:d5:2d:f3:0b:70: 17:90:7a:3d:ae:96:86:9c:3b:73:ee:ef:10:b9:de:62:b4:c7: 03:4a:38:73:38:08:5c:e8:f6:28:5e:53:a0:9e:6c:7f:21:74: 64:c6:bd:db:53:3a:87:e7:40:9d:0b:d1:22:0a:b1:85:01:9d: ba:24:0f:cb:ce:11:e7:55:04:52:06:09:88:bc:99:bd:f7:5a: f5:9f:28:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjUwNjEwMTkxMzI2WhcNMjUwNjE3MTkxMzI2WjAYMRYwFAYD VQQDEw02ODQ4ODNkNi1iNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxqzl/ju0YlKrVkMdB6pLsjOm9iklq+efUSUOfySjCoFgdTGMvl2QSMz6IsQ a+ybSwSBwmRoPUI4MMvce/cosmTfYNNgKQ0Ayf4XZRRf88NRdZGeQpcjibA3xFfy EsNDwH0sWUB5hoEB0fWtSmgS+zK6jRQRj44gA8dwFooR3xZNZswa5QE267Gp6XvW DZ4W/9A8Mdwfrthtya2JBK8LJfOo6zsmtY5mfZKA9LVdTL22XTPyEIO2s3GgzaDY 9/J5R2P944SAuXdNmruNiMnH7MPQ5ByjRqF79O49WqiON1RTl76JDvZCiTxih6hn f0PRZA8C7p/jurUsmaMU0XKeAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFhnFoR N29aK7ZVjZjadIhciYu7MB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTE5QS8wNDkwOTA5QTQzMUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1Hdjhm N1Zpd18wdFlQYzlld2FOMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+QZNHJYI7b42xxtlEZkZNAcfA6T0ITkz5n5Cr2rmNujvLDt7kxM46 DgUZ3I3y8fNPoiiVKoeLZ0+oOVClpdzo9dd400RvU5U419pp/KSTVcGOGxnm/rEe nRtEhEmIxf6lr+ndDxI5dHTmbSbmYeaOI0LDAwWdNGgDLr0pJ10z/OiVUEtZn4+l Q1NC3iC7lywno/qXLX2z73bpK8DfiRNz5ft86bZrbrCJlYuDMJwF1S3zC3AXkHo9 rpaGnDtz7u8Qud5itMcDSjhzOAhc6PYoXlOgnmx/IXRkxr3bUzqH50CdC9EiCrGF AZ26JA/LzhHnVQRSBgmIvJm991r1nyhx -----END CERTIFICATE-----Generated at Wed Jun 11 23:53:25 2025 by rpki-client