$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: keQy7gLA1hTiI6eIrVcoxGR1uCezXhBSqp7eI/kmMF8= Subject key identifier: 1F:AE:9C:55:1B:C7:D3:57:06:ED:B9:A1:5B:8E:84:89:54:C5:02:C5 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C57 Signing time: Tue 10 Jun 2025 18:24:35 +0000 Manifest this update: Tue 10 Jun 2025 18:24:34 +0000 Manifest next update: Tue 17 Jun 2025 18:24:34 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: Zul+gQtu1olUrrbNE8iBBRkRp1VH4rMHRyTU34KmVV0=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Jun 10 18:24:34 2025 GMT Not After : Jun 17 18:24:34 2025 GMT Subject: CN=68487863-df01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:15:06:04:13:7f:dc:88:9e:11:f2:5f:ef: 52:0c:a5:7a:72:f4:21:2c:71:f7:31:50:9d:64:c6: 42:90:39:96:d8:67:30:5d:e1:fd:8c:a1:f9:a4:44: 40:af:fc:e1:c0:7b:6e:40:91:6f:1d:53:b0:5f:75: 5d:dc:ff:39:01:22:93:0b:ce:bd:52:73:44:32:7b: 2d:e9:fb:c4:a4:37:b1:4d:94:6e:d1:91:a9:fc:48: 13:1e:67:fe:d3:6d:d9:4b:5b:ce:73:1a:bd:b4:43: 5d:c7:7e:1c:3b:83:4f:96:96:b5:55:58:84:3b:13: c7:89:90:b1:41:2d:f2:13:70:50:32:7b:ab:f0:15: d2:46:7c:54:ab:17:23:01:05:31:18:28:b5:a5:96: 16:fa:e0:52:a5:a3:1f:0f:64:b9:dc:3f:ed:60:23: 89:ae:87:0b:1f:3e:17:3c:07:b1:b5:20:94:de:8e: 09:93:06:43:18:d9:b9:78:c0:8c:d3:75:a2:23:93: ee:7f:11:9b:84:fd:b6:92:a5:f3:c6:9d:d3:96:71: 8d:8a:b0:56:aa:fe:6c:6c:80:be:8d:22:4e:ab:b9: 0d:b3:6d:a4:0c:a7:df:cf:ba:02:50:4e:11:45:a7: d2:f9:d3:84:3b:3f:c7:19:63:2f:35:5b:7e:d5:08: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:9C:55:1B:C7:D3:57:06:ED:B9:A1:5B:8E:84:89:54:C5:02:C5 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:eb:10:02:ce:9d:fa:18:e0:a4:7d:d2:b7:08:76:40:e6:6d: 9c:38:08:c6:74:a3:49:f2:11:b1:59:c0:da:f9:cb:56:ad:fd: 52:65:5a:6c:e1:ff:7d:bc:f5:94:ae:47:b0:35:f4:dc:cb:53: 46:5a:a3:40:53:d5:0f:2c:0b:d8:b9:d1:37:a9:68:a7:b8:26: ee:6a:f8:d0:6e:2f:83:93:56:ab:e4:a0:a6:4c:f2:52:14:cb: 0c:e1:d6:06:40:3e:57:a0:9f:b9:29:dd:90:ad:4e:42:98:4e: e3:35:c3:ab:a2:e7:b4:76:2a:97:a8:dc:45:c5:2f:e8:61:68: 4c:aa:fb:75:d5:47:3b:b3:ad:26:b2:eb:d4:fd:2b:66:b1:42: 12:d4:3e:5f:4a:33:06:64:7a:0c:6c:22:14:df:fb:e1:dd:5f: 33:bb:28:27:ee:cf:c2:78:6e:18:57:30:7b:d2:bb:91:6c:e1: 5b:17:63:d2:22:d7:b2:d7:d3:c2:9d:89:43:fe:ca:39:aa:26: e8:b5:54:f5:90:a2:70:7a:49:8a:90:81:be:03:59:17:f7:22: b8:7b:bb:4e:de:fc:f8:c1:e3:b9:ce:e2:65:6e:3b:76:07:52: 2a:eb:db:40:d2:8d:3d:25:ab:4b:80:b2:ab:c8:41:d8:0c:c4: 84:4f:bc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwNjEwMTgyNDM0WhcNMjUwNjE3MTgyNDM0WjAYMRYwFAYD VQQDEw02ODQ4Nzg2My1kZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6MVBgQTf9yInhHyX+9SDKV6cvQhLHH3MVCdZMZCkDmW2GcwXeH9jKH5pERA r/zhwHtuQJFvHVOwX3Vd3P85ASKTC869UnNEMnst6fvEpDexTZRu0ZGp/EgTHmf+ 023ZS1vOcxq9tENdx34cO4NPlpa1VViEOxPHiZCxQS3yE3BQMnur8BXSRnxUqxcj AQUxGCi1pZYW+uBSpaMfD2S53D/tYCOJrocLHz4XPAextSCU3o4JkwZDGNm5eMCM 03WiI5PufxGbhP22kqXzxp3TlnGNirBWqv5sbIC+jSJOq7kNs22kDKffz7oCUE4R RafS+dOEOz/HGWMvNVt+1QhMRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+unFUb x9NXBu25oVuOhIlUxQLFMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL6xACzp36GOCkfdK3CHZA5m2cOAjGdKNJ8hGxWcDa+ctWrf1SZVps 4f99vPWUrkewNfTcy1NGWqNAU9UPLAvYudE3qWinuCbuavjQbi+Dk1ar5KCmTPJS FMsM4dYGQD5XoJ+5Kd2QrU5CmE7jNcOroue0diqXqNxFxS/oYWhMqvt11Uc7s60m suvU/StmsUIS1D5fSjMGZHoMbCIU3/vh3V8zuygn7s/CeG4YVzB70ruRbOFbF2PS Itey19PCnYlD/so5qibotVT1kKJwekmKkIG+A1kX9yK4e7tO3vz4weO5zuJlbjt2 B1Iq69tA0o09JatLgLKryEHYDMSET7zI -----END CERTIFICATE-----Generated at Wed Jun 11 22:29:46 2025 by rpki-client