$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: xlDXwmOVzQ3QuKE9LYYF8+yJoACMhjL9NTvebfL6gHQ= Subject key identifier: 8C:9A:70:E7:62:2A:30:57:3B:44:06:16:2E:DD:C2:C4:42:60:02:10 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C56 Signing time: Sun 08 Jun 2025 18:18:44 +0000 Manifest this update: Sun 08 Jun 2025 18:18:44 +0000 Manifest next update: Sun 15 Jun 2025 18:18:44 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: yz5ncANvAAQBYEqcZZLqzpjdnfsDxY1Paol65FOQ/cI=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Jun 8 18:18:44 2025 GMT Not After : Jun 15 18:18:44 2025 GMT Subject: CN=6845d404-aa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:04:4c:62:ee:44:1c:11:02:29:7b:fb:b2: ca:03:a2:ff:03:10:81:48:f1:00:be:8c:f4:99:91: 93:d1:c9:90:99:2b:0b:55:1c:d1:55:fd:ec:e8:1b: 17:b9:ab:68:76:d4:b8:92:e1:b6:d1:b0:d1:2f:47: 10:c2:23:27:59:0c:7a:47:45:fc:da:4b:9b:a4:76: df:03:b2:fa:d9:89:aa:52:f4:8c:87:0f:78:74:f7: a7:24:9e:5f:19:08:c6:95:ab:e2:e5:8c:89:94:4a: 62:f9:30:75:1d:0b:85:e7:90:ee:97:48:e0:70:b3: f5:cd:9b:f0:5a:dd:50:c9:b3:30:a1:de:73:61:69: af:f7:64:2d:a9:73:a5:45:14:5f:da:5a:90:30:26: 30:8c:f6:37:e5:55:4f:2c:15:d8:3f:4c:a1:89:64: 59:cd:43:a9:2f:fd:91:f5:c2:d4:b5:24:39:d0:22: 7f:0a:cf:96:19:f9:2e:8f:80:71:fb:97:93:17:4e: dc:94:00:72:53:6b:13:df:6b:39:c1:e5:79:92:8f: d5:67:54:ba:45:49:c2:fc:d6:5d:5c:c0:7c:ec:7c: bb:cd:52:ac:42:db:1e:6b:cb:aa:91:59:5c:c3:d4: 33:d7:00:65:e7:a8:ed:dd:fb:80:24:b5:a9:f2:7c: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9A:70:E7:62:2A:30:57:3B:44:06:16:2E:DD:C2:C4:42:60:02:10 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:9d:87:7a:1c:8e:80:32:18:9e:6c:6a:bd:d0:b4:2a:b8: 33:85:ca:f0:92:6a:40:0a:f8:64:8e:19:eb:5d:d3:a4:89:38: 6e:b9:46:df:6d:b8:f4:ca:e1:8e:23:e8:7a:7a:6d:57:3c:4c: 75:33:52:26:1e:c6:1c:2a:dd:8f:89:4e:f7:5c:29:d2:d8:c0: 56:94:25:34:34:b2:a0:26:79:2d:c4:07:0d:be:aa:44:36:70: 34:3a:c9:05:fd:59:1e:82:9c:73:ac:cb:93:33:bf:1f:b6:45: c1:6a:81:de:d2:df:85:af:56:46:9c:95:2d:1a:bd:e6:f3:28: 7a:03:3e:55:87:3d:3f:16:3c:f5:9e:54:91:04:24:2b:69:9b: 4b:49:d7:0a:7b:91:a6:88:8d:df:11:09:2d:1e:16:88:d8:ba: 08:eb:ac:93:e8:b2:6b:8c:c8:2f:1d:14:a0:3a:7e:6f:4f:10: 9c:4b:24:e8:c1:2a:6c:a7:d9:c0:ac:e6:2b:bf:60:fd:0f:b0: 9a:a5:e4:76:4d:fe:88:1b:67:e7:bd:14:1e:86:31:e8:65:48: 08:41:68:40:45:80:fb:64:eb:c4:87:da:37:cb:d2:26:1d:8c: cb:45:57:b6:48:9d:26:62:1d:6d:42:c5:5d:15:bb:05:5e:2d: 34:3d:3f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwNjA4MTgxODQ0WhcNMjUwNjE1MTgxODQ0WjAYMRYwFAYD VQQDEw02ODQ1ZDQwNC1hYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tQETGLuRBwRAil7+7LKA6L/AxCBSPEAvoz0mZGT0cmQmSsLVRzRVf3s6BsX uatodtS4kuG20bDRL0cQwiMnWQx6R0X82kubpHbfA7L62YmqUvSMhw94dPenJJ5f GQjGlavi5YyJlEpi+TB1HQuF55Dul0jgcLP1zZvwWt1QybMwod5zYWmv92QtqXOl RRRf2lqQMCYwjPY35VVPLBXYP0yhiWRZzUOpL/2R9cLUtSQ50CJ/Cs+WGfkuj4Bx +5eTF07clAByU2sT32s5weV5ko/VZ1S6RUnC/NZdXMB87Hy7zVKsQtsea8uqkVlc w9Qz1wBl56jt3fuAJLWp8nxE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyacOdi KjBXO0QGFi7dwsRCYAIQMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2L52HehyOgDIYnmxqvdC0KrgzhcrwkmpACvhkjhnrXdOkiThuuUbf bbj0yuGOI+h6em1XPEx1M1ImHsYcKt2PiU73XCnS2MBWlCU0NLKgJnktxAcNvqpE NnA0OskF/VkegpxzrMuTM78ftkXBaoHe0t+Fr1ZGnJUtGr3m8yh6Az5Vhz0/Fjz1 nlSRBCQraZtLSdcKe5GmiI3fEQktHhaI2LoI66yT6LJrjMgvHRSgOn5vTxCcSyTo wSpsp9nArOYrv2D9D7CapeR2Tf6IG2fnvRQehjHoZUgIQWhARYD7ZOvEh9o3y9Im HYzLRVe2SJ0mYh1tQsVdFbsFXi00PT8n -----END CERTIFICATE-----Generated at Mon Jun 9 23:41:37 2025 by rpki-client