$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft File: l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json) Hash identifier: OrWHAtos+SvpVMD1bGt/qOukRJ1CsVYyTO8D6TClX3Q= Subject key identifier: E2:78:16:82:74:34:95:93:FE:34:A7:3E:F6:55:5C:32:3C:79:C8:85 Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft Manifest number: 0C71 Signing time: Wed 04 Jun 2025 18:14:41 +0000 Manifest this update: Wed 04 Jun 2025 18:14:41 +0000 Manifest next update: Wed 11 Jun 2025 18:14:41 +0000 Files and hashes: 1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: LhGSy7Y9TU6pwbnJ8k8RWYSGXuUhToSprSW5gy3QtX8=) 2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Jun 4 18:14:41 2025 GMT Not After : Jun 11 18:14:41 2025 GMT Subject: CN=68408d11-837d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:c0:88:4f:11:00:fd:b8:de:5b:dc:bd:5f: 07:a2:f1:f4:f8:56:f1:ce:4c:60:c3:cc:0a:5e:8c: 21:d6:17:3d:21:65:34:a6:5d:74:8b:f1:56:d4:9c: 36:18:ab:11:4b:8b:0d:f3:34:04:f7:97:8f:64:4e: 82:42:e0:a0:04:cc:f7:fa:42:24:12:6d:32:0b:19: 4b:80:75:fc:be:f4:c8:d4:f2:ea:4f:dd:cb:19:25: 02:8d:79:51:0e:71:fe:5c:c0:de:24:de:3b:17:9f: d6:f1:e2:ca:e8:86:10:60:e6:8a:1d:22:e3:3d:8a: 6e:1b:1a:7d:29:29:71:6b:79:c1:c5:dd:3c:a4:d4: 8a:1f:44:63:36:45:f8:a6:48:fb:59:d6:b6:ac:a2: 5d:b7:7e:46:63:94:51:6f:f9:e2:f1:27:be:56:f0: e2:09:68:ec:4b:e5:b7:78:f2:60:01:1a:a2:6a:e1: 69:c6:05:d5:e0:77:c2:24:86:59:da:39:6c:f3:51: 63:56:56:83:23:c4:0a:f4:4f:55:0d:3a:fd:74:61: 03:b0:0e:24:6c:dd:72:a0:ca:6f:73:ac:19:3c:ec: 5f:6f:ca:b2:39:a9:84:2f:b3:04:71:6b:df:1b:c3: 42:c6:96:5b:72:7f:3a:a8:e8:6b:d7:7d:e9:6e:0e: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:16:82:74:34:95:93:FE:34:A7:3E:F6:55:5C:32:3C:79:C8:85 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d9:86:41:94:03:be:e5:99:ce:33:1c:61:ff:00:ea:f2:6c: 94:67:07:87:21:a2:8d:72:73:5d:58:f8:de:d2:3e:a5:16:c6: 39:84:f6:dc:c8:47:57:60:54:88:e8:f4:8a:09:55:00:77:0f: a3:5f:98:c9:d5:f9:02:96:4a:d6:db:a8:ae:33:22:73:42:78: fe:5a:ad:94:b7:93:37:41:30:4d:b8:a1:ef:7a:c9:b8:55:d5: 32:9b:4a:d6:2f:6b:9b:59:c4:2f:48:b6:ab:17:8b:73:d9:02: 68:07:a0:47:e0:0c:06:62:72:6b:03:95:75:ab:72:68:d8:be: 60:73:69:be:ad:31:35:49:2a:77:7b:00:05:75:16:e6:41:25: 17:06:87:37:6f:90:1e:2a:eb:3f:c4:d0:73:5c:58:09:19:99: 03:18:dc:9d:43:96:e2:82:62:33:16:54:6a:b5:af:ba:50:25: 33:dc:91:e3:30:6f:c7:ba:81:da:f6:46:b6:e7:2a:89:ac:d6: b3:5e:a5:79:52:8e:e5:16:c6:d9:bf:29:ec:01:40:ae:e0:4b: 21:0f:28:a9:ca:34:bc:ab:eb:31:24:b4:46:30:72:fc:ea:03: f2:56:40:98:d1:c5:9b:84:11:a7:b6:c1:94:42:cb:eb:79:ae: 0c:3b:ab:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUwNjA0MTgxNDQxWhcNMjUwNjExMTgxNDQxWjAYMRYwFAYD VQQDEw02ODQwOGQxMS04MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NzAiE8RAP243lvcvV8HovH0+Fbxzkxgw8wKXowh1hc9IWU0pl10i/FW1Jw2 GKsRS4sN8zQE95ePZE6CQuCgBMz3+kIkEm0yCxlLgHX8vvTI1PLqT93LGSUCjXlR DnH+XMDeJN47F5/W8eLK6IYQYOaKHSLjPYpuGxp9KSlxa3nBxd08pNSKH0RjNkX4 pkj7Wda2rKJdt35GY5RRb/ni8Se+VvDiCWjsS+W3ePJgARqiauFpxgXV4HfCJIZZ 2jls81FjVlaDI8QK9E9VDTr9dGEDsA4kbN1yoMpvc6wZPOxfb8qyOamEL7MEcWvf G8NCxpZbcn86qOhr133pbg6KcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ4FoJ0 NJWT/jSnPvZVXDI8eciFMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRFNi8yQjNCMkZDRUZDNkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpU Q093bWlGWFZZOXE1R0dNRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO2YZBlAO+5ZnOMxxh/wDq8myUZweHIaKNcnNdWPje0j6lFsY5hPbc yEdXYFSI6PSKCVUAdw+jX5jJ1fkClkrW26iuMyJzQnj+Wq2Ut5M3QTBNuKHvesm4 VdUym0rWL2ubWcQvSLarF4tz2QJoB6BH4AwGYnJrA5V1q3Jo2L5gc2m+rTE1SSp3 ewAFdRbmQSUXBoc3b5AeKus/xNBzXFgJGZkDGNydQ5bigmIzFlRqta+6UCUz3JHj MG/HuoHa9ka25yqJrNazXqV5Uo7lFsbZvynsAUCu4EshDyipyjS8q+sxJLRGMHL8 6gPyVkCY0cWbhBGntsGUQsvrea4MO6uz -----END CERTIFICATE-----Generated at Fri Jun 6 17:01:46 2025 by rpki-client