$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: uhCGLfTTv1wGSQKTjSj0oLn+3mIP/6ComBEAWGSodNY= Subject key identifier: 8F:59:D3:5B:1A:02:32:09:24:C2:1C:90:25:25:78:5C:46:D3:8F:D2 Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 0671 Signing time: Fri 30 May 2025 22:35:28 +0000 Manifest this update: Fri 30 May 2025 22:35:27 +0000 Manifest next update: Fri 06 Jun 2025 22:35:27 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: PhwSmt2eeznn+PdnYC8FUUs7tVtS00mcBU8lb+pIBXk=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: May 30 22:35:27 2025 GMT Not After : Jun 6 22:35:27 2025 GMT Subject: CN=683a32af-7f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:23:60:94:72:7b:01:c9:55:c7:6b:31:b6: 82:6b:29:d1:0f:65:9f:cf:b2:34:18:6a:63:41:7e: df:79:cd:f4:aa:9b:d3:37:07:8d:5e:71:72:af:e2: 86:c7:d4:25:ea:a4:df:4c:8b:2c:08:c1:45:b9:c3: 35:cc:e8:58:cc:a0:9d:66:c7:df:df:69:31:50:61: b3:fe:6a:ce:21:d1:d1:06:93:c7:90:21:f9:43:3e: ca:41:30:1f:6f:e7:1d:a0:67:13:c8:1a:4f:d3:6e: 6c:44:a8:23:cb:5e:4f:ed:f2:9b:e9:30:5f:39:4e: 82:2b:25:a9:f2:d0:bd:c8:f5:a9:e6:83:b6:01:80: 2d:45:68:78:98:1c:c3:d7:48:17:26:ca:19:f5:d6: 32:48:02:b7:21:67:42:02:64:92:57:40:f1:1e:8b: f3:33:d5:02:6a:ef:5c:50:24:6a:0f:52:40:1e:45: fd:17:bf:35:21:33:1b:f6:69:c1:ac:83:1c:2e:57: 15:67:91:26:53:0f:01:d2:ca:2f:a8:dd:1f:69:64: 0e:63:69:53:68:c7:25:ec:6f:97:34:aa:78:3a:01: 1b:c6:00:ef:ed:67:c6:4d:be:5d:ae:58:a9:87:a2: 9b:08:81:11:ed:d8:48:9b:9c:5b:ac:53:c0:78:02: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:59:D3:5B:1A:02:32:09:24:C2:1C:90:25:25:78:5C:46:D3:8F:D2 X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:72:c5:ea:70:30:86:92:c8:81:f1:53:e3:e6:69:21:ed:8e: 67:fc:74:52:84:f2:c4:3a:af:f3:54:c7:cc:bb:b2:44:b1:9c: 9a:5f:10:06:7d:77:e5:84:75:6c:de:26:ae:ab:ea:c6:70:c5: 7b:8b:85:f8:f4:69:ef:f6:d1:4c:a8:04:47:84:bc:e7:52:93: d1:89:94:58:73:58:9e:cd:83:cb:0c:42:3e:e3:b3:7e:ef:c5: b4:e8:74:5e:f1:54:2b:1e:c6:bb:0e:1d:37:1f:f6:bb:3f:a6: 14:61:7c:f2:46:55:8e:d4:d1:19:50:8c:bc:4e:67:02:6c:1a: 2c:dd:61:cb:3d:88:cd:36:4b:11:b1:94:33:fc:f1:6c:3f:a5: db:28:7b:a4:e6:5e:f2:39:64:14:6b:57:e1:6c:27:03:37:11: 6c:ee:55:9c:8d:ea:5e:7a:37:e4:48:97:dc:f1:00:df:8b:7f: 5d:fc:e6:e0:1d:e1:8c:ab:8b:20:7c:02:b7:03:c5:30:ec:94: 1e:bc:1f:d8:d0:f6:36:eb:3d:45:10:11:9d:eb:cd:f6:40:3f: 3a:bf:fb:d0:80:33:c2:3c:f2:b1:78:18:2b:f3:5d:a9:bc:3e: c9:6a:4b:64:c6:77:ac:3c:54:70:d9:cf:e9:5a:c5:97:84:2f: f6:cf:a7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUwNTMwMjIzNTI3WhcNMjUwNjA2MjIzNTI3WjAYMRYwFAYD VQQDEw02ODNhMzJhZi03ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG8jYJRyewHJVcdrMbaCaynRD2Wfz7I0GGpjQX7fec30qpvTNweNXnFyr+KG x9Ql6qTfTIssCMFFucM1zOhYzKCdZsff32kxUGGz/mrOIdHRBpPHkCH5Qz7KQTAf b+cdoGcTyBpP025sRKgjy15P7fKb6TBfOU6CKyWp8tC9yPWp5oO2AYAtRWh4mBzD 10gXJsoZ9dYySAK3IWdCAmSSV0DxHovzM9UCau9cUCRqD1JAHkX9F781ITMb9mnB rIMcLlcVZ5EmUw8B0sovqN0faWQOY2lTaMcl7G+XNKp4OgEbxgDv7WfGTb5drlip h6KbCIER7dhIm5xbrFPAeAJUcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9Z01sa AjIJJMIckCUleFxG04/SMB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBscsXqcDCGksiB8VPj5mkh7Y5n/HRShPLEOq/zVMfMu7JEsZyaXxAG fXflhHVs3iauq+rGcMV7i4X49Gnv9tFMqARHhLznUpPRiZRYc1iezYPLDEI+47N+ 78W06HRe8VQrHsa7Dh03H/a7P6YUYXzyRlWO1NEZUIy8TmcCbBos3WHLPYjNNksR sZQz/PFsP6XbKHuk5l7yOWQUa1fhbCcDNxFs7lWcjepeejfkSJfc8QDfi39d/Obg HeGMq4sgfAK3A8Uw7JQevB/Y0PY26z1FEBGd6832QD86v/vQgDPCPPKxeBgr812p vD7JaktkxnesPFRw2c/pWsWXhC/2z6f3 -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client