$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: kb6JSPrezhRs+9ZW7++aeh8S6acby6RP1ColeJxTk/Q= Subject key identifier: 91:C8:8E:CF:2C:77:BB:BA:9F:56:5E:7A:58:5D:83:18:09:89:00:5B Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0701 Signing time: Fri 30 May 2025 22:08:04 +0000 Manifest this update: Fri 30 May 2025 22:08:04 +0000 Manifest next update: Fri 06 Jun 2025 22:08:04 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: ZcvT/Wh+mm/1w/FVrJMa8rJxNxjntlhPYpB3CkHyZPw=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: 4rISf9Z0gDtlAylgqmkLRj4oHpOaisWHbdYvnEyJBHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: May 30 22:08:04 2025 GMT Not After : Jun 6 22:08:04 2025 GMT Subject: CN=683a2c44-0fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:71:c2:45:74:61:17:ad:54:3f:c2:a8:86: 07:00:86:57:07:eb:a0:6d:1f:90:78:ad:77:90:38: 2c:98:86:53:52:82:70:aa:6e:68:91:51:ea:ef:9e: 3e:5f:94:a7:7d:81:f4:aa:ed:30:b5:ba:77:8f:08: ea:98:db:51:a6:7a:98:b0:75:18:c7:f6:c7:f5:40: e7:83:ab:96:00:3a:79:04:5a:75:a9:3d:c4:7c:63: b1:c8:2c:2a:90:08:59:69:da:c0:9d:f0:2d:7a:14: 4f:7e:64:ba:89:cd:95:98:43:0a:17:1a:24:fb:7a: 1f:b6:57:fa:d4:38:8c:92:22:51:0f:f6:ec:a8:b8: eb:16:8f:8e:d8:55:39:a2:f5:b6:e1:ff:ef:a4:e0: 3f:c3:86:bb:bc:0b:40:43:22:63:2f:9a:9f:86:3e: c1:a5:3c:d6:9b:57:d4:af:07:c2:76:da:58:27:cc: 43:cf:c9:d7:91:f2:22:b3:6f:b1:f6:e2:c4:72:1f: 2d:20:90:fe:8b:dd:04:eb:46:a7:84:c9:53:36:1c: d9:5a:65:51:33:c0:9b:fd:e7:a9:2a:bb:f6:ba:24: 18:0d:df:9a:9c:a8:44:00:b6:cc:af:5c:0f:09:cc: 1d:8f:a8:a8:f2:d8:9d:49:a1:99:a4:5b:23:7e:7f: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C8:8E:CF:2C:77:BB:BA:9F:56:5E:7A:58:5D:83:18:09:89:00:5B X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c9:73:a0:99:44:76:f3:30:ee:64:a6:a7:a5:5c:86:7c:40: b6:04:bf:4c:ce:ce:71:19:18:19:a5:4e:9c:e2:c4:7f:c3:c2: 55:59:60:0a:b7:a7:87:35:0d:4e:dd:49:ef:56:02:f4:b9:29: 93:80:e7:cd:b5:08:a4:27:55:ff:b4:45:6a:03:64:19:7f:66: 7a:ed:ce:7c:20:4f:8b:e1:ad:38:a6:76:fe:7d:47:58:79:27: 26:be:b9:d9:a4:c3:86:c1:fc:e0:0f:36:3f:b5:2f:39:9a:53: c1:02:7b:c3:91:07:3a:09:3c:3d:84:00:a0:30:e9:74:ef:c6: d2:b5:2c:2e:c0:b9:c6:8b:df:f9:cc:b3:3a:5f:a0:63:02:92: eb:27:e7:1f:82:84:22:83:77:df:35:c2:b8:34:02:29:b5:e7: 65:fd:d2:50:fc:29:7a:cd:37:78:55:ef:98:0c:ab:03:2e:97: ef:8e:26:cd:08:c5:a0:f0:47:33:e4:10:44:81:d3:bf:5f:f2: 00:80:71:7e:1e:67:7b:0a:18:c7:c0:12:e8:89:b2:22:ad:21: ff:92:e9:d3:da:a9:1a:b5:d2:83:ba:82:a1:0f:a3:8e:02:5a: 21:63:28:45:94:d6:05:8c:44:a2:ec:bd:eb:52:f7:5b:d5:b5: 09:eb:22:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUwNTMwMjIwODA0WhcNMjUwNjA2MjIwODA0WjAYMRYwFAYD VQQDEw02ODNhMmM0NC0wZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMhxwkV0YRetVD/CqIYHAIZXB+ugbR+QeK13kDgsmIZTUoJwqm5okVHq754+ X5SnfYH0qu0wtbp3jwjqmNtRpnqYsHUYx/bH9UDng6uWADp5BFp1qT3EfGOxyCwq kAhZadrAnfAtehRPfmS6ic2VmEMKFxok+3oftlf61DiMkiJRD/bsqLjrFo+O2FU5 ovW24f/vpOA/w4a7vAtAQyJjL5qfhj7BpTzWm1fUrwfCdtpYJ8xDz8nXkfIis2+x 9uLEch8tIJD+i90E60anhMlTNhzZWmVRM8Cb/eepKrv2uiQYDd+anKhEALbMr1wP Ccwdj6io8tidSaGZpFsjfn92+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHIjs8s d7u6n1ZeelhdgxgJiQBbMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOyXOgmUR28zDuZKanpVyGfEC2BL9Mzs5xGRgZpU6c4sR/w8JVWWAK t6eHNQ1O3UnvVgL0uSmTgOfNtQikJ1X/tEVqA2QZf2Z67c58IE+L4a04pnb+fUdY eScmvrnZpMOGwfzgDzY/tS85mlPBAnvDkQc6CTw9hACgMOl078bStSwuwLnGi9/5 zLM6X6BjApLrJ+cfgoQig3ffNcK4NAIptedl/dJQ/Cl6zTd4Ve+YDKsDLpfvjibN CMWg8Ecz5BBEgdO/X/IAgHF+Hmd7ChjHwBLoibIirSH/kunT2qkatdKDuoKhD6OO AlohYyhFlNYFjESi7L3rUvdb1bUJ6yJ9 -----END CERTIFICATE-----Generated at Sat May 31 16:38:07 2025 by rpki-client