$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: NV7Pl9e9b2U2N2GB1GqGhq2ZAXZAkTJ7GQffe3qx/Xs= Subject key identifier: 2D:C0:8B:83:25:4B:1D:B3:54:42:57:F3:2E:ED:B3:51:4E:4F:91:31 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34B7 Signing time: Sat 31 May 2025 14:24:30 +0000 Manifest this update: Sat 31 May 2025 14:24:30 +0000 Manifest next update: Sat 07 Jun 2025 14:24:30 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: HsDI/vfEGQg5PZZ8hX3m+BNioZl/vJmze8/J1C1bEdw=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13591 (0x3517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: May 31 14:24:30 2025 GMT Not After : Jun 7 14:24:30 2025 GMT Subject: CN=683b111e-64d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:9a:1f:a4:a3:bb:04:a9:83:4a:1f:3c:0b: c1:ae:61:3a:c9:62:1b:80:af:39:43:be:3c:34:e6: 58:8c:8e:92:36:2f:fd:d0:9f:50:32:27:8d:c8:75: 8a:2b:30:c0:02:c7:21:03:3f:ff:f1:03:2f:69:d4: cf:e2:48:5b:eb:9f:7f:be:79:60:29:d3:7b:bc:f3: 46:23:97:0b:35:91:aa:11:48:81:55:bc:13:70:ba: 92:cc:89:de:a9:87:9c:f4:21:0e:96:4d:fc:fb:65: 24:6b:a2:1d:3c:e5:2d:0a:e5:51:03:f3:e8:34:f5: 4a:18:33:b5:54:c2:03:a0:c8:90:01:f9:b5:09:63: 97:92:37:74:9e:64:e7:01:93:21:b9:1e:b2:d9:f6: 28:13:5e:4b:cd:a2:22:b5:57:49:8b:ff:27:cc:bc: ae:bf:77:cd:29:01:cb:79:e9:18:0f:4a:c9:f6:cf: 6c:d6:5d:20:64:ed:eb:98:50:89:0f:2f:a0:2d:63: c6:47:4f:f6:fa:41:a1:b3:ba:51:ab:c2:24:73:f7: 47:e6:0f:b3:5e:e4:45:45:a1:0d:3c:65:1c:ca:f7: a3:67:3e:b3:ee:b3:3a:b8:c4:e7:f7:61:a9:5b:cf: b1:a6:ae:7b:46:40:ec:90:0e:36:cf:73:80:39:44: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C0:8B:83:25:4B:1D:B3:54:42:57:F3:2E:ED:B3:51:4E:4F:91:31 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:64:e8:89:1d:b5:08:97:16:df:01:9a:c3:b9:7a:88:a9:eb: 8a:87:35:32:c1:97:ed:7c:a4:13:08:40:3b:be:b3:1e:98:29: ac:e8:aa:93:38:b2:51:f0:b3:57:6b:73:eb:a8:b5:68:58:55: 4a:88:a6:1d:f9:62:ee:31:29:ff:87:c4:8e:7b:0f:f8:e6:a0: 19:fe:cc:50:54:c8:69:20:ae:29:6d:42:1d:33:47:54:37:cb: a0:30:86:26:0f:cf:01:55:2f:93:fa:e1:33:71:49:71:36:4a: da:25:c5:2b:47:49:42:7b:f5:e0:13:04:38:27:79:95:13:f6: c4:fc:80:9d:4e:58:9e:d9:2a:a5:c9:53:09:20:7a:27:ee:d0: e8:53:f4:4d:a6:e5:74:76:32:2e:53:9c:a6:f6:9b:1d:08:b7: 2f:6c:59:6f:29:f0:d4:ed:76:e3:64:d3:f0:dc:f1:14:4f:3b: ca:ce:1c:d5:c9:19:9d:1b:ad:d0:fd:68:2d:93:db:a7:7b:77: 35:b2:96:a8:0f:9e:c7:25:76:6d:91:0a:1b:c9:88:9a:4a:da: 71:1f:56:e1:82:eb:c2:55:50:39:57:11:c7:84:b3:6b:94:3e: 83:4d:0b:14:f1:eb:2b:78:c5:36:4f:ca:5f:f2:76:84:04:b8: e4:82:c2:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNTMxMTQyNDMwWhcNMjUwNjA3MTQyNDMwWjAYMRYwFAYD VQQDEw02ODNiMTExZS02NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwquaH6SjuwSpg0ofPAvBrmE6yWIbgK85Q748NOZYjI6SNi/90J9QMieNyHWK KzDAAschAz//8QMvadTP4khb659/vnlgKdN7vPNGI5cLNZGqEUiBVbwTcLqSzIne qYec9CEOlk38+2Uka6IdPOUtCuVRA/PoNPVKGDO1VMIDoMiQAfm1CWOXkjd0nmTn AZMhuR6y2fYoE15LzaIitVdJi/8nzLyuv3fNKQHLeekYD0rJ9s9s1l0gZO3rmFCJ Dy+gLWPGR0/2+kGhs7pRq8Ikc/dH5g+zXuRFRaENPGUcyvejZz6z7rM6uMTn92Gp W8+xpq57RkDskA42z3OAOUS4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Ai4Ml Sx2zVEJX8y7ts1FOT5ExMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZOiJHbUIlxbfAZrDuXqIqeuKhzUywZftfKQTCEA7vrMemCms6KqT OLJR8LNXa3PrqLVoWFVKiKYd+WLuMSn/h8SOew/45qAZ/sxQVMhpIK4pbUIdM0dU N8ugMIYmD88BVS+T+uEzcUlxNkraJcUrR0lCe/XgEwQ4J3mVE/bE/ICdTlie2Sql yVMJIHon7tDoU/RNpuV0djIuU5ym9psdCLcvbFlvKfDU7XbjZNPw3PEUTzvKzhzV yRmdG63Q/Wgtk9une3c1spaoD57HJXZtkQobyYiaStpxH1bhguvCVVA5VxHHhLNr lD6DTQsU8esreMU2T8pf8naEBLjkgsKM -----END CERTIFICATE-----Generated at Sat May 31 17:23:36 2025 by rpki-client