$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: /8/r9zBPZ4n80kEWNbaogMw1x4TRlHXPhCyZ7LS9ckk= Subject key identifier: C8:9B:7E:F9:5F:70:5E:57:A4:DA:08:39:82:02:86:64:D9:8A:BD:34 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 06DC Signing time: Fri 30 May 2025 22:16:16 +0000 Manifest this update: Fri 30 May 2025 22:16:16 +0000 Manifest next update: Fri 06 Jun 2025 22:16:16 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: jVuH07t04AO6JJqpU6FyrnDQwYTmwDdx0qeAibq10Ok=) 2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=) 3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: May 30 22:16:16 2025 GMT Not After : Jun 6 22:16:16 2025 GMT Subject: CN=683a2e30-d235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:cc:fe:23:73:c3:18:ea:e7:5e:ce:db:76: 7a:d3:81:4e:54:f4:fc:f1:53:ea:33:70:5c:d6:ca: 1a:2e:7b:d2:63:83:f6:e0:eb:a6:e2:73:3c:ea:4a: fd:c7:84:e6:d3:be:b2:6f:15:46:af:ee:c8:db:de: 0a:2b:16:bf:cb:a6:0f:63:44:8f:7b:18:28:85:04: 3b:2c:3c:07:bf:bf:df:7c:b1:ed:10:9f:2a:05:6c: d0:cb:ef:1e:27:c0:3b:b4:a3:6d:46:4f:3f:80:c2: d3:56:b7:79:bb:01:6c:51:e7:fb:5a:f7:98:3f:7e: 35:c2:7e:1b:c1:41:bf:2b:48:a5:93:30:0b:58:4d: 84:04:c1:f7:49:9f:8b:fb:06:68:74:70:59:19:1f: 24:c7:f7:06:bc:e6:34:21:ce:b2:41:30:48:5f:d8: 6e:5a:ec:cd:7f:7f:17:a9:4a:df:08:a8:6e:90:c8: 8d:17:06:bb:9b:ab:a5:c3:3b:02:2f:59:f3:4b:5f: eb:72:3b:d3:84:d9:a4:65:6c:2e:67:46:46:5f:c2: c1:85:2a:01:62:cd:89:7f:26:42:82:ad:3a:3d:77: eb:b6:13:b0:4a:8b:a6:12:b4:d2:44:08:ae:80:82: ee:e4:6e:87:5f:41:82:da:5b:54:23:57:52:e7:be: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:7E:F9:5F:70:5E:57:A4:DA:08:39:82:02:86:64:D9:8A:BD:34 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:09:29:5c:e1:8d:7e:1b:cb:dd:32:e9:09:7e:e2:05:76:e8: 5e:76:02:cf:b4:90:f6:c7:4e:3a:a4:92:70:54:e5:86:c8:57: e1:87:e2:c5:1c:eb:58:fc:6a:3d:69:b8:f4:2e:71:62:a4:e1: dc:2b:02:4e:32:b7:2d:86:57:2b:3b:89:cf:c5:49:2f:a8:e8: 3c:69:03:ca:23:62:c0:c9:da:8a:e1:e2:eb:09:34:6a:63:d3: a3:2d:ec:cd:19:7e:d7:bd:0e:dd:3e:6f:5e:a8:9e:c4:c5:bf: 27:83:7f:e5:1f:ac:58:b6:56:d7:3f:5b:fb:8c:8c:62:10:67: e6:d7:8b:e9:c6:1f:7e:a1:68:86:86:88:7c:ca:59:74:81:8d: 75:9e:3c:e2:b3:37:35:0a:64:b0:e6:78:72:32:58:b0:c8:94: 6b:45:90:9c:5c:54:44:1d:6d:03:39:f6:bc:13:d6:0f:46:c7: e5:92:c6:8c:76:55:b7:42:09:20:15:fc:25:0d:6e:5d:31:54: 89:a2:3c:c4:01:21:69:61:8c:8a:ff:51:c4:b6:89:0b:19:b1: cf:28:05:14:ba:91:9e:b0:b2:a4:27:5d:37:00:60:1a:57:a4: f7:b2:ad:46:6b:3a:99:ed:a5:6c:a9:24:b9:4a:22:88:e8:ea: cf:53:b5:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUwNTMwMjIxNjE2WhcNMjUwNjA2MjIxNjE2WjAYMRYwFAYD VQQDEw02ODNhMmUzMC1kMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvATM/iNzwxjq517O23Z604FOVPT88VPqM3Bc1soaLnvSY4P24Oum4nM86kr9 x4Tm076ybxVGr+7I294KKxa/y6YPY0SPexgohQQ7LDwHv7/ffLHtEJ8qBWzQy+8e J8A7tKNtRk8/gMLTVrd5uwFsUef7WveYP341wn4bwUG/K0ilkzALWE2EBMH3SZ+L +wZodHBZGR8kx/cGvOY0Ic6yQTBIX9huWuzNf38XqUrfCKhukMiNFwa7m6ulwzsC L1nzS1/rcjvThNmkZWwuZ0ZGX8LBhSoBYs2JfyZCgq06PXfrthOwSoumErTSRAiu gILu5G6HX0GC2ltUI1dS574L9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMibfvlf cF5XpNoIOYIChmTZir00MB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkCSlc4Y1+G8vdMukJfuIFduhedgLPtJD2x046pJJwVOWGyFfhh+LF HOtY/Go9abj0LnFipOHcKwJOMrcthlcrO4nPxUkvqOg8aQPKI2LAydqK4eLrCTRq Y9OjLezNGX7XvQ7dPm9eqJ7Exb8ng3/lH6xYtlbXP1v7jIxiEGfm14vpxh9+oWiG hoh8yll0gY11njziszc1CmSw5nhyMliwyJRrRZCcXFREHW0DOfa8E9YPRsflksaM dlW3QgkgFfwlDW5dMVSJojzEASFpYYyK/1HEtokLGbHPKAUUupGesLKkJ103AGAa V6T3sq1GazqZ7aVsqSS5SiKI6OrPU7Wz -----END CERTIFICATE-----Generated at Sat May 31 14:49:42 2025 by rpki-client