$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: sRwgl6nHBGTc/6zv8sLPtApYHYOQtpgVvPGCgTHLJqY= Subject key identifier: 2F:53:10:6B:29:EC:AB:64:93:86:E3:76:E3:9A:63:E2:CE:04:F9:81 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 18E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 18D4 Signing time: Tue 10 Jun 2025 16:27:56 +0000 Manifest this update: Tue 10 Jun 2025 16:27:56 +0000 Manifest next update: Tue 17 Jun 2025 16:27:56 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: sTx0mr9w5I4AI21CSXim4NwOzPtlWNn2KnXSPoUBMNQ=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: 9b8cbYORw44VvEpRgAtGCxHhf/hrQyvWwycoRACw4Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6375 (0x18e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Jun 10 16:27:56 2025 GMT Not After : Jun 17 16:27:56 2025 GMT Subject: CN=68485d0c-ffc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:66:25:46:5f:e6:6e:1a:ce:48:6f:b2:f3: f1:1c:a7:02:f7:20:6b:b9:44:8d:0f:8e:f2:bf:ab: f7:2a:c7:4f:50:b8:e5:45:93:04:7b:dc:88:17:20: 81:00:f0:b4:6c:c7:b7:94:2b:cc:48:70:af:f8:e2: b1:02:9e:7a:23:3f:c2:d3:5d:ff:f0:3c:a0:a4:96: 54:03:99:44:1c:d3:9e:a6:04:07:1a:04:87:4e:41: b0:96:50:d4:43:ee:e4:ec:98:e0:61:2e:72:1f:60: da:83:d1:96:b0:7a:68:bd:79:a1:36:08:d1:b2:f9: 4c:16:d2:66:c9:1d:f2:37:1c:4c:9b:2b:99:59:ff: c7:8b:92:bd:f7:ce:61:13:e9:67:b5:5b:b7:cb:db: d6:e3:1b:ab:3f:f0:2f:34:f6:f0:db:0f:7c:54:bb: 4f:0f:8f:8d:3a:0b:34:88:c7:58:87:45:c2:25:b8: d5:78:fc:11:f6:fa:d5:42:49:e0:b6:86:5c:64:3a: 51:37:f6:dc:97:2e:fc:6f:52:50:31:45:3f:7d:de: 75:6f:4b:8a:bd:5e:53:99:07:31:6d:a7:ef:12:ac: bc:c1:fa:05:57:80:49:16:a0:6f:8f:4e:0c:d4:41: 87:51:c7:10:8b:52:94:59:d7:ab:d3:74:f1:7d:1b: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:10:6B:29:EC:AB:64:93:86:E3:76:E3:9A:63:E2:CE:04:F9:81 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:77:e8:38:58:a3:ac:78:18:df:8f:6b:01:9d:53:42:18:11: 9f:d0:8c:42:f8:cd:2a:f5:c9:18:9e:26:f5:aa:a8:5a:12:d0: 01:61:6d:b7:b6:71:a9:43:f1:c7:77:21:68:36:f7:d5:df:2a: d8:4f:ff:07:63:5d:01:36:5c:3b:ba:2b:cb:f8:5d:a1:5a:ea: bb:4a:64:17:8d:ba:26:61:b1:82:aa:b2:46:9c:f8:ce:4d:63: a6:48:e0:44:eb:69:dc:01:1d:1e:13:8a:af:5f:d5:f3:61:7c: 5d:21:28:96:53:53:9d:8b:58:41:35:a4:61:0b:bd:53:be:14: 1a:77:46:c2:7f:81:9c:e7:f2:0f:e0:ca:d5:26:41:fa:46:02: 45:97:51:f7:87:bc:0f:ff:c5:14:33:67:a1:2b:0c:49:31:f9: 2d:c3:a9:7f:c3:84:bf:23:90:bd:22:06:66:ed:0a:7d:7f:c1: c7:8c:45:cf:81:79:ce:31:44:c6:ce:80:15:07:af:39:65:03: 33:85:2e:90:08:5f:cf:d5:1b:fc:38:f2:6b:4a:c4:4c:49:b4: 17:14:2c:09:a2:da:70:3b:bc:57:29:c4:0f:26:1b:8f:c0:9c: e1:de:db:01:e4:66:7c:07:6e:e2:b5:c0:84:6c:cb:01:d3:6c: 2f:64:bf:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjUwNjEwMTYyNzU2WhcNMjUwNjE3MTYyNzU2WjAYMRYwFAYD VQQDEw02ODQ4NWQwYy1mZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRJmJUZf5m4azkhvsvPxHKcC9yBruUSND47yv6v3KsdPULjlRZMEe9yIFyCB APC0bMe3lCvMSHCv+OKxAp56Iz/C013/8DygpJZUA5lEHNOepgQHGgSHTkGwllDU Q+7k7JjgYS5yH2Dag9GWsHpovXmhNgjRsvlMFtJmyR3yNxxMmyuZWf/Hi5K9985h E+lntVu3y9vW4xurP/AvNPbw2w98VLtPD4+NOgs0iMdYh0XCJbjVePwR9vrVQkng toZcZDpRN/bcly78b1JQMUU/fd51b0uKvV5TmQcxbafvEqy8wfoFV4BJFqBvj04M 1EGHUccQi1KUWder03TxfRv96wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9TEGsp 7Ktkk4bjduOaY+LOBPmBMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHd+g4WKOseBjfj2sBnVNCGBGf0IxC+M0q9ckYnib1qqhaEtABYW23 tnGpQ/HHdyFoNvfV3yrYT/8HY10BNlw7uivL+F2hWuq7SmQXjbomYbGCqrJGnPjO TWOmSOBE62ncAR0eE4qvX9XzYXxdISiWU1Odi1hBNaRhC71TvhQad0bCf4Gc5/IP 4MrVJkH6RgJFl1H3h7wP/8UUM2ehKwxJMfktw6l/w4S/I5C9IgZm7Qp9f8HHjEXP gXnOMUTGzoAVB685ZQMzhS6QCF/P1Rv8OPJrSsRMSbQXFCwJotpwO7xXKcQPJhuP wJzh3tsB5GZ8B27itcCEbMsB02wvZL/m -----END CERTIFICATE-----Generated at Wed Jun 11 00:41:25 2025 by rpki-client