$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: F0gYRbQEqKvh+BAeqDCY3J7o2dqxsl2LOwIS8DJVAG8= Subject key identifier: F7:F5:D3:01:C7:D2:3A:8F:F3:F3:C8:EC:51:AE:1C:9D:EC:6C:DB:2B Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 04F9 Signing time: Sat 31 May 2025 00:01:40 +0000 Manifest this update: Sat 31 May 2025 00:01:40 +0000 Manifest next update: Sat 07 Jun 2025 00:01:40 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: 01gE+zW8VuRx4RG8Jl8kruxF4Ab26nIPnysWlz6Cres=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: c5X0bRS1v3BmM8+viPXYxx/gJz2nVR8k5o+BxqMhvNI=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: May 31 00:01:40 2025 GMT Not After : Jun 7 00:01:40 2025 GMT Subject: CN=683a46e4-075c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:40:65:7c:6d:67:1f:c2:ec:dc:b1:9f:17: ce:89:f2:d4:b8:c0:e9:69:b3:7c:e5:2a:3b:54:43: 73:29:64:98:25:70:c6:d1:97:eb:ed:6e:60:9d:0a: 08:7e:45:88:14:e2:ef:da:70:79:6f:19:14:11:4b: 32:b6:f0:8e:3b:05:d7:86:94:6a:ce:9b:7c:d2:ef: a3:f7:8c:86:ca:c3:9b:65:ba:22:40:7b:7d:2b:b7: 10:0e:bd:fe:90:be:34:f2:39:b4:61:ef:a6:bd:2e: 24:0b:c4:c6:e4:80:8a:ea:70:12:e4:92:10:96:03: 48:d0:aa:2c:b2:1a:c4:5f:df:02:48:ca:57:eb:66: e1:a3:28:5a:cb:ad:c4:7d:f7:56:05:e2:3f:7e:af: de:63:14:4d:07:ab:62:c9:a5:89:f5:d5:c9:b5:35: 6b:e6:cf:16:9a:0f:8a:08:3b:22:23:03:bb:1d:d8: 32:a3:40:07:c4:25:be:45:11:cc:6a:6d:90:d4:1a: c9:f1:a7:4c:ee:dc:d5:5c:f4:b7:ea:1e:52:d6:24: ce:56:6b:6f:da:ae:4a:4e:e8:49:7e:28:c1:55:2d: f3:ba:8e:e5:a7:ab:a4:fb:a9:b5:1c:b2:78:bb:31: 47:7d:95:ba:70:25:da:fd:f4:de:e2:59:46:d6:0f: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F5:D3:01:C7:D2:3A:8F:F3:F3:C8:EC:51:AE:1C:9D:EC:6C:DB:2B X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4e:4e:59:15:4a:40:e9:eb:4f:0a:a9:75:da:a0:63:f6:51: b9:42:ac:7f:b6:ef:79:bb:27:56:4b:d6:f8:0e:73:2c:1a:81: e0:a7:09:2e:0e:78:0c:cb:33:da:95:58:cb:a8:0f:d3:58:11: d1:4b:cc:0e:e3:4f:b2:b9:7f:f4:91:90:e3:68:38:7a:01:e0: 49:ea:1c:09:78:9c:e9:af:6e:76:a2:96:13:d5:a1:eb:d7:88: 03:69:b0:67:b2:11:bd:5c:40:6b:67:20:b8:7d:e3:c6:cc:1b: 56:11:c5:ff:8a:1e:f6:9b:1c:b0:00:3e:b6:f4:aa:ab:73:f3: 72:a6:e1:32:9c:c7:d6:54:e3:26:e1:d9:9a:30:a5:81:c4:dc: c0:b4:98:ea:7f:b8:1b:b0:1a:ce:85:2d:6c:af:bd:dd:50:4d: a5:da:68:04:60:10:15:6d:07:93:75:67:8c:9e:e8:10:db:41: fb:09:88:b5:30:b0:17:d8:7c:de:7f:3f:7d:eb:5a:39:a0:a9: a7:2c:22:3f:d4:f9:bc:97:62:6f:72:27:20:3c:51:f3:a8:73: 2c:a3:26:68:7d:88:09:23:6c:96:9f:4c:49:31:d6:8b:61:e4: 80:4f:16:82:a9:61:a2:1d:96:9a:78:d4:e6:ce:0e:04:85:11: 31:9a:c8:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUwNTMxMDAwMTQwWhcNMjUwNjA3MDAwMTQwWjAYMRYwFAYD VQQDEw02ODNhNDZlNC0wNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOpAZXxtZx/C7NyxnxfOifLUuMDpabN85So7VENzKWSYJXDG0Zfr7W5gnQoI fkWIFOLv2nB5bxkUEUsytvCOOwXXhpRqzpt80u+j94yGysObZboiQHt9K7cQDr3+ kL408jm0Ye+mvS4kC8TG5ICK6nAS5JIQlgNI0KosshrEX98CSMpX62bhoyhay63E ffdWBeI/fq/eYxRNB6tiyaWJ9dXJtTVr5s8Wmg+KCDsiIwO7Hdgyo0AHxCW+RRHM am2Q1BrJ8adM7tzVXPS36h5S1iTOVmtv2q5KTuhJfijBVS3zuo7lp6uk+6m1HLJ4 uzFHfZW6cCXa/fTe4llG1g+dYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPf10wHH 0jqP8/PI7FGuHJ3sbNsrMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTk5ZFUpA6etPCql12qBj9lG5Qqx/tu95uydWS9b4DnMsGoHgpwku DngMyzPalVjLqA/TWBHRS8wO40+yuX/0kZDjaDh6AeBJ6hwJeJzpr252opYT1aHr 14gDabBnshG9XEBrZyC4fePGzBtWEcX/ih72mxywAD629Kqrc/NypuEynMfWVOMm 4dmaMKWBxNzAtJjqf7gbsBrOhS1sr73dUE2l2mgEYBAVbQeTdWeMnugQ20H7CYi1 MLAX2Hzefz9961o5oKmnLCI/1Pm8l2JvcicgPFHzqHMsoyZofYgJI2yWn0xJMdaL YeSATxaCqWGiHZaaeNTmzg4EhRExmsij -----END CERTIFICATE-----Generated at Sat May 31 17:48:41 2025 by rpki-client