$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: LxUFhUD4kkGcIUZ4MBfCp4Jo2A2dtpw1xw56Hvgwf74= Subject key identifier: CF:52:B4:A2:87:B0:6A:0F:3A:15:3B:23:7A:F4:FC:A2:50:59:4E:F0 Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 080C Signing time: Fri 30 May 2025 21:06:18 +0000 Manifest this update: Fri 30 May 2025 21:06:17 +0000 Manifest next update: Fri 06 Jun 2025 21:06:17 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: 8U6YH7PppXjUowto2/UBujGX/QRDr4E5dGTOKJyEEBM=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: May 30 21:06:17 2025 GMT Not After : Jun 6 21:06:17 2025 GMT Subject: CN=683a1dc9-bb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:93:7b:30:16:2e:e9:11:37:86:3d:28:46: 74:71:d4:f4:f8:82:fa:db:15:91:f8:54:f3:a8:f2: 75:c3:c2:eb:9d:15:31:26:97:42:69:72:60:75:7c: 65:db:52:b5:5b:05:56:f5:fb:c7:d9:a6:85:84:a7: 51:c5:9d:20:b2:2a:88:fb:84:81:02:fe:bd:a6:ec: e3:16:1f:6c:2b:d1:8f:f7:2d:2c:c6:d9:19:67:ca: 5a:97:e9:d9:f2:2d:6b:4c:db:db:aa:cb:4d:b7:62: 75:8e:d7:6f:51:cf:68:62:b9:b8:88:fd:ef:f8:21: 18:e7:d6:e8:b0:bf:f0:4f:01:c1:a7:2f:68:7d:76: b3:00:cd:d0:fd:1e:7f:29:b7:98:1a:ba:28:79:92: 37:a1:23:71:40:94:7b:35:f1:18:30:1a:7d:7f:8d: 78:cd:2a:eb:17:b1:01:fb:f1:59:77:c7:3b:56:fc: 28:c7:f8:d8:96:1f:1e:f2:3b:5f:49:a5:2a:b2:78: e2:6b:fa:ac:83:72:41:6c:4a:8d:e3:44:04:cf:c4: 0e:27:53:28:e7:98:66:81:87:6a:e2:27:0f:4c:f6: 02:b9:0f:3a:4c:39:a3:64:8e:b8:0d:2a:1e:79:37: 1e:b6:42:2d:cf:95:37:4e:95:78:85:98:ab:db:a2: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:B4:A2:87:B0:6A:0F:3A:15:3B:23:7A:F4:FC:A2:50:59:4E:F0 X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ce:0e:bc:14:e1:3a:ec:92:bb:84:f1:09:14:e1:24:21:a4: e2:40:73:89:69:f2:74:0b:8c:0d:b4:ca:13:a4:1b:e1:cf:4c: 8b:da:7c:6c:93:d5:45:a1:c6:75:57:a6:fe:58:2d:85:98:89: 90:36:8e:89:41:67:66:10:5c:19:af:dc:56:f8:72:7f:16:b7: 7c:e5:fa:c2:ae:f6:15:72:3f:a0:bb:31:43:0b:09:94:a7:47: 06:ff:08:e0:0d:dc:30:de:a6:10:18:12:04:46:da:e9:62:d1: dc:aa:a1:0f:00:85:5d:b9:24:ce:09:86:d2:a2:56:4d:31:39: 87:78:f9:76:d8:63:fd:c6:42:e6:87:56:f6:57:8f:88:a0:b3: 03:7c:ae:66:a2:1d:d9:a0:33:78:33:c0:eb:27:0d:dd:f5:fa: dd:24:98:d4:d7:86:6f:68:78:37:3e:c9:af:55:3f:0d:12:4a: 59:3a:d5:89:fd:ec:c2:30:4d:70:12:b0:94:b4:84:57:51:db: 89:40:ac:ef:7b:a8:23:c3:e1:0b:ff:26:39:28:f1:3e:44:37: 60:c1:eb:8e:c5:d5:bc:e0:b8:c7:60:d3:f7:17:fc:bc:ad:7d: 79:8d:ad:cf:ef:1a:ad:47:85:24:d3:47:69:6d:17:ed:08:42: 0b:38:3e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUwNTMwMjEwNjE3WhcNMjUwNjA2MjEwNjE3WjAYMRYwFAYD VQQDEw02ODNhMWRjOS1iYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFSTezAWLukRN4Y9KEZ0cdT0+IL62xWR+FTzqPJ1w8LrnRUxJpdCaXJgdXxl 21K1WwVW9fvH2aaFhKdRxZ0gsiqI+4SBAv69puzjFh9sK9GP9y0sxtkZZ8pal+nZ 8i1rTNvbqstNt2J1jtdvUc9oYrm4iP3v+CEY59bosL/wTwHBpy9ofXazAM3Q/R5/ KbeYGrooeZI3oSNxQJR7NfEYMBp9f414zSrrF7EB+/FZd8c7Vvwox/jYlh8e8jtf SaUqsnjia/qsg3JBbEqN40QEz8QOJ1Mo55hmgYdq4icPTPYCuQ86TDmjZI64DSoe eTcetkItz5U3TpV4hZir26ImNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9StKKH sGoPOhU7I3r0/KJQWU7wMB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnzg68FOE67JK7hPEJFOEkIaTiQHOJafJ0C4wNtMoTpBvhz0yL2nxs k9VFocZ1V6b+WC2FmImQNo6JQWdmEFwZr9xW+HJ/Frd85frCrvYVcj+guzFDCwmU p0cG/wjgDdww3qYQGBIERtrpYtHcqqEPAIVduSTOCYbSolZNMTmHePl22GP9xkLm h1b2V4+IoLMDfK5moh3ZoDN4M8DrJw3d9frdJJjU14ZvaHg3PsmvVT8NEkpZOtWJ /ezCME1wErCUtIRXUduJQKzve6gjw+EL/yY5KPE+RDdgweuOxdW84LjHYNP3F/y8 rX15ja3P7xqtR4Uk00dpbRftCEILOD7v -----END CERTIFICATE-----Generated at Sat May 31 17:45:08 2025 by rpki-client