$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: S5iLK+Zd9em5AC23seAG2lH3L3ZIkV2OITbT/t1r5Xw= Subject key identifier: B8:1C:9C:EF:65:37:D3:A6:AD:58:2C:E6:97:32:58:2E:EA:9F:43:62 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 0189 Signing time: Fri 13 Jun 2025 03:11:01 +0000 Manifest this update: Fri 13 Jun 2025 03:11:00 +0000 Manifest next update: Fri 20 Jun 2025 03:11:00 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: gKe5LHmGNaEDIdgaIsw6UM619s0FRJk3WQBb9MX8DaA=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Jun 13 03:11:00 2025 GMT Not After : Jun 20 03:11:00 2025 GMT Subject: CN=684b96c4-99c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:22:ce:6f:6d:c5:e9:1c:2b:c7:ef:28:ca: cb:33:46:89:c7:9d:7b:4b:89:f8:86:fd:65:e1:c2: c3:1d:6c:8d:16:bd:a3:21:13:7e:f9:c7:a0:eb:1e: b9:f5:89:32:87:28:a6:f7:af:bf:1a:3c:85:f0:45: 53:bb:ad:9f:37:ed:57:2b:de:19:85:7c:08:16:ad: 0c:d9:72:e2:9e:f1:b4:58:a1:bd:57:bd:b0:bc:cf: 84:2d:ed:44:24:c5:65:d6:f1:a9:63:7d:c7:fa:5c: fe:3c:90:f3:08:9d:14:e5:98:24:6a:9b:5f:8b:15: e1:ca:d2:bd:73:8c:ca:b8:81:5e:f1:a1:88:a2:3e: 82:93:e8:3c:8d:5b:07:b5:b2:6f:64:fb:40:21:83: ba:fe:4a:46:6a:13:83:6a:e5:38:95:93:f5:5b:8e: 69:be:79:85:82:a7:de:3d:40:9e:c6:59:c7:0d:3a: 18:3e:2c:c4:09:e9:c0:74:d5:5b:f6:eb:b1:56:e1: 12:cd:8f:ab:da:e0:8d:c5:4f:36:32:da:ed:04:d1: f6:39:32:d7:77:8a:db:7c:24:d0:99:28:d0:4d:31: a9:b8:79:b7:56:08:4e:26:cb:02:61:c9:ca:92:15: 10:bc:12:2f:30:2c:fc:a1:84:fa:9a:38:7f:68:04: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:9C:EF:65:37:D3:A6:AD:58:2C:E6:97:32:58:2E:EA:9F:43:62 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:b6:9c:5b:2b:e5:77:6d:c9:21:12:87:7a:ed:f9:56:26: cc:7a:8c:2c:12:74:5c:1d:a3:b8:bc:19:34:b4:bf:91:26:4a: 38:0f:c3:01:3a:66:bb:f4:5c:6a:c4:ea:fc:75:d1:15:f8:4a: 6b:78:a4:c7:12:dd:7f:09:c4:ae:a5:c7:68:23:f6:ec:a2:c5: 39:86:26:82:79:61:14:d9:e9:6d:3f:ec:f6:fd:a2:e7:4f:fb: 73:54:8a:22:b7:e2:c1:91:19:e7:33:85:64:78:9c:4c:88:66: 4a:81:7b:1b:28:93:1d:6a:ad:1b:68:bf:0c:f1:af:54:f3:53: ae:e1:ed:68:d7:be:a2:32:ac:20:34:20:60:33:bf:19:11:b1: c3:38:34:36:35:61:64:f0:e0:bd:6f:31:28:58:7c:12:1a:f8: 40:41:bb:98:2c:14:ac:a2:2c:27:94:ce:4f:79:02:a7:06:b1: 65:30:77:5c:05:a6:15:22:00:65:c3:08:89:e2:1b:26:71:8b: 1b:83:ab:aa:e1:cb:bf:21:90:23:f5:9f:49:f1:1e:5b:9d:25: 18:b5:17:10:f2:3c:9b:46:e8:86:f4:1b:c1:49:17:b6:eb:c9: ec:aa:a1:3c:11:3f:e8:ea:76:8c:16:d6:89:67:ea:11:f2:9d: 3e:e9:b2:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUwNjEzMDMxMTAwWhcNMjUwNjIwMDMxMTAwWjAYMRYwFAYD VQQDEw02ODRiOTZjNC05OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqAizm9txekcK8fvKMrLM0aJx517S4n4hv1l4cLDHWyNFr2jIRN++ceg6x65 9Ykyhyim96+/GjyF8EVTu62fN+1XK94ZhXwIFq0M2XLinvG0WKG9V72wvM+ELe1E JMVl1vGpY33H+lz+PJDzCJ0U5ZgkaptfixXhytK9c4zKuIFe8aGIoj6Ck+g8jVsH tbJvZPtAIYO6/kpGahODauU4lZP1W45pvnmFgqfePUCexlnHDToYPizECenAdNVb 9uuxVuESzY+r2uCNxU82MtrtBNH2OTLXd4rbfCTQmSjQTTGpuHm3VghOJssCYcnK khUQvBIvMCz8oYT6mjh/aAS5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgcnO9l N9OmrVgs5pcyWC7qn0NiMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0L7acWyvld23JIRKHeu35VibMeowsEnRcHaO4vBk0tL+RJko4D8MB Oma79FxqxOr8ddEV+EpreKTHEt1/CcSupcdoI/bsosU5hiaCeWEU2eltP+z2/aLn T/tzVIoit+LBkRnnM4VkeJxMiGZKgXsbKJMdaq0baL8M8a9U81Ou4e1o176iMqwg NCBgM78ZEbHDODQ2NWFk8OC9bzEoWHwSGvhAQbuYLBSsoiwnlM5PeQKnBrFlMHdc BaYVIgBlwwiJ4hsmcYsbg6uq4cu/IZAj9Z9J8R5bnSUYtRcQ8jybRuiG9BvBSRe2 68nsqqE8ET/o6naMFtaJZ+oR8p0+6bKO -----END CERTIFICATE-----Generated at Fri Jun 13 22:01:37 2025 by rpki-client