$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: OGUIvLz2wYR/RliapVHkuMa266LERhJGgywHMJeWPCo= Subject key identifier: 44:98:72:39:92:7A:F9:76:60:BE:4D:B3:83:92:63:45:F7:68:C3:CE Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 0186 Signing time: Wed 11 Jun 2025 03:01:07 +0000 Manifest this update: Wed 11 Jun 2025 03:01:06 +0000 Manifest next update: Wed 18 Jun 2025 03:01:06 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: dSVnra2qFWnRquiAZUZwF14+7UDts4zlUqL+Ow4/Cks=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: 12wpcAe05HtenMlOH90kdV4i4OluuZbyZiMI0pKZkoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Jun 11 03:01:06 2025 GMT Not After : Jun 18 03:01:06 2025 GMT Subject: CN=6848f172-6a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:27:00:c7:e5:62:94:aa:b8:22:fa:49:4d:35: 4f:c1:11:38:db:f6:1d:4c:12:e9:ee:34:6a:c0:46: 38:0d:b8:0e:b1:5c:a6:9e:e6:66:21:f6:7c:e0:66: 3a:95:51:34:0f:cf:b2:14:7f:ef:4b:85:48:cd:fb: 9b:57:76:70:b3:8d:cb:9e:78:79:ce:6d:36:8e:b4: 80:53:d1:ee:4a:04:ab:0b:1d:67:07:08:c1:72:c9: 34:d6:23:22:0f:bd:83:99:97:15:03:06:b5:05:85: 17:26:86:2c:cf:78:5f:29:7c:6e:3b:e9:77:65:c7: 6a:97:eb:b4:55:3a:0a:e8:72:1f:9d:97:ae:c6:ea: 81:0e:ab:32:6c:13:bc:e3:65:3d:62:65:8d:11:40: ae:0d:90:ec:66:3f:97:5c:e1:1b:02:74:38:6f:8c: f8:b0:e9:1a:96:2d:54:ac:20:fb:af:34:32:84:cb: 55:80:ec:af:c5:c1:b0:b4:4e:f9:2f:31:f8:f8:7c: 95:49:f4:fc:a7:ed:c7:f5:70:6c:fc:4d:49:8e:d8: 36:22:1c:0c:aa:a1:21:ac:90:81:ab:9b:12:25:27: c6:a2:a2:6f:b9:75:b9:04:fb:8e:a0:d0:33:cd:7c: 39:15:e6:71:4d:e3:8f:fa:63:f7:d2:41:01:f7:e2: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:98:72:39:92:7A:F9:76:60:BE:4D:B3:83:92:63:45:F7:68:C3:CE X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:32:92:91:c8:85:6e:2e:9d:fe:c6:57:4e:de:ea:66:63:4b: bc:1c:7e:3e:1f:0a:4c:6e:dd:07:23:73:e3:57:3b:66:5d:be: cc:91:6b:f0:df:61:a2:8f:cf:5b:7a:ed:3d:52:42:5c:73:46: 49:0d:a7:89:21:e4:10:b4:ee:fc:7a:ea:32:0b:82:ef:f6:75: 0b:84:05:6b:b9:d9:d9:b1:aa:05:a6:9c:3e:9c:15:f9:aa:60: df:e1:d1:30:70:8d:11:f3:97:05:e7:a1:62:fb:d6:b5:f6:6b: 57:5a:6c:f6:f2:9f:33:25:6f:2b:36:57:3d:8a:20:89:c6:cc: b6:ba:ee:af:3c:1b:8b:87:5a:9a:4f:5c:ed:9d:f5:42:ad:27: 28:cf:96:a5:d5:fc:21:84:4a:81:12:92:83:ab:fe:07:e9:84: 27:e3:1d:91:37:fd:5d:71:c3:7d:e6:c9:09:76:5e:49:b0:08: 98:ed:a2:cd:5a:1c:8c:aa:7f:2a:b6:10:87:40:8a:ce:01:ae: 71:c4:64:49:c5:95:c7:20:99:e8:39:90:5e:a2:4c:75:d0:ba: 0b:84:ed:60:f3:96:b1:47:c1:d7:f5:78:c8:d7:60:41:a5:e4: e0:e3:91:c9:ca:e0:52:4d:a0:b0:14:f4:ef:14:dc:f8:16:2b: 46:76:0d:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUwNjExMDMwMTA2WhcNMjUwNjE4MDMwMTA2WjAYMRYwFAYD VQQDEw02ODQ4ZjE3Mi02YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCcAx+VilKq4IvpJTTVPwRE42/YdTBLp7jRqwEY4DbgOsVymnuZmIfZ84GY6 lVE0D8+yFH/vS4VIzfubV3Zws43Lnnh5zm02jrSAU9HuSgSrCx1nBwjBcsk01iMi D72DmZcVAwa1BYUXJoYsz3hfKXxuO+l3Zcdql+u0VToK6HIfnZeuxuqBDqsybBO8 42U9YmWNEUCuDZDsZj+XXOEbAnQ4b4z4sOkali1UrCD7rzQyhMtVgOyvxcGwtE75 LzH4+HyVSfT8p+3H9XBs/E1Jjtg2IhwMqqEhrJCBq5sSJSfGoqJvuXW5BPuOoNAz zXw5FeZxTeOP+mP30kEB9+L6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESYcjmS evl2YL5Ns4OSY0X3aMPOMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxMpKRyIVuLp3+xldO3upmY0u8HH4+HwpMbt0HI3PjVztmXb7MkWvw 32Gij89beu09UkJcc0ZJDaeJIeQQtO78euoyC4Lv9nULhAVrudnZsaoFppw+nBX5 qmDf4dEwcI0R85cF56Fi+9a19mtXWmz28p8zJW8rNlc9iiCJxsy2uu6vPBuLh1qa T1ztnfVCrScoz5al1fwhhEqBEpKDq/4H6YQn4x2RN/1dccN95skJdl5JsAiY7aLN WhyMqn8qthCHQIrOAa5xxGRJxZXHIJnoOZBeokx10LoLhO1g85axR8HX9XjI12BB peTg45HJyuBSTaCwFPTvFNz4FitGdg2b -----END CERTIFICATE-----Generated at Thu Jun 12 14:47:14 2025 by rpki-client