$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: 3XUil/QaF34/KWHYvDlObuoK0JM41nTAI/8O49WAQ9k= Subject key identifier: 87:A6:F5:9D:6C:4D:40:8E:F3:7D:7D:C6:4D:DD:51:52:E5:32:71:7B Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 036A Signing time: Sat 31 May 2025 01:07:15 +0000 Manifest this update: Sat 31 May 2025 01:07:14 +0000 Manifest next update: Sat 07 Jun 2025 01:07:14 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: Hf3g+V/Cz38LMBVLCbkrCqnFdWH7GT4C6aUNMQrj41c=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2V4s60CBepyFsN4hkIBA1O5APSOWrUwQgr6qjDAHtko=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: PpnJ+skHtxU80Y62k+Cdmycu9izolR2+X8heLZ727nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: May 31 01:07:14 2025 GMT Not After : Jun 7 01:07:14 2025 GMT Subject: CN=683a5643-3dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:10:e2:5d:01:7e:ad:df:a5:43:6c:e3:57:d3: ef:f3:89:10:06:e0:8e:f0:2c:0a:fe:8e:e1:c1:7f: 5a:2f:03:a6:f1:29:c4:6a:fd:65:f3:dd:c6:8f:7e: 06:22:18:f7:5f:ac:e8:6a:d6:03:06:82:b1:b7:f8: 12:4c:56:33:23:85:1a:76:19:67:3c:91:63:02:a0: 2a:50:ac:8f:b3:f4:77:3d:c0:a4:7a:e5:23:34:ed: 7f:bd:40:ed:89:5e:11:d4:c5:86:0b:c5:17:57:08: 83:c5:06:d0:3c:64:ae:c7:67:19:2d:67:9b:41:58: c3:f1:67:91:6a:80:ec:25:67:3a:70:f2:f2:84:8b: 30:7c:20:83:c8:22:d0:e9:af:26:c6:10:14:d2:62: 0a:52:90:94:58:06:72:df:31:e1:bb:35:08:f5:00: 91:80:7d:9e:25:76:49:c7:a7:ec:c1:8f:1b:38:66: ce:fa:ae:82:8a:39:9a:eb:1f:6f:f9:6e:b4:cf:53: 69:d4:77:27:ad:c7:1f:f0:96:b0:52:72:ca:9e:bf: 28:a7:14:f0:43:b8:61:68:02:68:86:4f:b7:24:78: cd:62:09:ea:f5:2f:ae:25:d8:83:0a:3f:d3:1a:03: 3d:51:92:24:12:b1:cf:6d:fc:c4:18:a3:15:08:25: ae:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:F5:9D:6C:4D:40:8E:F3:7D:7D:C6:4D:DD:51:52:E5:32:71:7B X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7b:dc:76:8e:79:b4:f7:8d:5c:89:94:3e:aa:31:3a:3d:de: fc:a8:33:f9:67:f9:73:08:27:97:e6:a2:44:6a:4c:c4:57:5b: b6:9f:2a:4d:b2:b6:6d:03:db:6c:d2:27:7c:50:5d:ff:b0:3b: c4:10:ef:c5:fc:86:d5:b9:ed:98:f4:f1:45:a2:50:f6:27:1d: ac:3d:8d:2c:b9:9d:fc:b7:38:8f:fa:c2:2b:b4:68:b7:31:22: d9:ce:69:8c:ca:fc:ca:a3:92:81:30:22:bf:d9:5f:a0:e0:46: da:9f:3b:d2:68:3b:c6:63:45:c2:94:60:80:73:17:19:47:cd: 5d:86:99:35:f5:85:79:d3:10:ac:94:81:50:57:d9:67:ab:23: a0:1b:52:70:b5:4e:33:de:83:72:d7:ab:51:e7:8c:71:52:9f: 1c:d6:79:c0:ad:3a:4c:5a:db:58:59:3c:46:07:44:de:d9:41: fa:54:31:dc:5d:7d:e0:8e:77:f0:9a:4f:91:7d:77:d3:a4:e8: 7b:d2:af:6f:0b:3b:a7:46:3a:b2:81:ee:99:dc:02:06:3a:0e: e9:2c:26:38:64:e7:e6:6f:1e:d4:b0:c0:3b:3b:90:f6:58:9c: 54:48:37:df:0d:79:38:06:bd:83:bf:36:a8:fa:9e:e6:44:8a: 82:fd:97:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwNTMxMDEwNzE0WhcNMjUwNjA3MDEwNzE0WjAYMRYwFAYD VQQDEw02ODNhNTY0My0zZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RDiXQF+rd+lQ2zjV9Pv84kQBuCO8CwK/o7hwX9aLwOm8SnEav1l893Gj34G Ihj3X6zoatYDBoKxt/gSTFYzI4UadhlnPJFjAqAqUKyPs/R3PcCkeuUjNO1/vUDt iV4R1MWGC8UXVwiDxQbQPGSux2cZLWebQVjD8WeRaoDsJWc6cPLyhIswfCCDyCLQ 6a8mxhAU0mIKUpCUWAZy3zHhuzUI9QCRgH2eJXZJx6fswY8bOGbO+q6Cijma6x9v +W60z1Np1Hcnrccf8JawUnLKnr8opxTwQ7hhaAJohk+3JHjNYgnq9S+uJdiDCj/T GgM9UZIkErHPbfzEGKMVCCWuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIem9Z1s TUCO8319xk3dUVLlMnF7MB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUe9x2jnm0941ciZQ+qjE6Pd78qDP5Z/lzCCeX5qJEakzEV1u2nypN srZtA9ts0id8UF3/sDvEEO/F/IbVue2Y9PFFolD2Jx2sPY0suZ38tziP+sIrtGi3 MSLZzmmMyvzKo5KBMCK/2V+g4EbanzvSaDvGY0XClGCAcxcZR81dhpk19YV50xCs lIFQV9lnqyOgG1JwtU4z3oNy16tR54xxUp8c1nnArTpMWttYWTxGB0Te2UH6VDHc XX3gjnfwmk+RfXfTpOh70q9vCzunRjqyge6Z3AIGOg7pLCY4ZOfmbx7UsMA7O5D2 WJxUSDffDXk4Br2Dvzao+p7mRIqC/ZcM -----END CERTIFICATE-----Generated at Sat May 31 17:18:49 2025 by rpki-client