$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: KFhxqSj5WDJgn/hx3hR29YMMc6/CsgVfHr1n2+3E0Jw= Subject key identifier: B2:EF:8B:7C:4A:33:97:DE:E7:BC:35:E5:DE:04:6D:46:23:9A:4D:3A Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0F68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 1620 Signing time: Sat 31 May 2025 17:38:28 +0000 Manifest this update: Sat 31 May 2025 17:38:27 +0000 Manifest next update: Sat 07 Jun 2025 17:38:27 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: Poth6yN7PMKh4utk16hwwCq86JSZFc3ijHEYrbRIQrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3944 (0xf68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: May 31 17:38:27 2025 GMT Not After : Jun 7 17:38:27 2025 GMT Subject: CN=683b3e94-c6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:12:09:a6:b8:0f:af:fb:fe:09:40:a2:eb: 45:c0:0f:6a:83:66:01:61:4c:4b:82:2a:c3:5b:82: d4:84:7c:26:fa:b2:37:34:df:93:ec:a5:a4:31:d6: 5f:d1:94:6b:d4:20:f4:1d:e1:1f:d2:9d:7e:18:75: b9:15:bc:49:48:75:da:26:82:68:48:2f:3d:b9:1e: c4:5e:c7:90:49:40:e9:60:e8:a3:8e:a2:d7:f5:7a: 72:8c:6d:01:3f:b1:e5:5f:f4:29:f9:da:30:76:dd: 15:37:1f:45:ec:90:6b:65:97:41:b1:ab:52:83:59: f0:c0:8c:d7:b9:0c:07:ae:a9:c3:2a:4d:a2:8f:f9: e1:da:73:47:57:f1:bf:04:19:0f:90:9d:94:7b:74: 7d:74:e7:9f:12:a9:5f:7f:07:4a:54:c4:14:75:da: 2a:cd:4f:51:2d:13:18:c2:2a:b8:21:c5:6b:07:ec: 21:3c:13:ba:43:c9:74:09:31:b2:47:0a:4d:a2:b3: cb:85:bb:63:00:4d:59:bb:a5:f7:f0:39:65:35:4b: 9a:85:41:1c:79:ec:15:9d:90:56:4e:c2:23:05:a3: 06:b7:ed:51:dc:6a:ab:92:29:a0:22:60:0b:bf:45: f2:e0:7f:e7:39:3a:33:93:fe:ca:5d:c1:d6:cf:24: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EF:8B:7C:4A:33:97:DE:E7:BC:35:E5:DE:04:6D:46:23:9A:4D:3A X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:f2:2c:c5:2d:e2:1c:8f:52:81:7e:1e:02:32:d1:c0:0a: 71:c7:df:d3:bb:ec:1a:eb:3b:95:8b:68:a1:28:16:15:d7:8b: db:ee:bf:c0:d0:4d:73:19:21:f4:83:c0:68:16:87:75:fe:85: b4:50:30:0c:f2:32:e0:d9:66:40:28:29:f4:a4:ef:7f:32:f3: ef:77:a6:c4:1b:17:dc:2c:eb:19:e5:a0:f4:98:8b:e0:b9:f5: 63:6f:8e:83:c1:af:76:9d:a6:9d:01:29:03:3c:13:b1:4c:c9: 15:79:0d:64:de:17:e3:9d:e5:b3:f9:de:9a:90:ee:cd:c2:fc: fd:20:cd:e2:07:24:29:8d:0c:84:e0:e5:1d:17:7f:e2:6f:86: 01:4f:75:4e:be:0e:7d:b5:36:db:04:b1:02:3c:99:d1:c7:ef: 75:56:5e:94:ad:df:20:6a:ce:91:96:3b:81:30:88:50:c7:89: 29:c0:c2:0b:ba:dc:fa:0e:24:f4:49:40:18:27:cc:24:98:62: e1:6b:95:82:4f:8c:29:21:48:a7:2a:d6:e7:f6:1c:61:14:85: 9d:d4:bc:e0:8d:ee:e6:93:a9:8f:3a:76:9b:b0:5a:fa:6f:a6: ea:61:b5:c2:3b:f9:ca:9d:d7:a6:39:9d:e1:e5:07:1a:9f:1c: e0:97:60:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUwNTMxMTczODI3WhcNMjUwNjA3MTczODI3WjAYMRYwFAYD VQQDEw02ODNiM2U5NC1jNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLESCaa4D6/7/glAoutFwA9qg2YBYUxLgirDW4LUhHwm+rI3NN+T7KWkMdZf 0ZRr1CD0HeEf0p1+GHW5FbxJSHXaJoJoSC89uR7EXseQSUDpYOijjqLX9XpyjG0B P7HlX/Qp+dowdt0VNx9F7JBrZZdBsatSg1nwwIzXuQwHrqnDKk2ij/nh2nNHV/G/ BBkPkJ2Ue3R9dOefEqlffwdKVMQUddoqzU9RLRMYwiq4IcVrB+whPBO6Q8l0CTGy RwpNorPLhbtjAE1Zu6X38DllNUuahUEceewVnZBWTsIjBaMGt+1R3GqrkimgImAL v0Xy4H/nOTozk/7KXcHWzySxUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLvi3xK M5fe57w15d4EbUYjmk06MB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8uvIsxS3iHI9SgX4eAjLRwApxx9/Tu+wa6zuVi2ihKBYV14vb7r/A 0E1zGSH0g8BoFod1/oW0UDAM8jLg2WZAKCn0pO9/MvPvd6bEGxfcLOsZ5aD0mIvg ufVjb46Dwa92naadASkDPBOxTMkVeQ1k3hfjneWz+d6akO7Nwvz9IM3iByQpjQyE 4OUdF3/ib4YBT3VOvg59tTbbBLECPJnRx+91Vl6Urd8gas6RljuBMIhQx4kpwMIL utz6DiT0SUAYJ8wkmGLha5WCT4wpIUinKtbn9hxhFIWd1Lzgje7mk6mPOnabsFr6 b6bqYbXCO/nKndemOZ3h5Qcanxzgl2A7 -----END CERTIFICATE-----Generated at Mon Jun 2 07:19:52 2025 by rpki-client