$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: zXZKowjJsVD43qFawik2J2etumdzLqzZtNPBfHdoGKE= Subject key identifier: 64:8D:CF:46:FE:3C:34:D0:E3:6C:31:1E:A8:4D:04:27:9F:61:83:FA Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 11C2 Signing time: Fri 30 May 2025 17:20:14 +0000 Manifest this update: Fri 30 May 2025 17:20:14 +0000 Manifest next update: Fri 06 Jun 2025 17:20:14 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: 8mES1JX4pBlKVOIKLjCgJq4nu0E+ivvy48VBOQJEi94=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: j4Rp5D2+LCtQywvaF1YDJd+cLnUdbw+y2x0d8ZW0p8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: May 30 17:20:14 2025 GMT Not After : Jun 6 17:20:14 2025 GMT Subject: CN=6839e8ce-722f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:2a:42:b6:56:f2:71:c0:76:b7:65:a7:7c: 89:0c:d9:48:61:9c:2e:51:61:fa:e9:b2:83:d4:6f: fb:7a:94:d4:d7:4b:d9:a3:66:38:7c:59:53:53:75: 9d:fc:32:b2:55:3b:46:54:71:7b:cc:da:41:9e:4d: 86:3b:5b:a1:55:05:7d:9d:94:90:df:40:cb:cd:d7: 06:2d:fe:8c:86:b0:78:64:73:fe:de:06:a0:a8:dc: e0:53:15:9f:c3:67:68:38:12:69:f3:7b:59:9f:05: f3:4f:ef:b3:f1:d8:93:8f:cb:31:fe:2b:dd:74:a6: c2:47:1d:d8:c6:c7:ac:42:16:a7:c0:d6:2c:00:18: ca:62:ce:62:66:8b:e8:25:e7:54:8f:3b:f5:ec:c0: 35:d0:e2:90:18:e2:f4:9b:f2:40:ba:b5:50:a6:31: 5f:07:66:5c:20:93:77:34:77:4a:e7:99:e0:1c:c9: d9:0a:e6:2b:69:1d:54:0c:95:7d:9b:c5:4b:50:3c: 1b:31:ff:16:c9:52:16:27:b2:e8:41:d2:b0:38:fe: 9b:4b:85:31:65:01:98:28:ef:c1:39:dd:e4:9c:c3: 43:7d:78:44:3f:be:78:d7:4e:22:27:b8:95:1d:ba: d3:8f:2b:82:e9:b7:72:b7:8f:1a:17:70:04:b8:b5: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8D:CF:46:FE:3C:34:D0:E3:6C:31:1E:A8:4D:04:27:9F:61:83:FA X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:89:ec:06:19:2c:e5:db:80:ee:17:c5:e4:9a:4c:27:b5: aa:ea:73:bd:22:c9:fd:05:81:a7:d7:95:fe:7c:1b:20:b1:4e: 1e:3c:19:e0:5e:66:21:fd:b7:c0:67:f8:ad:3d:60:11:b5:2e: 37:6f:dc:ba:1f:6a:a1:14:c3:f1:cf:c6:81:ea:7e:93:1e:a0: 8a:f9:b8:41:19:e2:aa:5b:36:fa:04:28:1c:47:1b:1f:a8:45: 70:f4:dc:10:01:7f:72:86:f4:0e:53:d8:a5:84:54:d5:d2:2f: 2f:ef:d3:e3:86:39:77:6e:ed:7c:a3:2e:4a:89:db:93:10:7a: 0f:7e:1c:fe:84:5a:8f:b7:8f:f7:8a:b3:60:56:74:69:86:08: 04:a8:34:0f:c4:e4:93:6a:76:bb:72:19:08:88:81:d5:5b:71: 90:b3:6c:a7:91:c0:16:42:13:2e:3d:83:92:1d:4b:72:10:13: 15:8b:f8:16:ad:3b:35:22:9f:4c:af:20:15:63:25:4b:23:f3: 7b:9d:77:31:95:5e:94:e9:3b:87:cc:f8:7b:1f:91:20:63:72: 0d:21:ec:ed:d7:91:59:75:a4:7a:3c:3c:50:d5:8b:df:d0:4e: 68:16:41:23:5c:00:11:be:1b:4d:b5:39:bd:a2:d8:28:7b:44: 70:d2:59:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjUwNTMwMTcyMDE0WhcNMjUwNjA2MTcyMDE0WjAYMRYwFAYD VQQDEw02ODM5ZThjZS03MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhcqQrZW8nHAdrdlp3yJDNlIYZwuUWH66bKD1G/7epTU10vZo2Y4fFlTU3Wd /DKyVTtGVHF7zNpBnk2GO1uhVQV9nZSQ30DLzdcGLf6MhrB4ZHP+3gagqNzgUxWf w2doOBJp83tZnwXzT++z8diTj8sx/ivddKbCRx3YxsesQhanwNYsABjKYs5iZovo JedUjzv17MA10OKQGOL0m/JAurVQpjFfB2ZcIJN3NHdK55ngHMnZCuYraR1UDJV9 m8VLUDwbMf8WyVIWJ7LoQdKwOP6bS4UxZQGYKO/BOd3knMNDfXhEP754104iJ7iV HbrTjyuC6bdyt48aF3AEuLWUXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSNz0b+ PDTQ42wxHqhNBCefYYP6MB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaa4nsBhks5duA7hfF5JpMJ7Wq6nO9Isn9BYGn15X+fBsgsU4ePBng XmYh/bfAZ/itPWARtS43b9y6H2qhFMPxz8aB6n6THqCK+bhBGeKqWzb6BCgcRxsf qEVw9NwQAX9yhvQOU9ilhFTV0i8v79Pjhjl3bu18oy5KiduTEHoPfhz+hFqPt4/3 irNgVnRphggEqDQPxOSTana7chkIiIHVW3GQs2ynkcAWQhMuPYOSHUtyEBMVi/gW rTs1Ip9MryAVYyVLI/N7nXcxlV6U6TuHzPh7H5EgY3INIezt15FZdaR6PDxQ1Yvf 0E5oFkEjXAARvhtNtTm9otgoe0Rw0llV -----END CERTIFICATE-----Generated at Sat May 31 16:25:57 2025 by rpki-client