$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json) Hash identifier: GdWs3b49C5h+1KEXa1GfAX1l2fn1SzY1SZ+LS95We8c= Subject key identifier: 78:47:6F:AB:31:A1:C9:E3:14:13:62:7D:5C:55:AE:4A:7B:2E:2E:80 Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft Manifest number: 05A0 Signing time: Thu 24 Apr 2025 22:59:22 +0000 Manifest this update: Thu 24 Apr 2025 22:59:21 +0000 Manifest next update: Thu 01 May 2025 22:59:21 +0000 Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: IBhTn29u7kHjdylXVpjGgbNJ6hgdEOizboeMOVTRxoA=) 2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: s2/gefkjyAwATsY34TF6PruGFfbhsqeQU6X2SCeJSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: Apr 24 22:59:21 2025 GMT Not After : May 1 22:59:21 2025 GMT Subject: CN=680ac249-4d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:52:60:96:11:2b:ba:24:1c:4f:bd:df:08: af:83:62:41:35:84:dd:a3:06:5d:06:4d:1a:21:0e: 2b:34:f5:32:79:e5:01:1e:45:43:c3:bd:18:a9:7e: 38:b1:05:98:85:b4:07:f6:60:23:fb:0c:f7:ac:b8: 97:8a:23:1c:d6:0b:ec:a8:a3:1b:3f:f9:fb:b4:64: 9a:b9:83:7c:e6:ca:b3:ef:91:ee:9c:61:9e:76:2e: 84:d6:42:6c:f5:bc:ac:3e:bd:c2:02:16:06:42:5d: 17:4c:84:2b:a3:17:b1:e9:9f:ac:ea:67:8a:3e:e7: fc:95:4f:49:47:a4:3d:c4:2a:f2:eb:c8:f4:a2:a4: 8c:8a:b0:a5:7f:99:be:e9:e7:06:a4:5c:27:b7:32: ca:71:6e:53:d5:a9:e0:e7:68:5c:af:6c:99:31:4b: 83:41:5b:f0:a6:a4:6a:0d:d2:6f:37:c4:0f:5e:0d: 2b:ab:93:5b:e1:b5:dc:88:a7:f4:eb:9f:0e:d9:49: 8b:9d:86:b7:e5:f5:5b:bb:06:de:a8:30:21:f8:c4: 3c:e4:45:77:84:bb:58:f9:7b:68:6c:44:20:15:37: a7:ac:e3:99:0b:81:03:25:02:ba:88:e8:b0:93:a1: e0:1f:8c:72:86:c4:e4:e8:b0:cf:fe:e3:70:d3:81: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:47:6F:AB:31:A1:C9:E3:14:13:62:7D:5C:55:AE:4A:7B:2E:2E:80 X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8f:69:1b:8e:1f:67:ac:3e:56:98:98:17:8d:2d:a8:6f:5c: e1:e5:c9:1a:ae:f5:8d:e0:42:34:e8:52:a7:38:65:86:90:47: ea:13:f3:a2:34:5d:4b:3a:34:cc:99:01:cb:7b:9e:f8:7a:3a: 94:ad:d3:ce:11:1b:5e:bb:13:1a:39:aa:7d:7b:71:de:47:ef: be:bc:fb:80:9c:69:54:96:cb:97:09:cf:85:54:53:5f:3a:a4: 85:9e:d0:d0:79:ce:39:b6:12:c7:66:58:c4:e9:86:43:32:97: b5:99:e7:ae:2a:6d:d4:d2:3b:ac:ce:ee:24:ae:0e:df:38:e3: 71:05:26:75:b6:c8:88:a8:4f:ba:7f:59:08:00:3e:6a:73:65: 0d:a4:ff:17:c5:d5:f8:b6:0c:7f:e6:fc:e9:53:41:d4:06:7f: e2:69:50:33:67:99:f2:86:05:c1:d8:f4:18:67:03:e8:36:e7: e4:e0:86:b1:8d:a0:e0:1b:51:07:a0:e5:c2:75:88:a7:25:49: f3:4e:84:f4:9b:79:3c:ac:d4:ee:a6:a8:6c:f0:1e:19:98:7e: e7:16:8e:b9:e0:1b:2f:5b:4e:6b:d6:10:e1:47:ef:4b:c5:45: a2:f4:ee:0a:1a:17:3f:fe:7b:41:c5:5f:52:06:01:16:fc:13: bd:25:6d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjUwNDI0MjI1OTIxWhcNMjUwNTAxMjI1OTIxWjAYMRYwFAYD VQQDEw02ODBhYzI0OS00ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycRSYJYRK7okHE+93wivg2JBNYTdowZdBk0aIQ4rNPUyeeUBHkVDw70YqX44 sQWYhbQH9mAj+wz3rLiXiiMc1gvsqKMbP/n7tGSauYN85sqz75HunGGedi6E1kJs 9bysPr3CAhYGQl0XTIQroxex6Z+s6meKPuf8lU9JR6Q9xCry68j0oqSMirClf5m+ 6ecGpFwntzLKcW5T1ang52hcr2yZMUuDQVvwpqRqDdJvN8QPXg0rq5Nb4bXciKf0 658O2UmLnYa35fVbuwbeqDAh+MQ85EV3hLtY+XtobEQgFTenrOOZC4EDJQK6iOiw k6HgH4xyhsTk6LDP/uNw04EZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhHb6sx ocnjFBNifVxVrkp7Li6AMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlj2kbjh9nrD5WmJgXjS2ob1zh5ckarvWN4EI06FKnOGWGkEfqE/Oi NF1LOjTMmQHLe574ejqUrdPOERteuxMaOap9e3HeR+++vPuAnGlUlsuXCc+FVFNf OqSFntDQec45thLHZljE6YZDMpe1meeuKm3U0juszu4krg7fOONxBSZ1tsiIqE+6 f1kIAD5qc2UNpP8XxdX4tgx/5vzpU0HUBn/iaVAzZ5nyhgXB2PQYZwPoNufk4Iax jaDgG1EHoOXCdYinJUnzToT0m3k8rNTupqhs8B4ZmH7nFo654BsvW05r1hDhR+9L xUWi9O4KGhc//ntBxV9SBgEW/BO9JW00 -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:08 2025 by rpki-client