$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: lDZ0S0UTg3PKPYRPi7tveZRvowDjmdHvZG0HI7RhujU= Subject key identifier: 23:EF:0D:E4:93:62:73:67:C7:EE:2E:46:80:5B:65:4F:37:43:82:04 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:58:23 +0000 Manifest this update: Fri 25 Apr 2025 05:58:22 +0000 Manifest next update: Fri 02 May 2025 05:58:22 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: gcxi+Zy4ide2e3zQw9fC/YDbGr4MVDribzlkMoKiOMU=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Apr 25 05:58:22 2025 GMT Not After : May 2 05:58:22 2025 GMT Subject: CN=680b247f-f4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:b4:1d:de:5b:8d:9e:10:79:a7:9b:50:ac: 08:ce:08:a8:a3:30:8c:7d:d0:8a:62:89:f8:72:f2: 67:0d:97:97:b9:af:0d:88:f8:a7:4a:ee:50:5d:38: b5:78:a1:a0:e2:64:4e:94:07:7f:4c:28:fa:69:5a: 87:cd:da:c3:b9:12:b7:85:b6:8a:d1:ec:fc:82:81: ef:03:77:3e:e8:bd:8a:ff:b7:df:21:32:a6:88:a4: b3:da:9c:ac:ae:b9:2d:9a:28:ef:6a:03:23:f4:42: b9:09:fb:f8:1c:85:c8:da:16:31:2b:76:3c:66:57: e4:5e:8a:33:98:ea:01:81:c6:ff:20:50:e8:43:37: 95:d4:8d:cb:06:f6:2f:52:14:8f:8b:16:ac:83:d6: 20:d4:99:12:ff:4b:7d:28:33:66:df:07:b4:08:07: af:19:86:df:37:f2:cd:41:d5:36:b3:c1:09:7d:fa: c5:07:e7:2e:24:a0:6c:02:27:8f:65:e0:98:23:f1: 89:08:c6:c0:07:05:ef:37:f4:2a:75:6d:4c:ac:65: a5:1f:32:bd:6f:4b:44:90:8f:ab:1e:98:04:db:c2: e1:52:59:e4:c9:f6:69:6d:ec:46:6c:fa:87:d5:a6: 32:cf:12:b1:00:c5:0e:5b:c2:b8:3c:e5:bd:d2:04: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EF:0D:E4:93:62:73:67:C7:EE:2E:46:80:5B:65:4F:37:43:82:04 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:89:e7:8a:de:6f:c0:89:9f:e6:cb:b3:01:c2:42:e1:07:73: 34:aa:12:ca:76:97:c7:66:93:87:13:79:22:b2:ac:6c:e4:8b: 7a:a5:7f:6b:c7:13:59:a4:b6:f4:5b:a2:29:06:02:92:d3:27: 90:7a:f8:69:b2:a3:35:15:33:a3:c0:98:39:ed:f5:9c:dd:b7: 37:6c:e2:0c:24:6e:3e:58:34:46:02:3b:87:16:c0:80:2a:94: 3d:78:44:62:1c:b3:c5:61:af:36:de:ae:59:8b:e0:1f:c3:9c: 26:b4:54:9d:bb:9a:3e:2a:26:72:7f:ce:48:39:92:4f:a3:3a: 50:33:b9:40:d3:7f:b1:ec:9f:71:1b:f6:8e:b9:c7:0a:6f:27: 9b:e9:a6:b5:e9:8b:23:5f:ed:d8:a8:33:9c:a4:cf:d2:1f:7b: 73:2f:22:79:32:29:2d:85:b7:f3:79:7e:9b:13:25:9f:fd:c7: de:c4:fc:36:65:fd:7c:ef:2b:9e:9d:37:b0:fb:df:8a:b6:bb: 02:de:81:4a:ed:36:68:7c:83:98:fa:7d:57:3d:9d:b2:d3:83: 9d:dc:ca:98:08:16:91:b1:5f:90:cf:89:9a:50:7d:b3:2d:d2: 05:90:d2:c8:cc:f4:3f:c2:cf:ad:cf:2b:d8:0a:b3:eb:0b:31: 25:33:b1:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQ4MTExMC8GA1UEBRMoMkRFOEYyMTZEQ0QyQkVDNkQzOEZFQkYwMUUwNkQ4QTk5 MDI3MEVCRjAeFw0yNTA0MjUwNTU4MjJaFw0yNTA1MDIwNTU4MjJaMBgxFjAUBgNV BAMTDTY4MGIyNDdmLWY0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXS7Qd3luNnhB5p5tQrAjOCKijMIx90Ipiifhy8mcNl5e5rw2I+KdK7lBdOLV4 oaDiZE6UB39MKPppWofN2sO5EreFtorR7PyCge8Ddz7ovYr/t98hMqaIpLPanKyu uS2aKO9qAyP0QrkJ+/gchcjaFjErdjxmV+ReijOY6gGBxv8gUOhDN5XUjcsG9i9S FI+LFqyD1iDUmRL/S30oM2bfB7QIB68Zht838s1B1TazwQl9+sUH5y4koGwCJ49l 4Jgj8YkIxsAHBe839Cp1bUysZaUfMr1vS0SQj6semATbwuFSWeTJ9mlt7EZs+ofV pjLPErEAxQ5bwrg85b3SBDubAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI+8N5JNi c2fH7i5GgFtlTzdDggQwHwYDVR0jBBgwFoAULejyFtzSvsbTj+vwHgbYqZAnDr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDgxLzg3RDM1MjBBODlF MTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGVqeUZ0elN2c2JUai12d0hnYllxWkFuRHI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDgxLzg3RDM1MjBBODlFMTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNi VGotdndIZ2JZcVpBbkRyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+J54reb8CJn+bLswHCQuEHczSqEsp2l8dmk4cTeSKyrGzki3qlf2vH E1mktvRboikGApLTJ5B6+GmyozUVM6PAmDnt9Zzdtzds4gwkbj5YNEYCO4cWwIAq lD14RGIcs8VhrzberlmL4B/DnCa0VJ27mj4qJnJ/zkg5kk+jOlAzuUDTf7Hsn3Eb 9o65xwpvJ5vpprXpiyNf7dioM5ykz9Ife3MvInkyKS2Ft/N5fpsTJZ/9x97E/DZl /XzvK56dN7D734q2uwLegUrtNmh8g5j6fVc9nbLTg53cypgIFpGxX5DPiZpQfbMt 0gWQ0sjM9D/Cz63PK9gKs+sLMSUzsV4= -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:33 2025 by rpki-client