$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: 1IyREGaOKiX0KN0RWojMYLZpEA8TWChRJc1EjZfRxd0= Subject key identifier: 6D:C6:15:28:E3:58:46:8E:51:23:D3:8B:C5:55:95:A2:9F:1E:B6:38 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 0137 Signing time: Fri 25 Apr 2025 03:32:15 +0000 Manifest this update: Fri 25 Apr 2025 03:32:14 +0000 Manifest next update: Fri 02 May 2025 03:32:14 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: gQdBRDA8yiLxcC1c4ZjpNgk9SzhwJ4H0yIVmAwtjDMY=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: Apr 25 03:32:14 2025 GMT Not After : May 2 03:32:14 2025 GMT Subject: CN=680b023f-dc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:39:ed:ac:02:71:3f:c5:1c:08:b5:b5:92: 35:a5:14:ec:26:c8:83:0f:6f:c9:98:7b:a7:90:02: 8b:10:9e:ea:a6:29:f2:fc:29:e5:5c:91:fe:6c:a0: 3c:16:4f:77:74:cd:d3:04:c4:86:3a:6c:94:c4:03: 85:a8:bf:cd:96:9c:b6:ca:f9:bf:19:49:94:43:fe: 83:49:a2:9b:df:c5:7b:93:4e:bd:a6:c5:64:e2:8f: 24:21:9e:a8:d0:4c:19:11:2b:6a:44:8b:80:ed:e1: d7:43:39:17:c2:57:9b:a6:1e:7d:80:30:83:43:c7: 1a:fd:ab:d9:ed:61:e9:d8:e4:72:89:ba:7e:ca:68: 29:fd:10:ce:4e:0d:03:17:0b:86:a7:d0:10:9d:b1: 36:73:07:68:f7:21:df:b6:88:48:fc:d9:17:a2:cd: 67:1f:1e:fc:6c:4d:dd:33:bb:5c:1d:60:29:d0:59: af:86:43:a2:d3:a7:84:7a:7b:be:7f:d5:85:a6:1f: 1b:64:1e:3b:24:d5:7e:13:84:c7:a2:19:91:7b:9c: f5:68:5d:e6:53:87:5c:f7:46:c0:b4:24:0c:1d:7c: df:00:e1:a3:51:1c:5e:de:3c:9c:6d:ac:34:de:f6: bb:ae:64:d2:5f:60:b6:ce:27:11:1e:fa:dd:9e:fb: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:15:28:E3:58:46:8E:51:23:D3:8B:C5:55:95:A2:9F:1E:B6:38 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1e:08:05:88:52:15:82:62:95:d4:47:12:63:9c:de:c5:4a: 8a:b5:4d:d6:90:15:a8:cb:0d:b1:ae:35:49:fa:d9:76:ad:b5: 41:4b:bb:d8:29:d5:d2:fd:3f:53:28:f7:dd:e4:b5:29:75:30: d6:d2:18:50:1b:55:f8:94:ad:28:d7:90:e7:b3:fc:a8:c9:bb: 96:70:b7:28:b4:3a:a9:2a:2c:57:71:bc:41:f8:ce:bc:89:6b: 1c:f7:2d:25:47:71:97:56:d4:be:72:e8:0a:63:32:b2:9f:63: 38:dd:00:9f:de:02:a2:ce:e3:98:00:88:78:e8:b3:9c:ba:2e: f4:47:20:35:2b:78:48:67:e8:6b:d3:c1:43:3a:99:aa:d2:b9: 91:07:1c:52:d4:35:5d:46:d8:84:12:2a:6b:76:53:20:f4:67: 43:06:51:08:67:ae:6a:aa:59:a6:16:2c:ee:aa:22:32:af:20: 11:78:2d:82:cf:c6:56:cf:d4:9c:75:f5:48:17:14:2e:28:40: 76:0f:a6:2b:10:d0:40:1f:0a:bf:5d:9f:15:21:97:9d:07:20: 71:74:97:48:11:70:c2:7f:5a:d5:a8:b9:87:5f:1b:4d:88:66: 2e:bf:16:9a:00:46:8d:fc:89:19:4b:a5:2c:60:07:8f:11:10: 58:59:88:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNDI1MDMzMjE0WhcNMjUwNTAyMDMzMjE0WjAYMRYwFAYD VQQDEw02ODBiMDIzZi1kYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrI57awCcT/FHAi1tZI1pRTsJsiDD2/JmHunkAKLEJ7qpiny/CnlXJH+bKA8 Fk93dM3TBMSGOmyUxAOFqL/Nlpy2yvm/GUmUQ/6DSaKb38V7k069psVk4o8kIZ6o 0EwZEStqRIuA7eHXQzkXwlebph59gDCDQ8ca/avZ7WHp2ORyibp+ymgp/RDOTg0D FwuGp9AQnbE2cwdo9yHftohI/NkXos1nHx78bE3dM7tcHWAp0FmvhkOi06eEenu+ f9WFph8bZB47JNV+E4THohmRe5z1aF3mU4dc90bAtCQMHXzfAOGjURxe3jycbaw0 3va7rmTSX2C2zicRHvrdnvtVpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3GFSjj WEaOUSPTi8VVlaKfHrY4MB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXHggFiFIVgmKV1EcSY5zexUqKtU3WkBWoyw2xrjVJ+tl2rbVBS7vY KdXS/T9TKPfd5LUpdTDW0hhQG1X4lK0o15Dns/yoybuWcLcotDqpKixXcbxB+M68 iWsc9y0lR3GXVtS+cugKYzKyn2M43QCf3gKizuOYAIh46LOcui70RyA1K3hIZ+hr 08FDOpmq0rmRBxxS1DVdRtiEEiprdlMg9GdDBlEIZ65qqlmmFizuqiIyryAReC2C z8ZWz9ScdfVIFxQuKEB2D6YrENBAHwq/XZ8VIZedByBxdJdIEXDCf1rVqLmHXxtN iGYuvxaaAEaN/IkZS6UsYAePERBYWYjX -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client