$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft File: LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json) Hash identifier: k5IP7IHYkYfRmoE75Dl9yTULbsOWgYPbfvhA88s6c6w= Subject key identifier: 96:F8:E4:0F:37:9F:99:83:49:35:D8:80:01:71:3F:18:FE:EA:0C:36 Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft Manifest number: 0624 Signing time: Thu 24 Apr 2025 22:33:42 +0000 Manifest this update: Thu 24 Apr 2025 22:33:42 +0000 Manifest next update: Thu 01 May 2025 22:33:42 +0000 Files and hashes: 1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: GhgqPX+u7Im7X9312Wo/0LjknUV9GnIMRy0AnCUIdUY=) 2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: OWvKVTifRt9Iu2tVWtoXO+U1lovVBowFKNMDPAP9PZY=) 3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: 9Ald5xMfp6PS+kyx1BsQkwiBFoLKe14yvlhyEiXrANQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Apr 24 22:33:42 2025 GMT Not After : May 1 22:33:42 2025 GMT Subject: CN=680abc46-20ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:4e:41:3d:03:ee:01:9e:4a:9a:84:ce:cb: 10:b1:02:64:cb:53:d3:83:e7:aa:68:32:f3:9b:38: e6:00:4b:01:fe:4e:af:c0:8b:d4:88:d2:b1:1f:b6: 76:dd:eb:e0:7d:0a:c8:48:73:08:46:cb:4b:1e:4a: 0a:22:6a:2a:24:2c:9e:41:86:8c:d5:28:f2:ef:83: ca:5b:79:5f:14:8b:ab:62:b0:53:dc:c3:b5:1d:52: f7:7e:0c:69:75:f0:85:a3:34:c8:06:51:f7:68:88: c8:98:7a:0c:6a:a0:97:c2:80:0a:e7:cb:c7:df:ad: 1b:69:05:a2:30:66:b6:ea:5f:74:1b:11:b7:9a:a2: 8c:5b:2a:6b:3e:a8:26:dc:e6:6e:e8:42:94:87:8e: bd:ae:93:63:f4:1b:6d:7a:e8:e5:ac:90:a6:03:2a: cc:ed:a7:ec:0a:4d:bb:9b:39:d1:4e:10:b7:05:08: ee:20:0f:5e:0b:96:9e:7b:ac:68:c4:16:f3:51:c4: 1e:2b:74:46:65:99:b8:64:44:46:0d:aa:fc:46:62: 09:3b:6c:ef:54:15:95:1b:31:f9:05:3c:9d:19:9c: 23:c8:fe:d0:d0:dc:00:51:4c:36:f0:ea:f0:c4:61: 6c:dd:73:76:a7:cc:78:d6:ef:32:2f:cf:f3:49:20: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:E4:0F:37:9F:99:83:49:35:D8:80:01:71:3F:18:FE:EA:0C:36 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:c2:1f:e7:bc:07:66:4d:ce:d0:a9:64:d9:bf:09:f2:9f:87: 8a:22:5b:78:74:8b:32:54:78:bc:2c:6f:80:ea:1e:bf:69:7d: 16:63:03:89:34:e0:52:9e:95:11:17:cc:75:30:3c:6f:51:91: 21:91:82:c4:25:f2:1c:6f:86:7f:9d:b8:74:e7:5c:ce:1d:82: 48:8d:93:01:a9:68:2c:c2:6f:ac:76:6f:be:2f:ba:8e:02:b5: 5e:12:5c:1a:98:4d:dd:47:79:c7:18:ef:1e:c0:49:fb:08:05: df:e6:a5:00:73:06:97:bb:9f:be:94:3e:0b:43:b8:b8:5a:3a: b9:3d:20:1b:0f:d7:25:56:19:c8:70:18:86:2a:59:2e:84:a0: af:1b:cc:74:54:41:aa:98:14:44:03:29:b3:ad:cd:f5:4f:cd: 41:ab:df:4b:4c:c3:0e:e8:77:3f:18:65:c7:1f:6b:6b:32:48: b9:68:1b:31:7a:53:a2:d4:86:65:16:2a:91:b0:95:ca:2a:89: 09:82:f2:7b:ec:ab:06:82:91:25:a5:55:c0:c0:ce:f9:b3:3f: 20:c4:2c:85:13:43:00:56:0a:64:8b:73:71:ba:75:07:e9:04: 85:fb:2b:8a:1f:65:6d:a6:45:35:b6:7d:75:b3:f3:b3:f8:80: cf:ed:c8:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNDI0MjIzMzQyWhcNMjUwNTAxMjIzMzQyWjAYMRYwFAYD VQQDEw02ODBhYmM0Ni0yMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9BOQT0D7gGeSpqEzssQsQJky1PTg+eqaDLzmzjmAEsB/k6vwIvUiNKxH7Z2 3evgfQrISHMIRstLHkoKImoqJCyeQYaM1Sjy74PKW3lfFIurYrBT3MO1HVL3fgxp dfCFozTIBlH3aIjImHoMaqCXwoAK58vH360baQWiMGa26l90GxG3mqKMWyprPqgm 3OZu6EKUh469rpNj9BtteujlrJCmAyrM7afsCk27mznRThC3BQjuIA9eC5aee6xo xBbzUcQeK3RGZZm4ZERGDar8RmIJO2zvVBWVGzH5BTydGZwjyP7Q0NwAUUw28Orw xGFs3XN2p8x41u8yL8/zSSDHUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb45A83 n5mDSTXYgAFxPxj+6gw2MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3 bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSwh/nvAdmTc7QqWTZvwnyn4eKIlt4dIsyVHi8LG+A6h6/aX0WYwOJ NOBSnpURF8x1MDxvUZEhkYLEJfIcb4Z/nbh051zOHYJIjZMBqWgswm+sdm++L7qO ArVeElwamE3dR3nHGO8ewEn7CAXf5qUAcwaXu5++lD4LQ7i4Wjq5PSAbD9clVhnI cBiGKlkuhKCvG8x0VEGqmBREAymzrc31T81Bq99LTMMO6Hc/GGXHH2trMki5aBsx elOi1IZlFiqRsJXKKokJgvJ77KsGgpElpVXAwM75sz8gxCyFE0MAVgpki3NxunUH 6QSF+yuKH2VtpkU1tn11s/Oz+IDP7cgY -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:00 2025 by rpki-client