$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: WpWHJCVp82qe1Iwado7iKTzSA/I/W/8t1YTe+Og7YoY= Subject key identifier: ED:05:6F:93:20:81:9A:81:3D:7D:E2:6E:2D:77:72:38:40:0C:91:13 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01BE Signing time: Fri 25 Apr 2025 02:19:06 +0000 Manifest this update: Fri 25 Apr 2025 02:19:06 +0000 Manifest next update: Fri 02 May 2025 02:19:06 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: D52+Rx6N+3y0JGoc/+0xQ69orIbiFNccYkG0js8Ofs0=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Apr 25 02:19:06 2025 GMT Not After : May 2 02:19:06 2025 GMT Subject: CN=680af11a-18c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ff:ee:d3:ec:5c:9d:70:8d:b3:95:61:38:bc: f4:85:a1:44:b1:2d:ea:43:d5:3e:ff:86:a3:71:cc: cd:af:f6:02:ef:f0:9a:5e:92:33:f1:dc:ab:d5:bf: 9e:3a:f1:77:36:03:22:dd:26:2f:41:eb:93:ac:a0: f5:80:2e:f1:ed:d2:36:3a:56:9e:48:d2:ee:f7:81: 5c:32:a0:52:eb:dc:a1:a7:3a:8f:9e:cf:72:a2:16: e1:c4:ed:61:bd:1b:d8:90:54:12:6a:12:bd:6c:5c: 0b:9b:8a:2e:9c:d0:bf:91:9c:39:09:a4:9b:30:6d: 28:7d:ed:2c:27:0c:fa:e4:77:18:04:32:b5:2e:52: 9b:b8:e5:4b:ef:a9:aa:84:18:b9:4e:32:68:2a:31: 28:9b:59:ae:72:98:43:98:f8:c5:ab:f8:79:d9:73: 66:37:55:2b:73:4e:24:c3:10:b7:f2:e6:9d:99:8a: 58:da:08:64:63:65:c7:25:57:51:a8:0a:b5:dc:12: 2d:27:50:e0:45:a5:ca:db:3f:e3:ff:db:39:57:a8: 96:74:5f:86:56:47:2c:ae:ac:16:50:b8:8f:c3:f4: b6:33:3a:f3:12:0e:e9:6f:ba:37:c4:a2:ba:92:21: e7:9d:20:be:df:d7:a4:24:9d:a2:68:ae:ba:e5:d2: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:05:6F:93:20:81:9A:81:3D:7D:E2:6E:2D:77:72:38:40:0C:91:13 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:4e:c8:0c:36:58:27:1d:08:eb:52:bc:1b:8e:ca:8f:df: 52:fe:82:e5:84:e6:30:3c:65:29:6f:2c:64:11:35:04:ff:2b: 71:1c:44:7f:6a:af:e7:58:00:e4:f0:bc:2e:c9:f1:a5:18:82: 54:bb:df:9b:ed:2e:43:8d:96:b4:20:f7:dd:c4:15:36:98:5e: 1d:6d:2c:c4:ef:da:ed:5b:0c:be:70:91:6e:a4:de:e5:c4:24: e6:fc:ee:50:31:33:b4:60:61:27:27:e8:a0:18:4b:0d:5a:3a: 9c:5f:56:d3:11:28:48:65:0d:b4:f9:31:33:c9:53:6a:98:1c: ce:86:10:62:81:e4:a0:52:bd:03:b0:7a:18:61:9e:d8:38:95: ba:b4:e6:45:3f:f2:d1:3a:f5:d2:25:63:ef:6a:56:0d:72:f5: 61:f9:15:66:d5:25:f9:e6:14:d1:e1:c6:e8:44:8e:f4:87:a5: 0a:18:d9:73:c8:68:03:10:80:d0:6d:89:8c:72:88:ea:1e:fc: 06:06:f4:af:ea:90:79:5f:7e:d0:3b:59:4f:47:aa:f1:af:56: f7:da:9f:a3:1c:00:46:90:ec:9f:fc:d4:07:7b:97:83:d3:df: 04:00:3f:8a:39:ea:8e:72:c4:70:e2:44:e8:a9:03:68:d2:03: 16:8c:ff:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNDI1MDIxOTA2WhcNMjUwNTAyMDIxOTA2WjAYMRYwFAYD VQQDEw02ODBhZjExYS0xOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8v/u0+xcnXCNs5VhOLz0haFEsS3qQ9U+/4ajcczNr/YC7/CaXpIz8dyr1b+e OvF3NgMi3SYvQeuTrKD1gC7x7dI2OlaeSNLu94FcMqBS69yhpzqPns9yohbhxO1h vRvYkFQSahK9bFwLm4ounNC/kZw5CaSbMG0ofe0sJwz65HcYBDK1LlKbuOVL76mq hBi5TjJoKjEom1mucphDmPjFq/h52XNmN1Urc04kwxC38uadmYpY2ghkY2XHJVdR qAq13BItJ1DgRaXK2z/j/9s5V6iWdF+GVkcsrqwWULiPw/S2MzrzEg7pb7o3xKK6 kiHnnSC+39ekJJ2iaK665dILhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0Fb5Mg gZqBPX3ibi13cjhADJETMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkgk7IDDZYJx0I61K8G47Kj99S/oLlhOYwPGUpbyxkETUE/ytxHER/ aq/nWADk8LwuyfGlGIJUu9+b7S5DjZa0IPfdxBU2mF4dbSzE79rtWwy+cJFupN7l xCTm/O5QMTO0YGEnJ+igGEsNWjqcX1bTEShIZQ20+TEzyVNqmBzOhhBigeSgUr0D sHoYYZ7YOJW6tOZFP/LROvXSJWPvalYNcvVh+RVm1SX55hTR4cboRI70h6UKGNlz yGgDEIDQbYmMcojqHvwGBvSv6pB5X37QO1lPR6rxr1b32p+jHABGkOyf/NQHe5eD 098EAD+KOeqOcsRw4kToqQNo0gMWjP/w -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:15 2025 by rpki-client