$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: oPGwMCuSeBqMzl5vVMXQi+Ki7WKKL9yQ4oXppgxOUY4= Subject key identifier: 71:35:0A:8F:FC:DC:6D:9E:70:AE:4F:57:E0:B8:25:9A:FB:6C:4B:58 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 07BD Signing time: Thu 24 Apr 2025 21:09:34 +0000 Manifest this update: Thu 24 Apr 2025 21:09:33 +0000 Manifest next update: Thu 01 May 2025 21:09:33 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: TEWtLwP4XQPMhPKFMlZ9kPx79C/1/wreN+UPXAg3rx8=) 2: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=) 3: 9D594A509FFB11EF9E614409C4F9AE02.roa (hash: fpSWb3+1/or+BPPYOQwZNVSa0gpgbLnYUKAHGw/tdCA=) 4: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: iRd1/ZHW+2xlwhXyNjL/uUSU9QGRKaTGijCT9xr8AHM=) 5: 7F81B29AD24311EFA5E5B012C4F9AE02.roa (hash: bBRIJf+7fUSvuqh5dd6ayigZtBMms6tUQ/qVmqSY6fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Apr 24 21:09:33 2025 GMT Not After : May 1 21:09:33 2025 GMT Subject: CN=680aa88d-caee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:b9:1a:d4:5f:3d:32:a0:e6:dc:46:3c:34: 83:e5:f4:b9:ca:88:ca:2d:52:0c:cc:87:db:53:3f: 7c:2e:b1:29:e1:85:75:0e:e0:7f:67:6e:25:1e:a0: 36:40:21:5f:66:3d:02:fb:dc:df:7f:25:9a:d9:bb: 3f:96:4f:26:df:f3:9b:c7:eb:99:05:28:de:eb:7a: d9:5c:c1:d9:a0:78:61:b6:d9:be:27:52:7e:f7:f9: e2:c0:93:35:be:d7:a4:ac:ce:86:35:90:45:f1:71: ce:97:e6:c4:2f:96:71:83:e7:b0:7d:0e:3b:52:77: 0b:15:25:41:17:cd:48:e3:78:dc:f3:dc:ba:bf:da: d8:39:49:f4:5f:e0:08:98:00:35:f4:54:4a:84:70: f6:cc:bf:3d:6d:f6:be:38:fa:b8:a6:9c:4f:7c:c9: 93:56:7d:75:27:d8:7a:6a:4a:0b:b8:91:33:45:ba: 78:7c:81:1b:55:e9:a9:e0:95:b3:c5:59:e6:f3:62: 89:f9:a8:88:b3:77:46:ec:72:3f:df:a1:0f:c7:7c: 7e:0b:ac:6d:db:57:29:33:24:4d:3d:9f:a9:e2:20: 54:06:1c:af:9f:ae:ff:fd:ff:94:a5:13:7d:17:18: e0:b8:1d:4f:fb:1c:3e:b8:48:3f:f8:2f:42:cd:fe: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:35:0A:8F:FC:DC:6D:9E:70:AE:4F:57:E0:B8:25:9A:FB:6C:4B:58 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:59:73:c7:cc:37:c1:e9:de:7c:70:fa:4e:79:7f:1f:f1:aa: 86:fe:e4:f6:5c:d6:fb:2a:50:75:aa:77:ac:b8:ff:1e:02:9d: 95:69:17:ed:37:ed:81:8f:d0:f1:60:4b:2e:53:2d:aa:12:ea: 8b:81:30:fc:11:99:a0:00:5b:3e:4a:c1:64:c8:07:d7:48:91: d9:44:13:e3:6a:a7:69:ba:a9:0c:60:d3:35:fa:05:6b:72:3c: 28:05:4d:41:4c:6d:c5:3f:2a:df:82:3d:b3:0b:bb:84:2c:75: cf:fd:8c:27:b5:3e:2b:2a:33:7f:63:5d:e3:3c:3c:6c:32:7f: 46:11:02:d9:d3:40:d1:08:df:50:9d:08:95:7b:71:0b:05:5a: 84:c5:6c:88:35:26:e5:78:cf:26:06:22:90:08:94:9c:c8:e0: c8:e1:71:b6:5c:bc:13:8f:d2:ff:1d:92:04:56:56:97:2c:8f: f6:6f:3d:4c:c9:18:13:33:69:16:70:88:38:51:44:8b:f6:69: 1f:65:4b:1a:5d:ca:23:91:21:a7:3a:3c:30:84:78:cf:88:df: a5:3a:41:70:c9:62:07:33:9a:21:83:86:34:68:3e:8a:c2:91: 96:03:df:48:54:03:64:8d:e7:7e:84:4c:dd:f7:bd:6a:6a:c6: f5:10:bc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwNDI0MjEwOTMzWhcNMjUwNTAxMjEwOTMzWjAYMRYwFAYD VQQDEw02ODBhYTg4ZC1jYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/e5GtRfPTKg5txGPDSD5fS5yojKLVIMzIfbUz98LrEp4YV1DuB/Z24lHqA2 QCFfZj0C+9zffyWa2bs/lk8m3/Obx+uZBSje63rZXMHZoHhhttm+J1J+9/niwJM1 vtekrM6GNZBF8XHOl+bEL5Zxg+ewfQ47UncLFSVBF81I43jc89y6v9rYOUn0X+AI mAA19FRKhHD2zL89bfa+OPq4ppxPfMmTVn11J9h6akoLuJEzRbp4fIEbVemp4JWz xVnm82KJ+aiIs3dG7HI/36EPx3x+C6xt21cpMyRNPZ+p4iBUBhyvn67//f+UpRN9 FxjguB1P+xw+uEg/+C9Czf57HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE1Co/8 3G2ecK5PV+C4JZr7bEtYMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIWXPHzDfB6d58cPpOeX8f8aqG/uT2XNb7KlB1qnesuP8eAp2VaRft N+2Bj9DxYEsuUy2qEuqLgTD8EZmgAFs+SsFkyAfXSJHZRBPjaqdpuqkMYNM1+gVr cjwoBU1BTG3FPyrfgj2zC7uELHXP/YwntT4rKjN/Y13jPDxsMn9GEQLZ00DRCN9Q nQiVe3ELBVqExWyINSbleM8mBiKQCJScyODI4XG2XLwTj9L/HZIEVlaXLI/2bz1M yRgTM2kWcIg4UUSL9mkfZUsaXcojkSGnOjwwhHjPiN+lOkFwyWIHM5ohg4Y0aD6K wpGWA99IVANkjed+hEzd971qasb1ELxF -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:52 2025 by rpki-client