$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft File: lFCLKqsDKqM_mgAoJYI_mrhccBI.mft (raw, json) Hash identifier: 0iPovqD8n6RkXdiLHrhYmE73/lstlmeLpCZ9bshMJzs= Subject key identifier: F7:BD:EB:31:A4:E1:47:93:B2:74:42:28:47:79:2C:D1:92:E3:5E:CB Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 Certificate issuer: /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft Manifest number: 0C Signing time: Fri 25 Apr 2025 07:09:15 +0000 Manifest this update: Fri 25 Apr 2025 07:09:14 +0000 Manifest next update: Fri 02 May 2025 07:09:14 +0000 Files and hashes: 1: lFCLKqsDKqM_mgAoJYI_mrhccBI.crl (hash: HE+5EavJ7kpGuk/2vK33eDhFEgtX7J8YSW7rehMFsMw=) 2: CB08B0C019C811F0958CB24EC4F9AE02.roa (hash: y8xxOVA8cK5Sc+i2B8yZIUqOuhkVjbuKi4OA78/BPFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012 Validity Not Before: Apr 25 07:09:14 2025 GMT Not After : May 2 07:09:14 2025 GMT Subject: CN=680b351b-5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:c8:43:b9:cf:c2:44:51:98:e9:3e:69:bb: 8a:ba:c2:93:2a:da:2c:fc:b9:3b:9e:18:d5:c5:ff: 21:ee:71:bc:fd:e9:3f:29:7f:0e:9a:c6:79:66:29: 46:d1:7a:d7:9c:08:fd:4f:60:a3:fb:fc:72:02:76: 3a:cc:2b:2f:65:2f:9f:1c:66:50:46:bb:6f:18:fc: 73:77:44:11:04:fe:3e:0a:c6:cc:1c:18:7f:d4:ba: 3a:61:04:51:39:0e:71:59:fe:42:b4:7d:b0:74:6d: d8:93:6b:cc:5f:a7:4d:ee:33:58:7f:1c:96:67:18: 5e:e0:48:79:b0:d7:a8:16:56:60:96:c4:9a:47:af: 59:fb:66:db:72:8c:df:b9:77:28:00:56:9f:35:7a: 31:9f:a7:eb:74:7c:74:32:a6:bc:37:1d:b6:cf:ec: 4c:1a:5c:f4:98:3e:be:aa:96:3b:1b:7c:35:a0:52: b0:16:c9:07:62:42:80:00:ce:a5:0c:f9:db:94:66: f3:27:31:ca:b4:ac:b3:34:ea:ce:95:07:a1:52:f0: f0:13:9c:de:e3:40:10:ac:75:03:b5:93:b5:bf:95: 3a:a6:c9:89:67:23:30:46:81:cf:0c:0d:8b:e8:9e: d0:fa:16:77:2b:96:fb:99:21:55:c7:c6:a8:b9:a2: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BD:EB:31:A4:E1:47:93:B2:74:42:28:47:79:2C:D1:92:E3:5E:CB X509v3 Authority Key Identifier: keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:46:b8:07:68:f4:7e:0a:59:02:14:5e:0f:96:bf:fd:49:80: 05:45:f8:63:15:53:0d:d1:66:a0:d9:64:aa:4d:10:d3:17:40: d6:71:7a:fd:cf:1b:43:e0:0c:eb:ed:65:51:77:a4:e5:2c:80: c2:bb:3f:10:5b:96:7e:3e:bf:74:38:52:2a:11:f1:6e:fd:98: 18:ce:c1:34:b4:9c:b7:da:49:01:98:9c:c4:8c:69:04:c5:d8: 4b:2a:55:30:7f:6c:a1:4c:ed:4f:45:8b:e6:2b:0e:4f:ab:15: 27:0e:4e:09:b1:28:12:0d:c4:ed:bf:17:9a:6e:9d:08:60:17: ec:b2:6a:ea:82:2f:97:86:7a:ee:8f:38:14:c3:cb:0a:e9:ac: e7:13:fc:23:38:97:40:59:26:0e:6d:98:b9:f2:d2:b4:59:34: 61:5b:90:1e:b4:02:96:f1:7f:9a:1f:77:a4:50:95:81:8f:e2: c9:a5:21:70:1a:d0:4f:0c:3b:b7:12:32:ed:a3:f7:ca:42:04: 3f:9f:cb:29:53:14:31:b1:ce:24:f7:b5:37:c5:0b:5b:75:d6: 9d:82:b7:20:86:41:ca:7c:59:be:e5:92:59:b8:16:c4:08:29: 70:79:df:ce:8a:76:b5:ea:cd:b7:5d:a8:14:b5:0c:8e:28:12: 9f:c4:ee:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTUzMjExMC8GA1UEBRMoOTQ1MDhCMkFBQjAzMkFBMzNGOUEwMDI4MjU4MjNGOUFC ODVDNzAxMjAeFw0yNTA0MjUwNzA5MTRaFw0yNTA1MDIwNzA5MTRaMBgxFjAUBgNV BAMTDTY4MGIzNTFiLTU4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjychDuc/CRFGY6T5pu4q6wpMq2iz8uTueGNXF/yHucbz96T8pfw6axnlmKUbR etecCP1PYKP7/HICdjrMKy9lL58cZlBGu28Y/HN3RBEE/j4KxswcGH/UujphBFE5 DnFZ/kK0fbB0bdiTa8xfp03uM1h/HJZnGF7gSHmw16gWVmCWxJpHr1n7ZttyjN+5 dygAVp81ejGfp+t0fHQyprw3HbbP7EwaXPSYPr6qljsbfDWgUrAWyQdiQoAAzqUM +duUZvMnMcq0rLM06s6VB6FS8PATnN7jQBCsdQO1k7W/lTqmyYlnIzBGgc8MDYvo ntD6FncrlvuZIVXHxqi5oqOdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU973rMaTh R5OydEIoR3ks0ZLjXsswHwYDVR0jBBgwFoAUlFCLKqsDKqM/mgAoJYI/mrhccBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTMyL0YzN0JENjdBMTlD NTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FNX21nQW9KWUlfbXJoY2NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEZDTEtxc0RLcU1fbWdBb0pZSV9tcmhjY0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 NTMyL0YzN0JENjdBMTlDNTExRjBBNTlEODkyOEM0RjlBRTAyL2xGQ0xLcXNES3FN X21nQW9KWUlfbXJoY2NCSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlGuAdo9H4KWQIUXg+Wv/1JgAVF+GMVUw3RZqDZZKpNENMXQNZxev3P G0PgDOvtZVF3pOUsgMK7PxBbln4+v3Q4UioR8W79mBjOwTS0nLfaSQGYnMSMaQTF 2EsqVTB/bKFM7U9Fi+YrDk+rFScOTgmxKBINxO2/F5punQhgF+yyauqCL5eGeu6P OBTDywrprOcT/CM4l0BZJg5tmLny0rRZNGFbkB60Apbxf5ofd6RQlYGP4smlIXAa 0E8MO7cSMu2j98pCBD+fyylTFDGxziT3tTfFC1t11p2CtyCGQcp8Wb7lklm4FsQI KXB5386KdrXqzbddqBS1DI4oEp/E7qo= -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client