$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: u6qkCmVLLPJOaY7WilscbLYzLYr9DgRakWZecsMVbeo= Subject key identifier: 2C:F3:20:A9:F1:4B:31:98:C6:10:10:50:18:71:72:C3:D8:8D:22:59 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 065C Signing time: Thu 24 Apr 2025 23:21:27 +0000 Manifest this update: Thu 24 Apr 2025 23:21:26 +0000 Manifest next update: Thu 01 May 2025 23:21:26 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: dJa+KuYJKOfJWlw6sadYlaV/O6Mstp/wKivqh2mbNkU=) 2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: zmENuILHmN18AUGwPcqkBbA0GZjdGWwt2+ySfMUc/Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: Apr 24 23:21:26 2025 GMT Not After : May 1 23:21:26 2025 GMT Subject: CN=680ac776-1011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:1b:19:2a:c8:e5:96:2b:3b:7b:aa:fe:8e: a2:c2:83:3b:6a:97:17:83:ef:b5:b7:e3:e1:34:5a: f4:c7:40:40:13:31:5f:64:81:d9:5c:9a:77:d7:43: c4:fd:04:73:4d:cc:55:6f:4f:13:3c:31:d5:60:9e: 7d:1f:a5:4f:9f:f2:62:7c:fc:49:9e:43:a3:e7:04: e4:1c:fe:56:fb:4b:09:43:fd:1b:2c:cb:26:91:3b: 39:b9:63:a3:9b:e5:d7:00:55:9b:07:ea:8f:85:c6: f2:86:2e:07:73:2c:e8:55:85:bd:96:6e:48:cc:9b: c5:fe:cd:b3:b2:33:94:e3:e1:b5:99:e8:9e:61:ea: e9:47:40:84:50:13:ff:20:cc:27:c1:8e:44:4f:79: ab:08:50:80:36:b6:af:94:f6:23:a4:73:32:69:db: 5e:e7:60:b3:15:88:ec:00:62:b2:c6:52:e8:08:27: a1:38:f2:94:08:ac:c2:5e:cb:0f:65:80:02:5a:c2: 3b:c5:bb:ed:03:0c:20:63:f6:25:a4:f3:f3:d9:b8: 8a:26:36:46:40:ff:5c:c5:45:04:a1:99:11:00:78: 28:ad:27:b7:41:5f:28:63:61:ad:a2:69:f8:19:3c: 8f:e7:70:0c:a8:11:e2:7b:d8:3c:1b:6f:9a:ed:fd: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:20:A9:F1:4B:31:98:C6:10:10:50:18:71:72:C3:D8:8D:22:59 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:87:a1:7c:0a:68:88:4d:6c:08:87:99:e7:31:52:f2:5d:d0: 60:ff:09:3d:30:09:60:15:d5:07:19:a1:8d:d0:0a:35:ac:d7: c1:ea:54:6a:cf:47:ea:de:28:32:4d:bd:93:54:6e:a8:1c:2a: 50:d2:b5:da:d2:c2:c1:5f:6e:fd:56:2b:c9:4e:22:b8:04:0c: 43:a1:e9:43:2f:1a:e8:2a:06:81:6c:2a:2b:80:aa:20:16:58: cb:b9:94:c9:a5:fb:1a:21:e5:2b:22:93:11:77:1b:89:e3:b5: c5:65:5c:0d:b5:65:3c:73:69:76:fe:87:e4:91:2b:34:6d:95: 3c:25:a8:6b:dc:2b:63:ea:15:7a:cb:b3:dd:7d:3f:f0:86:d3: 86:b5:36:25:15:5a:ab:a0:03:38:12:fa:c3:61:53:74:eb:fd: 6f:ce:cb:7d:5a:ab:c6:5a:64:66:9f:8c:27:58:51:92:5b:2b: 93:88:08:01:88:c8:8c:66:35:ba:70:f9:82:17:dd:f4:1f:bd: 77:49:62:f8:8b:c9:11:6f:5d:b6:f8:ba:7a:4d:67:64:2e:49: 1c:63:02:35:2c:84:30:c0:05:04:9a:8a:88:db:68:93:79:97: aa:88:f3:3d:c6:f8:8b:69:eb:63:bd:5f:0a:2b:31:33:43:8d: fa:40:0c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjUwNDI0MjMyMTI2WhcNMjUwNTAxMjMyMTI2WjAYMRYwFAYD VQQDEw02ODBhYzc3Ni0xMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DcbGSrI5ZYrO3uq/o6iwoM7apcXg++1t+PhNFr0x0BAEzFfZIHZXJp310PE /QRzTcxVb08TPDHVYJ59H6VPn/JifPxJnkOj5wTkHP5W+0sJQ/0bLMsmkTs5uWOj m+XXAFWbB+qPhcbyhi4HcyzoVYW9lm5IzJvF/s2zsjOU4+G1meieYerpR0CEUBP/ IMwnwY5ET3mrCFCANravlPYjpHMyadte52CzFYjsAGKyxlLoCCehOPKUCKzCXssP ZYACWsI7xbvtAwwgY/YlpPPz2biKJjZGQP9cxUUEoZkRAHgorSe3QV8oY2Gtomn4 GTyP53AMqBHie9g8G2+a7f3loQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzzIKnx SzGYxhAQUBhxcsPYjSJZMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAah6F8CmiITWwIh5nnMVLyXdBg/wk9MAlgFdUHGaGN0Ao1rNfB6lRq z0fq3igyTb2TVG6oHCpQ0rXa0sLBX279VivJTiK4BAxDoelDLxroKgaBbCorgKog FljLuZTJpfsaIeUrIpMRdxuJ47XFZVwNtWU8c2l2/ofkkSs0bZU8Jahr3Ctj6hV6 y7PdfT/whtOGtTYlFVqroAM4EvrDYVN06/1vzst9WqvGWmRmn4wnWFGSWyuTiAgB iMiMZjW6cPmCF930H713SWL4i8kRb122+Lp6TWdkLkkcYwI1LIQwwAUEmoqI22iT eZeqiPM9xviLaetjvV8KKzEzQ436QAyU -----END CERTIFICATE-----Generated at Sat Apr 26 08:12:39 2025 by rpki-client