$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: h3Cm6HgcHVhZyTWNiD/c57l+kZf5fUVBF9Q5I6tZkJk= Subject key identifier: AC:9F:9E:23:35:16:8D:5C:FB:78:AE:39:59:82:84:06:4D:CA:51:AD Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: 0151 Signing time: Fri 25 Apr 2025 03:15:41 +0000 Manifest this update: Fri 25 Apr 2025 03:15:41 +0000 Manifest next update: Fri 02 May 2025 03:15:41 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: DYs7ohL3PL9BQccSd5uRUWdJNmMqVZyNZ2fbLcraeMA=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: Hhj/FVhC3GRjMe6osKTGMjiICT7QgTpi9xb1SC1yTh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: Apr 25 03:15:41 2025 GMT Not After : May 2 03:15:41 2025 GMT Subject: CN=680afe5d-aa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:91:e1:da:6b:51:e0:7c:34:80:3d:d6:12: b7:11:a0:f7:b2:66:fa:47:07:f7:1d:6d:44:9c:e5: 35:df:8b:45:a4:3c:e3:d9:c1:5b:9e:2e:a6:a5:a2: ec:cc:4b:29:c4:66:c8:fb:74:74:29:f1:c7:65:6a: 65:cc:c1:73:76:f0:b5:1d:cd:60:50:7d:3a:f7:aa: 15:14:6f:cf:c0:1d:99:15:a6:25:fd:9c:e0:b8:7b: c1:ae:a5:e4:16:74:dd:7c:4e:ff:9c:1b:7c:4f:3f: 8f:6b:a1:d2:4b:e9:b9:37:0f:ac:fd:1a:aa:61:e1: ae:c4:0b:a6:51:99:8e:f2:b1:a9:72:f3:46:4d:4d: c5:ac:3f:04:3d:12:1c:bb:9b:13:b9:77:1b:76:5b: a1:31:f2:84:85:b9:66:fe:b5:8c:86:af:a7:42:09: bf:33:ba:ad:7f:f2:bb:64:e3:8c:f5:f6:21:5f:3c: 4a:e5:43:ed:53:2f:0b:c5:dc:20:12:13:08:64:ee: 04:56:3f:10:24:b8:26:26:47:d4:f1:24:9a:de:fd: 5e:8c:77:9f:bd:df:b2:d1:8b:20:b3:4d:3c:51:57: 27:3e:77:87:b7:3e:20:ae:9f:78:a6:ca:7f:7d:3a: 44:fe:d8:a5:b4:c9:bf:8b:f8:24:e6:e6:aa:c0:e5: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:9E:23:35:16:8D:5C:FB:78:AE:39:59:82:84:06:4D:CA:51:AD X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:68:73:84:81:8c:70:cf:97:13:59:44:de:b6:29:37:6f:bd: 33:b3:cc:cb:18:d3:45:7f:d8:b3:de:02:05:ca:e2:65:63:ef: 09:de:78:d2:b0:99:c3:94:9a:1d:9b:22:f9:95:45:0b:65:7f: f9:f5:7f:e0:1d:a9:45:85:17:b3:00:c6:e3:7d:fe:41:98:44: 3d:fd:f4:f3:97:15:09:ae:67:1e:d7:89:a4:58:fe:96:0d:85: 54:c7:c4:88:34:e1:2b:2f:05:28:46:72:ef:6a:8e:ea:18:6f: 90:0f:3b:01:7b:e6:fd:8a:62:ee:19:1f:60:05:27:4d:a2:fa: b8:49:a3:d9:a7:38:bb:6e:3c:06:54:c6:3e:25:e4:39:cb:ad: f8:63:c5:98:17:01:3e:c2:d8:59:17:bb:d4:7e:e0:33:4e:5e: c0:fc:8d:b0:74:60:7a:c4:64:a4:3a:57:4a:a4:96:6a:b8:27: fc:ac:26:fe:92:d9:1e:0c:b7:eb:b2:2e:c3:cb:75:0c:07:1a: 61:5c:ae:d3:3e:a1:ec:bb:75:f4:3c:1e:e4:fb:c4:63:f2:67: 0a:09:78:d0:ba:09:ac:22:f7:00:9b:60:99:7e:41:97:d2:67: 17:af:ce:91:61:c9:63:8e:1b:03:8c:73:37:57:c1:a7:6e:b6: 00:f6:50:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjUwNDI1MDMxNTQxWhcNMjUwNTAyMDMxNTQxWjAYMRYwFAYD VQQDEw02ODBhZmU1ZC1hYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJKR4dprUeB8NIA91hK3EaD3smb6Rwf3HW1EnOU134tFpDzj2cFbni6mpaLs zEspxGbI+3R0KfHHZWplzMFzdvC1Hc1gUH0696oVFG/PwB2ZFaYl/ZzguHvBrqXk FnTdfE7/nBt8Tz+Pa6HSS+m5Nw+s/RqqYeGuxAumUZmO8rGpcvNGTU3FrD8EPRIc u5sTuXcbdluhMfKEhblm/rWMhq+nQgm/M7qtf/K7ZOOM9fYhXzxK5UPtUy8Lxdwg EhMIZO4EVj8QJLgmJkfU8SSa3v1ejHefvd+y0Ysgs008UVcnPneHtz4grp94psp/ fTpE/tiltMm/i/gk5uaqwOWJ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyfniM1 Fo1c+3iuOVmChAZNylGtMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9aHOEgYxwz5cTWUTetik3b70zs8zLGNNFf9iz3gIFyuJlY+8J3njS sJnDlJodmyL5lUULZX/59X/gHalFhRezAMbjff5BmEQ9/fTzlxUJrmce14mkWP6W DYVUx8SINOErLwUoRnLvao7qGG+QDzsBe+b9imLuGR9gBSdNovq4SaPZpzi7bjwG VMY+JeQ5y634Y8WYFwE+wthZF7vUfuAzTl7A/I2wdGB6xGSkOldKpJZquCf8rCb+ ktkeDLfrsi7Dy3UMBxphXK7TPqHsu3X0PB7k+8Rj8mcKCXjQugmsIvcAm2CZfkGX 0mcXr86RYcljjhsDjHM3V8GnbrYA9lDs -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:09 2025 by rpki-client