$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: I1gSo0gjZ/l8OBqTcOlr4/YbTuf98MC/pYKxppT28Ds= Subject key identifier: EC:9C:F9:09:CE:BE:EF:40:AC:18:51:23:8A:FD:A6:EE:77:55:0F:CC Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 0104 Signing time: Fri 25 Apr 2025 04:07:59 +0000 Manifest this update: Fri 25 Apr 2025 04:07:58 +0000 Manifest next update: Fri 02 May 2025 04:07:58 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: CZ7z+N979/z02ijWhjOSzOwJAXh+32besTNwAiU5v78=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Apr 25 04:07:58 2025 GMT Not After : May 2 04:07:58 2025 GMT Subject: CN=680b0a9e-91d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:a2:89:64:68:0c:6c:5b:57:16:d8:f0:a9: 84:12:89:ce:ac:c2:20:b0:ce:42:0e:42:4b:43:2d: 8d:f5:72:0c:1f:dc:c7:02:f4:da:2c:91:95:ba:b3: 76:bd:94:5a:0a:be:e0:79:3d:a1:7f:22:10:a6:03: 6b:12:63:e1:8e:a3:b9:a9:ad:ad:12:40:1f:58:c4: 66:76:10:37:3a:82:4f:7b:67:86:5c:0c:06:54:e9: d3:cd:55:95:aa:36:2a:3e:56:41:fa:42:0e:a7:bb: b6:a1:16:86:45:b5:ce:8e:95:6f:74:a6:3b:21:cf: fb:b9:7c:16:fa:6b:0d:2d:34:15:ed:67:6d:45:25: 1b:64:c9:0c:2b:15:6b:10:2f:95:03:6b:52:0a:9c: 01:af:a7:6d:bd:dc:f1:db:7b:52:09:4e:e7:15:b6: ea:0f:74:e7:13:08:e8:4f:d1:4b:34:29:12:18:13: 42:83:cd:d9:bf:e6:bb:7f:b6:2c:25:f4:01:6e:25: 1a:85:3f:aa:da:03:c9:3f:20:81:89:f6:7a:47:34: 03:6b:f1:40:54:00:c6:78:a0:0c:a2:ad:b9:ce:32: cd:bf:c0:84:8c:35:17:c5:2e:43:14:7d:a8:3a:72: 9c:e4:2a:c4:08:a7:4d:92:93:97:0f:26:14:2d:91: 69:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:F9:09:CE:BE:EF:40:AC:18:51:23:8A:FD:A6:EE:77:55:0F:CC X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7b:75:d8:b3:d2:d4:3e:f9:53:6f:38:d1:a9:c8:ee:43:1d: 21:c0:69:b3:4b:45:4b:62:71:da:33:7d:10:d7:75:69:b7:9b: 15:fe:5d:67:42:8a:40:ed:87:4e:d7:3f:ee:c8:b4:db:08:6b: 8e:96:60:67:3b:f9:8d:d0:c3:b8:da:3c:e5:a3:0a:e8:20:e0: a5:1e:a1:d5:9c:3b:4b:43:cc:e6:c6:aa:39:bb:57:bf:4b:33: e1:95:5f:8f:2f:05:b2:81:ae:6d:d5:c2:f2:74:27:42:95:92: 1f:e8:f5:9b:f9:30:7c:fc:a5:e6:33:7e:be:5a:a1:06:35:33: 89:9c:1a:27:61:50:0f:79:33:82:59:c1:a6:d6:14:2f:c8:4f: ab:b8:e0:39:09:13:1f:96:de:42:30:28:eb:b3:04:90:bf:62: e5:87:b6:71:b9:0d:2a:c6:d0:6d:d5:6c:d2:b0:56:c2:ca:1b: 91:fa:9b:7b:0a:21:27:56:51:68:11:9e:19:7d:a9:6d:ea:4b: 46:6b:13:66:ee:16:4d:42:9d:61:95:3a:5c:d4:a0:75:a5:ea: f2:75:f5:a8:f4:88:d1:e3:7b:cb:41:75:b2:bb:fd:59:b8:81: 35:78:b4:34:4f:0a:54:8b:c9:ea:62:93:1b:0b:5f:df:da:f5: 07:5f:73:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUwNDI1MDQwNzU4WhcNMjUwNTAyMDQwNzU4WjAYMRYwFAYD VQQDEw02ODBiMGE5ZS05MWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyyiiWRoDGxbVxbY8KmEEonOrMIgsM5CDkJLQy2N9XIMH9zHAvTaLJGVurN2 vZRaCr7geT2hfyIQpgNrEmPhjqO5qa2tEkAfWMRmdhA3OoJPe2eGXAwGVOnTzVWV qjYqPlZB+kIOp7u2oRaGRbXOjpVvdKY7Ic/7uXwW+msNLTQV7WdtRSUbZMkMKxVr EC+VA2tSCpwBr6dtvdzx23tSCU7nFbbqD3TnEwjoT9FLNCkSGBNCg83Zv+a7f7Ys JfQBbiUahT+q2gPJPyCBifZ6RzQDa/FAVADGeKAMoq25zjLNv8CEjDUXxS5DFH2o OnKc5CrECKdNkpOXDyYULZFp4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyc+QnO vu9ArBhRI4r9pu53VQ/MMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBae3XYs9LUPvlTbzjRqcjuQx0hwGmzS0VLYnHaM30Q13Vpt5sV/l1n QopA7YdO1z/uyLTbCGuOlmBnO/mN0MO42jzlowroIOClHqHVnDtLQ8zmxqo5u1e/ SzPhlV+PLwWyga5t1cLydCdClZIf6PWb+TB8/KXmM36+WqEGNTOJnBonYVAPeTOC WcGm1hQvyE+ruOA5CRMflt5CMCjrswSQv2Llh7ZxuQ0qxtBt1WzSsFbCyhuR+pt7 CiEnVlFoEZ4Zfalt6ktGaxNm7hZNQp1hlTpc1KB1perydfWo9IjR43vLQXWyu/1Z uIE1eLQ0TwpUi8nqYpMbC1/f2vUHX3Nx -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:55 2025 by rpki-client