$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: glhgix8jkfZKNPy6+J69w0Jb8nBB3U+DCvfVbpKLXuo= Subject key identifier: B9:A1:68:C2:27:95:7B:D5:9D:32:86:34:C5:BF:75:26:37:F6:59:76 Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 0627 Signing time: Thu 24 Apr 2025 22:30:08 +0000 Manifest this update: Thu 24 Apr 2025 22:30:07 +0000 Manifest next update: Thu 01 May 2025 22:30:07 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: FH43XH9Wk8UztEHs2g+aDtJuTCYQTBJ0TQFzVmbkwU8=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: c2XK07fkTtqrWcB4fZ5IJUYP88fXxA7EytLu8uCG7Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Validity Not Before: Apr 24 22:30:07 2025 GMT Not After : May 1 22:30:07 2025 GMT Subject: CN=680abb6f-8047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1f:90:82:77:ca:fb:62:f2:2f:59:38:fa:17: b4:83:22:2b:31:61:71:78:6f:f4:a7:13:0f:a3:a5: 62:7f:09:f4:ec:b4:7f:65:54:5a:a7:eb:2d:01:f7: 60:11:b1:ba:67:9b:6a:8c:3a:de:35:59:04:4f:ce: 3f:8f:99:5a:fe:2c:83:43:5f:93:ce:c3:01:df:7b: c1:54:58:69:c9:8b:da:ea:77:63:8e:ba:e8:2b:09: 48:b3:47:66:a1:bb:77:ae:79:9f:73:d1:23:a2:11: e1:58:47:28:3c:74:6e:21:57:6e:4a:4b:63:24:22: 80:1b:1d:2c:2b:64:fd:f1:45:c6:76:62:51:d9:4d: c4:57:9e:42:9f:60:a8:3e:64:10:56:42:fa:53:e3: 55:d3:97:9b:7c:cb:7a:b1:56:e8:0d:1f:b8:b9:65: f3:ff:8e:b1:e2:03:36:f8:37:7d:67:cb:55:0c:5d: bf:99:cc:d6:20:73:df:72:e5:5c:a5:04:32:72:a2: fb:9d:6b:d0:d3:50:56:b8:06:15:83:e4:31:c1:2b: c6:68:ce:b6:97:04:cf:df:9a:d3:69:7f:d2:00:cc: 53:91:ac:00:ce:5e:ea:0a:a8:62:fa:2e:1d:2a:35: b7:d1:4b:23:e5:3c:30:c8:d5:3c:3f:5c:8f:d5:44: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:68:C2:27:95:7B:D5:9D:32:86:34:C5:BF:75:26:37:F6:59:76 X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0f:a2:f5:0e:99:b5:3e:9e:cf:3f:76:4b:d9:3e:c9:45:9e: a6:b0:e3:bb:cd:3f:83:31:6d:05:b8:17:c5:ef:63:cc:f9:75: a6:28:c2:dc:90:de:ea:d0:b3:96:6b:e4:d0:1f:c4:9d:10:ec: 75:76:ef:5c:58:3d:27:ce:ac:00:d3:4e:b3:a2:40:e6:b5:99: 37:c7:76:7f:b7:06:44:fb:37:40:fb:33:c0:4a:65:7c:95:51: e4:15:d8:fd:b3:ec:2a:f2:df:b0:e6:6d:9f:87:5d:19:41:6e: 91:84:38:4b:09:9a:00:d9:62:ef:8f:25:63:9c:95:18:f0:70: 76:5c:a4:4c:0b:28:0d:da:2f:09:e2:c8:a6:a8:c0:a4:d1:29: 4d:98:13:61:aa:20:09:a2:6f:14:cb:00:50:9f:cd:fc:ec:ff: c4:fc:e0:51:bd:a1:26:35:6c:d7:20:8b:54:12:f4:46:ae:13: cd:4b:56:c2:e9:c1:ff:b2:35:69:5b:d3:1a:e6:9f:50:86:31: e5:5e:09:e7:88:b3:96:99:ab:ae:e0:2d:0c:1e:c9:8a:74:2e: d5:5a:f1:27:18:22:61:c0:4c:5f:14:4c:1b:00:ea:f1:15:e0: 15:47:ee:bc:38:7d:19:ea:25:23:0c:5b:cd:0b:3e:0d:0a:01: cc:70:3e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUwNDI0MjIzMDA3WhcNMjUwNTAxMjIzMDA3WjAYMRYwFAYD VQQDEw02ODBhYmI2Zi04MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x+QgnfK+2LyL1k4+he0gyIrMWFxeG/0pxMPo6Vifwn07LR/ZVRap+stAfdg EbG6Z5tqjDreNVkET84/j5la/iyDQ1+TzsMB33vBVFhpyYva6ndjjrroKwlIs0dm obt3rnmfc9EjohHhWEcoPHRuIVduSktjJCKAGx0sK2T98UXGdmJR2U3EV55Cn2Co PmQQVkL6U+NV05ebfMt6sVboDR+4uWXz/46x4gM2+Dd9Z8tVDF2/mczWIHPfcuVc pQQycqL7nWvQ01BWuAYVg+QxwSvGaM62lwTP35rTaX/SAMxTkawAzl7qCqhi+i4d KjW30Usj5TwwyNU8P1yP1UQCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmhaMIn lXvVnTKGNMW/dSY39ll2MB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBED6L1Dpm1Pp7PP3ZL2T7JRZ6msOO7zT+DMW0FuBfF72PM+XWmKMLc kN7q0LOWa+TQH8SdEOx1du9cWD0nzqwA006zokDmtZk3x3Z/twZE+zdA+zPASmV8 lVHkFdj9s+wq8t+w5m2fh10ZQW6RhDhLCZoA2WLvjyVjnJUY8HB2XKRMCygN2i8J 4simqMCk0SlNmBNhqiAJom8UywBQn8387P/E/OBRvaEmNWzXIItUEvRGrhPNS1bC 6cH/sjVpW9Ma5p9QhjHlXgnniLOWmauu4C0MHsmKdC7VWvEnGCJhwExfFEwbAOrx FeAVR+68OH0Z6iUjDFvNCz4NCgHMcD4Z -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:03 2025 by rpki-client