$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft File: LVublUzRc7c_8Ifephh55IBR0js.mft (raw, json) Hash identifier: ecxQIIuYLSilRjqS8CMOYHY/zGxEuwr1P21pF1z5vbE= Subject key identifier: A6:EA:67:A5:22:FB:22:79:97:28:CE:21:FD:79:5D:0A:6A:83:2A:17 Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft Manifest number: 2B Signing time: Fri 25 Apr 2025 06:48:59 +0000 Manifest this update: Fri 25 Apr 2025 06:48:58 +0000 Manifest next update: Fri 02 May 2025 06:48:58 +0000 Files and hashes: 1: LVublUzRc7c_8Ifephh55IBR0js.crl (hash: P8VIaht9Anjq+0LR7nzVM3gfacUPOgMhZSqa+5ZWDeg=) 2: 30376074EF8811EFABCDFD34C4F9AE02.roa (hash: bPtg4MjC7eLz+ZT6OurE6aN4wcUNr7U76NQbeUk0pjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Validity Not Before: Apr 25 06:48:58 2025 GMT Not After : May 2 06:48:58 2025 GMT Subject: CN=680b305a-3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:74:1a:3a:42:44:7e:94:7c:30:b8:13:44: 01:7c:c6:bc:2f:aa:b1:58:f9:7d:c0:7b:06:99:9b: c8:2d:ee:df:a4:92:43:29:02:ad:3b:43:8a:70:47: 97:ef:71:0b:88:33:28:b4:28:c9:98:c8:74:19:10: 56:93:85:c7:db:0b:b8:33:2c:93:b8:33:42:ab:e2: b1:b8:62:1d:b8:8f:21:ce:f6:92:f3:39:22:b8:41: 12:2d:07:e4:36:fa:3f:af:86:a1:be:53:13:46:ed: 42:44:93:04:33:43:56:6d:a3:19:93:5f:a3:bb:8a: ad:00:6e:88:31:df:db:69:e6:dc:c5:fa:76:e6:aa: d1:f0:cf:17:01:32:eb:b1:6f:a8:3f:be:e4:e7:97: b6:5e:7a:e5:74:98:91:75:41:b8:2c:3f:96:fa:d9: b8:5f:c7:5f:5b:4b:01:ad:19:47:8d:de:d9:24:fd: 9d:53:f5:d7:93:99:eb:e7:ce:90:82:7f:02:37:b9: 55:28:b6:85:58:60:07:c3:01:85:00:91:4c:55:9f: ab:2d:65:95:e2:17:d5:c8:4c:6a:aa:12:4d:7d:09: 32:d2:15:91:43:c7:f0:4f:fa:ae:8c:27:ba:96:b2: aa:00:1c:16:1a:7d:6b:3b:14:7b:88:2e:be:38:a7: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:67:A5:22:FB:22:79:97:28:CE:21:FD:79:5D:0A:6A:83:2A:17 X509v3 Authority Key Identifier: keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1b:f4:92:48:43:24:6b:f2:41:bb:ee:a9:b6:38:e3:c7:06: 8a:1d:96:53:8c:7e:5b:b4:41:56:37:1c:2e:81:91:2e:ff:4c: 71:ed:c6:7c:92:60:87:0c:aa:2e:1b:4f:33:8f:ac:6f:48:58: d5:1d:aa:2f:bf:1a:df:f1:2a:6c:32:1f:a2:8d:ae:ab:0a:2d: e6:2a:d0:43:ac:71:52:c1:fc:65:40:f8:e2:c5:24:10:4e:28: 2b:25:cd:31:ad:18:2e:98:6c:c4:87:e0:1f:5f:a2:0d:92:73: 51:8b:df:43:66:5d:c6:0f:13:24:32:d0:e1:ee:ff:7d:00:c1: af:9c:5e:34:f4:1f:8c:d6:a7:30:a3:c7:51:07:f3:ae:08:35: cd:07:bb:c8:7e:f0:00:06:86:a6:12:5d:02:23:30:18:df:ba: 67:ae:2d:ed:a2:01:58:4a:32:df:66:46:e9:7f:f6:ef:0f:57: ae:f3:a0:aa:2f:07:c4:1c:1b:f2:48:3b:bf:c9:d6:17:fe:a1: 75:98:41:4f:39:f6:13:7e:d6:fa:fb:e7:9c:59:2c:8d:7f:70: 7b:40:27:18:7c:77:3e:1e:d1:7a:93:bc:4a:50:94:9a:a7:3e: 7e:4b:ab:36:96:74:92:04:8a:0b:cf:20:a7:99:13:dd:35:39: e3:06:5e:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0EyRDExMC8GA1UEBRMoMkQ1QjlCOTU0Q0QxNzNCNzNGRjA4N0RFQTYxODc5RTQ4 MDUxRDIzQjAeFw0yNTA0MjUwNjQ4NThaFw0yNTA1MDIwNjQ4NThaMBgxFjAUBgNV BAMTDTY4MGIzMDVhLTM3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHL3QaOkJEfpR8MLgTRAF8xrwvqrFY+X3AewaZm8gt7t+kkkMpAq07Q4pwR5fv cQuIMyi0KMmYyHQZEFaThcfbC7gzLJO4M0Kr4rG4Yh24jyHO9pLzOSK4QRItB+Q2 +j+vhqG+UxNG7UJEkwQzQ1ZtoxmTX6O7iq0Abogx39tp5tzF+nbmqtHwzxcBMuux b6g/vuTnl7ZeeuV0mJF1QbgsP5b62bhfx19bSwGtGUeN3tkk/Z1T9deTmevnzpCC fwI3uVUotoVYYAfDAYUAkUxVn6stZZXiF9XITGqqEk19CTLSFZFDx/BP+q6MJ7qW sqoAHBYafWs7FHuILr44pxmlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpupnpSL7 InmXKM4h/XldCmqDKhcwHwYDVR0jBBgwFoAULVublUzRc7c/8Ifephh55IBR0jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDQTJELzI1NjE4N0YyRUY4 NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFZ1YmxVelJjN2NfOElmZXBoaDU1SUJSMGpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD QTJELzI1NjE4N0YyRUY4NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdj XzhJZmVwaGg1NUlCUjBqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI4b9JJIQyRr8kG77qm2OOPHBoodllOMflu0QVY3HC6BkS7/THHtxnyS YIcMqi4bTzOPrG9IWNUdqi+/Gt/xKmwyH6KNrqsKLeYq0EOscVLB/GVA+OLFJBBO KCslzTGtGC6YbMSH4B9fog2Sc1GL30NmXcYPEyQy0OHu/30Awa+cXjT0H4zWpzCj x1EH864INc0Hu8h+8AAGhqYSXQIjMBjfumeuLe2iAVhKMt9mRul/9u8PV67zoKov B8QcG/JIO7/J1hf+oXWYQU859hN+1vr755xZLI1/cHtAJxh8dz4e0XqTvEpQlJqn Pn5LqzaWdJIEigvPIKeZE901OeMGXsI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:45 2025 by rpki-client