$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft File: lFmgev60b3mSRf7CNW08usm-2Ig.mft (raw, json) Hash identifier: E+IlVshQYqD630rQggx3IjyTDFiQJQKTZTHDNvVpQ6k= Subject key identifier: 85:CA:9A:28:DD:41:20:DB:75:A3:92:6E:65:D0:4F:63:EC:70:1B:CC Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 04:03:12 +0000 Manifest this update: Fri 25 Apr 2025 04:03:11 +0000 Manifest next update: Fri 02 May 2025 04:03:11 +0000 Files and hashes: 1: lFmgev60b3mSRf7CNW08usm-2Ig.crl (hash: a9tZa0on/i1asSoTZIjx9GH9dhiQ/2xzzm8z7C4X6Sg=) 2: 81A901FA8A0411EEA251F746C4F9AE02.roa (hash: JHvhSwDOyCbk05zvE3c35/2oeXE8ikJi+kxwUoPeaf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Apr 25 04:03:11 2025 GMT Not After : May 2 04:03:11 2025 GMT Subject: CN=680b097f-e146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:c4:6a:57:b1:7b:f1:ac:e3:ee:10:61:92: a9:05:9c:cd:bc:ae:4d:5b:2c:0c:e2:83:87:28:c0: 0c:e1:42:b5:ab:93:c9:b4:17:a8:e5:c1:23:a5:3c: f0:6b:92:91:36:35:3f:55:65:f8:61:36:ad:f6:60: 7e:f5:18:b9:6f:8f:5d:4b:18:ba:45:b2:b8:49:40: 2d:e6:87:15:0e:0d:00:58:10:d0:21:8d:8c:c4:b1: ad:81:d6:3d:8f:3a:7d:e2:c1:90:d5:55:2d:8d:0e: 43:1e:32:f8:a1:2d:d6:94:d6:73:00:65:67:04:33: 1e:a3:a9:63:d8:52:85:9d:1a:07:de:2c:d9:fa:4d: 57:ed:96:a3:25:45:e0:c5:95:c1:9d:6a:9c:80:82: 8b:ee:c6:16:94:1f:fe:99:7f:69:ab:23:a5:12:87: f6:ba:13:cf:24:ef:c6:8b:99:a0:c0:1b:f8:f9:43: 60:eb:ad:1b:3a:88:56:fd:b3:39:50:ff:42:69:f9: 15:3f:8c:a6:17:b6:cd:a2:65:54:28:05:57:c4:9c: ec:07:02:81:29:e5:e8:e5:96:86:a2:0b:57:6e:fc: 96:3e:82:28:2b:70:9a:ee:06:ee:76:ce:10:f5:96: b1:60:ef:27:ad:b6:63:89:5a:94:7f:08:cb:ac:00: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:9A:28:DD:41:20:DB:75:A3:92:6E:65:D0:4F:63:EC:70:1B:CC X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c3:d7:54:28:ca:7b:3a:8e:ef:8e:c0:44:af:40:2a:bf:00: 48:ab:67:0b:18:1a:8b:b8:7e:a8:e0:e2:4c:91:85:c4:65:93: 22:b4:cc:c2:e8:1a:74:45:8a:2c:23:80:7d:67:b4:33:3a:e1: 99:f3:a3:03:7a:2e:23:e6:51:06:c5:56:1e:2a:06:bf:b6:0c: 99:06:6f:1e:f2:e9:ba:00:65:f6:de:62:af:c8:fb:77:d1:c2: 07:25:fb:a8:78:dc:2d:71:02:1c:60:c0:9b:49:8d:a2:e1:75: ec:6c:f7:77:50:93:54:de:11:70:8d:ab:72:fa:5c:8f:4a:46: 64:32:28:17:c1:fa:ae:b0:f4:39:f9:53:25:4e:de:ce:18:3f: ac:36:1d:0f:fe:a1:62:e5:69:e4:53:f3:c7:ac:1f:be:c7:c4: 22:1d:7c:e2:74:28:53:8f:f2:5d:f2:74:f0:a0:85:fd:8e:e1: be:61:92:d0:1f:51:4d:e9:0b:7b:88:70:d5:3f:b7:ee:55:f5: 55:a1:02:3d:f7:ea:a3:b2:d0:c3:e6:e8:23:13:ec:63:44:df: 32:ea:04:aa:aa:6e:00:d6:b2:4f:e4:57:1b:46:ae:2f:ea:38: cc:c8:c5:53:d1:d8:d8:82:a7:40:ed:02:7b:70:7c:c5:9b:c3: ba:a0:fe:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjUwNDI1MDQwMzExWhcNMjUwNTAyMDQwMzExWjAYMRYwFAYD VQQDEw02ODBiMDk3Zi1lMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WPEalexe/Gs4+4QYZKpBZzNvK5NWywM4oOHKMAM4UK1q5PJtBeo5cEjpTzw a5KRNjU/VWX4YTat9mB+9Ri5b49dSxi6RbK4SUAt5ocVDg0AWBDQIY2MxLGtgdY9 jzp94sGQ1VUtjQ5DHjL4oS3WlNZzAGVnBDMeo6lj2FKFnRoH3izZ+k1X7ZajJUXg xZXBnWqcgIKL7sYWlB/+mX9pqyOlEof2uhPPJO/Gi5mgwBv4+UNg660bOohW/bM5 UP9CafkVP4ymF7bNomVUKAVXxJzsBwKBKeXo5ZaGogtXbvyWPoIoK3Ca7gbuds4Q 9ZaxYO8nrbZjiVqUfwjLrABwLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXKmijd QSDbdaOSbmXQT2PscBvMMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUU0RC81MjNGREE4MDhBMDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIz bVNSZjdDTlcwOHVzbS0ySWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAw9dUKMp7Oo7vjsBEr0AqvwBIq2cLGBqLuH6o4OJMkYXEZZMitMzC 6Bp0RYosI4B9Z7QzOuGZ86MDei4j5lEGxVYeKga/tgyZBm8e8um6AGX23mKvyPt3 0cIHJfuoeNwtcQIcYMCbSY2i4XXsbPd3UJNU3hFwjaty+lyPSkZkMigXwfqusPQ5 +VMlTt7OGD+sNh0P/qFi5WnkU/PHrB++x8QiHXzidChTj/Jd8nTwoIX9juG+YZLQ H1FN6Qt7iHDVP7fuVfVVoQI99+qjstDD5ugjE+xjRN8y6gSqqm4A1rJP5FcbRq4v 6jjMyMVT0djYgqdA7QJ7cHzFm8O6oP7H -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:48 2025 by rpki-client