$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: WwhOppygyZFnzRzwwSF8+soVmFvwvm7lBtItPIZbL6k= Subject key identifier: 43:70:CD:AA:9E:B4:2D:80:35:C7:8D:4A:35:7F:29:05:44:DE:FE:5C Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 03F4 Signing time: Fri 25 Apr 2025 00:16:01 +0000 Manifest this update: Fri 25 Apr 2025 00:16:00 +0000 Manifest next update: Fri 02 May 2025 00:16:00 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: Vg69iPNDOYpbIts7ageKQPxMIwZxcDGFJABoFxNq0eA=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: Apr 25 00:16:00 2025 GMT Not After : May 2 00:16:00 2025 GMT Subject: CN=680ad441-07c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:0f:33:99:96:3a:a8:d3:e8:12:fc:a5:65: eb:9f:de:e6:73:28:18:0f:e3:ff:ac:79:7c:ac:5f: c3:07:6d:97:d3:1c:d5:33:fa:8b:a1:46:8a:21:0d: 1d:30:94:ab:37:87:fa:d1:eb:ed:f0:cd:d0:c2:4c: 54:7b:88:3d:5e:6d:26:d1:7b:cb:2e:28:41:3d:23: 2d:8c:07:ce:85:b0:0c:9f:d2:ea:6d:30:f2:be:51: 75:df:46:25:6f:7f:09:03:29:f1:f0:8f:d7:08:6a: 18:1d:16:81:43:96:73:ea:55:70:ea:5d:4d:10:6b: 84:c2:0e:44:0a:12:8c:af:d0:30:65:ca:96:04:fd: b2:ac:e8:95:50:f9:59:ed:18:e9:f2:ef:45:7a:97: 14:2d:7c:9e:d4:30:8a:8e:0c:61:4b:ed:58:db:95: 09:64:99:f4:94:c5:62:91:84:aa:1d:bb:60:08:60: d5:10:bc:73:7e:46:c6:4f:fd:81:63:3a:89:94:03: 7e:2e:da:ff:48:66:e5:73:e2:58:2d:08:26:3c:9e: da:43:bf:ea:91:c5:26:81:31:97:d7:89:62:28:18: 55:8c:c0:1d:00:cb:6e:12:cc:37:95:f3:71:07:a8: c6:94:fd:41:7d:fc:ec:04:75:30:3e:fb:86:b2:51: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:CD:AA:9E:B4:2D:80:35:C7:8D:4A:35:7F:29:05:44:DE:FE:5C X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:38:bc:18:37:3b:b2:e7:6a:11:3e:45:c4:74:fc:94:b7:03: 4c:1f:09:5e:68:5e:81:ef:93:e2:2c:f2:49:8e:f7:31:37:7d: 00:4a:64:5f:4a:a4:f3:41:eb:ae:c6:75:dc:db:f6:7e:8f:4a: db:e6:d1:4e:11:9a:89:f7:56:4c:14:f3:10:53:48:fc:9d:69: 25:28:6d:a1:5c:1e:59:25:6c:24:9d:3f:1d:3c:5a:b4:be:7f: 12:ec:8c:eb:43:c1:f3:ab:6c:42:d2:ea:e2:da:ff:5a:2d:26: 10:71:3a:b8:3d:41:63:7e:5d:ea:55:69:da:f9:51:ec:db:f2: 8d:b9:87:71:04:59:9f:45:69:2f:45:ff:84:3c:ef:e2:61:bd: 97:10:6e:f7:c2:8a:55:1d:2e:6a:0b:74:44:75:ad:38:94:c2: 61:11:e3:96:81:1d:a1:b1:ef:bc:8d:e6:d9:37:f9:d3:c1:a6: bc:af:23:cf:75:3f:2f:32:b1:5e:af:47:2f:8b:da:54:bd:e0: 08:78:2c:42:40:2e:b0:5e:45:49:5b:21:b1:bd:0e:d5:7c:44: 37:db:cd:d5:49:9a:ac:4a:f6:d7:af:29:8e:56:28:53:d7:4a: b3:76:87:62:85:96:95:69:c5:6e:e7:87:b7:ec:6a:da:c2:9b: 74:c5:6f:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUwNDI1MDAxNjAwWhcNMjUwNTAyMDAxNjAwWjAYMRYwFAYD VQQDEw02ODBhZDQ0MS0wN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c8PM5mWOqjT6BL8pWXrn97mcygYD+P/rHl8rF/DB22X0xzVM/qLoUaKIQ0d MJSrN4f60evt8M3QwkxUe4g9Xm0m0XvLLihBPSMtjAfOhbAMn9LqbTDyvlF130Yl b38JAynx8I/XCGoYHRaBQ5Zz6lVw6l1NEGuEwg5EChKMr9AwZcqWBP2yrOiVUPlZ 7Rjp8u9FepcULXye1DCKjgxhS+1Y25UJZJn0lMVikYSqHbtgCGDVELxzfkbGT/2B YzqJlAN+Ltr/SGblc+JYLQgmPJ7aQ7/qkcUmgTGX14liKBhVjMAdAMtuEsw3lfNx B6jGlP1BffzsBHUwPvuGslFgiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENwzaqe tC2ANceNSjV/KQVE3v5cMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhOLwYNzuy52oRPkXEdPyUtwNMHwleaF6B75PiLPJJjvcxN30ASmRf SqTzQeuuxnXc2/Z+j0rb5tFOEZqJ91ZMFPMQU0j8nWklKG2hXB5ZJWwknT8dPFq0 vn8S7IzrQ8Hzq2xC0uri2v9aLSYQcTq4PUFjfl3qVWna+VHs2/KNuYdxBFmfRWkv Rf+EPO/iYb2XEG73wopVHS5qC3REda04lMJhEeOWgR2hse+8jebZN/nTwaa8ryPP dT8vMrFer0cvi9pUveAIeCxCQC6wXkVJWyGxvQ7VfEQ3283VSZqsSvbXrymOVihT 10qzdodihZaVacVu54e37Grawpt0xW9F -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:01 2025 by rpki-client