$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: IxAiJAvrdU6AZaZVYzPGEBFDWmw4gzg9uc14s2Vvrzw= Subject key identifier: FF:65:71:B0:1A:96:33:1A:CF:35:BD:39:47:9D:92:70:AD:EA:E8:B9 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0C3A Signing time: Thu 24 Apr 2025 18:21:54 +0000 Manifest this update: Thu 24 Apr 2025 18:21:53 +0000 Manifest next update: Thu 01 May 2025 18:21:53 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: C992IbIvqaYYi2bzU3OgnhbgHWOyhRM+Vthf+5YDtsY=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: xaKObum3EFlGZQF/g5wk0khI8wDbWZb2Cu/3w9bjJUY=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: +PNWRMsQpZdZrhBnxEHUPHxE2UGarRHAqMGQOz8wwvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: Apr 24 18:21:53 2025 GMT Not After : May 1 18:21:53 2025 GMT Subject: CN=680a8141-4814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:80:0f:92:de:3f:ad:1d:83:4b:70:e7:1b: 9f:bb:9d:22:b1:4c:f8:94:2d:b8:94:a0:b8:2d:94: f8:e1:ec:cf:cf:98:c8:d8:68:19:71:5d:ec:20:82: 1e:98:df:e3:90:d0:bd:93:28:9f:36:01:76:b3:50: 79:3d:62:c0:c6:67:a3:78:88:3d:3d:35:3f:56:87: 52:d3:25:85:1b:0c:47:59:36:4e:2e:4e:fd:13:d9: 5e:09:34:c8:12:e3:66:e7:07:29:26:33:53:e4:6a: fa:bf:3c:ab:7b:cc:36:4d:40:51:1e:bb:41:92:6a: ce:26:de:b7:e0:2e:8d:46:80:18:0f:bc:89:c4:c2: 79:3c:ea:bf:23:bc:c2:7c:20:17:73:db:c5:1d:cb: 73:09:3d:15:70:e6:55:05:c0:21:ba:3b:9a:3b:86: 40:01:10:a2:88:89:03:2d:30:24:ff:89:e8:6b:7d: 66:74:29:af:79:fc:a4:00:85:91:bb:64:33:7c:87: 44:bb:fa:6d:31:d8:5c:93:eb:cc:50:5f:bb:e6:92: 6b:16:f7:b6:71:3a:de:8a:32:62:b3:ed:59:a0:e9: 35:40:ee:e3:49:ea:83:19:f7:4c:47:2a:88:e0:c6: 5f:1e:19:0f:45:5b:8d:a4:9b:68:2e:5a:bb:e3:ea: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:65:71:B0:1A:96:33:1A:CF:35:BD:39:47:9D:92:70:AD:EA:E8:B9 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:56:0e:aa:e1:08:c4:bd:52:9d:96:68:49:fe:1e:4a:02:7f: e9:51:88:99:17:ac:bb:bf:2b:1f:72:85:d8:18:89:a2:80:40: 59:29:ad:28:ea:c4:6f:d6:38:f4:11:ca:5d:01:c2:b0:8d:15: 0c:6f:54:e9:6a:9f:36:04:78:99:32:c2:3e:8e:b0:fc:cf:4e: af:0d:37:69:16:ee:1f:68:14:26:3f:fb:91:13:f4:22:e3:e1: 0b:b3:e7:7f:97:e6:3e:60:c0:77:25:b5:42:69:85:a7:36:8b: 89:be:74:6d:40:b1:56:9a:d6:dd:a6:c1:4d:ee:a1:b7:9d:7d: 39:f8:a4:ec:35:fd:96:16:e6:7b:07:1b:ce:65:35:61:fc:e2: 94:e9:bb:26:be:55:79:60:73:5a:b9:e6:db:d2:75:ea:37:a0: 89:3a:0a:f3:f8:56:9f:91:88:bc:42:23:7f:32:2a:74:f7:15: fd:89:44:be:64:3c:6e:4d:62:9d:09:a6:ff:30:bd:16:31:99: 73:2e:70:b8:9d:86:b3:3b:1f:ce:c7:2b:64:46:4d:c8:8b:3e: 55:35:32:67:d2:c2:ca:fd:d1:20:d9:db:c1:33:ea:dd:fb:c6: dc:06:e7:46:68:2f:ec:87:77:81:6f:03:76:2e:b2:b0:c9:73: 58:19:94:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjUwNDI0MTgyMTUzWhcNMjUwNTAxMTgyMTUzWjAYMRYwFAYD VQQDEw02ODBhODE0MS00ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCaAD5LeP60dg0tw5xufu50isUz4lC24lKC4LZT44ezPz5jI2GgZcV3sIIIe mN/jkNC9kyifNgF2s1B5PWLAxmejeIg9PTU/VodS0yWFGwxHWTZOLk79E9leCTTI EuNm5wcpJjNT5Gr6vzyre8w2TUBRHrtBkmrOJt634C6NRoAYD7yJxMJ5POq/I7zC fCAXc9vFHctzCT0VcOZVBcAhujuaO4ZAARCiiIkDLTAk/4noa31mdCmvefykAIWR u2QzfIdEu/ptMdhck+vMUF+75pJrFve2cTreijJis+1ZoOk1QO7jSeqDGfdMRyqI 4MZfHhkPRVuNpJtoLlq74+qg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9lcbAa ljMazzW9OUedknCt6ui5MB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmVg6q4QjEvVKdlmhJ/h5KAn/pUYiZF6y7vysfcoXYGImigEBZKa0o 6sRv1jj0EcpdAcKwjRUMb1Tpap82BHiZMsI+jrD8z06vDTdpFu4faBQmP/uRE/Qi 4+ELs+d/l+Y+YMB3JbVCaYWnNouJvnRtQLFWmtbdpsFN7qG3nX05+KTsNf2WFuZ7 BxvOZTVh/OKU6bsmvlV5YHNauebb0nXqN6CJOgrz+FafkYi8QiN/Mip09xX9iUS+ ZDxuTWKdCab/ML0WMZlzLnC4nYazOx/OxytkRk3Iiz5VNTJn0sLK/dEg2dvBM+rd +8bcBudGaC/sh3eBbwN2LrKwyXNYGZT8 -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:57 2025 by rpki-client