$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: V7qOMd3reX00Oyic8mrWHm7TQodMPX20lxmgf/HYWtU= Subject key identifier: AB:7B:B9:A3:77:EA:BA:69:14:AA:E4:CE:C3:D3:9D:7C:E8:2A:B1:09 Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 34B8 Signing time: Thu 24 Apr 2025 14:15:37 +0000 Manifest this update: Thu 24 Apr 2025 14:15:36 +0000 Manifest next update: Thu 01 May 2025 14:15:36 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: M7OsrJ8/gycPMG+8B58AOg4voeeHNKJMsmh6YVjvyWw=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Apr 24 14:15:36 2025 GMT Not After : May 1 14:15:36 2025 GMT Subject: CN=680a4789-390e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:4d:c6:7e:aa:9e:ed:23:88:ef:18:ce:71: ee:ec:15:a7:78:71:b7:0a:eb:21:9c:cd:db:82:a2: 84:bc:50:2d:95:36:ef:0c:7b:40:c4:64:be:53:cb: 8e:6c:6d:3f:26:71:a2:ec:78:4a:c3:dc:09:c3:71: 87:12:ea:07:b5:94:1b:59:6d:e5:c8:7b:54:c1:62: 00:40:2e:ea:0d:11:8c:f2:39:08:2d:62:b9:79:f0: 4e:c6:4d:79:11:d2:7a:3f:14:38:d0:91:7b:e0:8d: 39:45:1a:d5:23:b0:ac:d8:e4:80:ee:8c:84:7e:94: 68:83:b1:97:01:86:2b:ad:6d:ca:ed:14:c0:6d:8e: 44:61:c9:d6:7d:3a:8f:29:6a:dc:fc:c1:b6:cc:e7: d8:3d:d8:d3:66:cb:ea:a8:d0:83:ee:a4:99:58:9f: 18:c1:ac:fc:6d:b5:83:99:96:be:f8:7f:28:f1:1a: 3e:4b:6e:46:30:3a:cb:5d:a7:80:30:d8:66:62:a0: 99:be:8c:35:18:ac:06:62:ae:55:0f:23:d7:4d:a2: 44:37:3b:31:c8:23:8d:fc:f3:2c:d9:96:38:58:59: cd:50:ea:fd:ec:30:a7:e8:4b:92:99:52:51:5a:0f: b2:f6:6e:d8:9a:0a:ae:2a:54:47:77:48:17:9e:02: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7B:B9:A3:77:EA:BA:69:14:AA:E4:CE:C3:D3:9D:7C:E8:2A:B1:09 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8f:ed:9b:f9:d8:66:8e:cf:f1:71:7f:91:1c:5b:a4:51:b0: d0:c1:9e:1c:0e:96:80:71:56:47:94:0d:45:cb:af:44:a5:e5: a7:16:5f:d6:98:17:f6:d3:16:a8:01:b4:28:89:56:18:78:f5: bf:0a:15:b7:bb:71:17:0a:e3:c6:3f:04:3e:f0:0a:2b:f2:12: 76:e6:a3:d9:dc:96:f5:13:ca:c3:dd:4a:d3:a1:f5:74:61:67: 66:27:0d:ce:b3:cf:58:44:64:36:1e:cd:f4:c7:3a:c9:d3:1a: 47:1c:5d:73:51:1e:b9:ab:b5:ee:92:99:01:c9:53:77:bd:d1: cd:ac:58:79:2e:ba:11:e8:62:14:0e:55:59:55:fb:67:18:74: f7:c9:57:cc:b1:a7:2a:48:fd:78:31:65:45:e7:fb:a7:05:e5: b3:df:c1:b0:a2:2b:b3:fa:d9:8f:45:ed:51:0b:88:b1:5b:9c: d4:5b:00:26:1d:c4:df:42:19:75:ec:e3:55:ba:02:42:f6:b7: 74:6b:ac:8c:63:7e:fc:1e:f6:ca:50:64:e6:5d:6d:f2:ae:43: 42:3e:39:89:45:36:87:94:df:e3:b1:82:d4:95:a7:0d:bf:95: c1:c0:76:dd:bf:df:ea:05:56:f1:4f:b4:21:39:0a:41:7f:53: 30:6c:99:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUwNDI0MTQxNTM2WhcNMjUwNTAxMTQxNTM2WjAYMRYwFAYD VQQDEw02ODBhNDc4OS0zOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2BNxn6qnu0jiO8YznHu7BWneHG3CushnM3bgqKEvFAtlTbvDHtAxGS+U8uO bG0/JnGi7HhKw9wJw3GHEuoHtZQbWW3lyHtUwWIAQC7qDRGM8jkILWK5efBOxk15 EdJ6PxQ40JF74I05RRrVI7Cs2OSA7oyEfpRog7GXAYYrrW3K7RTAbY5EYcnWfTqP KWrc/MG2zOfYPdjTZsvqqNCD7qSZWJ8Ywaz8bbWDmZa++H8o8Ro+S25GMDrLXaeA MNhmYqCZvow1GKwGYq5VDyPXTaJENzsxyCON/PMs2ZY4WFnNUOr97DCn6EuSmVJR Wg+y9m7YmgquKlRHd0gXngI9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt7uaN3 6rppFKrkzsPTnXzoKrEJMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzj+2b+dhmjs/xcX+RHFukUbDQwZ4cDpaAcVZHlA1Fy69EpeWnFl/W mBf20xaoAbQoiVYYePW/ChW3u3EXCuPGPwQ+8Aor8hJ25qPZ3Jb1E8rD3UrTofV0 YWdmJw3Os89YRGQ2Hs30xzrJ0xpHHF1zUR65q7XukpkByVN3vdHNrFh5LroR6GIU DlVZVftnGHT3yVfMsacqSP14MWVF5/unBeWz38Gwoiuz+tmPRe1RC4ixW5zUWwAm HcTfQhl17ONVugJC9rd0a6yMY378HvbKUGTmXW3yrkNCPjmJRTaHlN/jsYLUlacN v5XBwHbdv9/qBVbxT7QhOQpBf1MwbJlH -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:32 2025 by rpki-client