$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft File: 5luo-mVwW4879u3NnQ2xD9rcuRY.mft (raw, json) Hash identifier: ymXKcgBMrF3vjNtqn/52JeY6fwqjimUYb9YeCAzpjhY= Subject key identifier: 81:49:04:92:23:93:43:98:64:70:A3:D0:8E:D9:55:63:50:08:FA:83 Authority key identifier: E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16 Certificate issuer: /CN=A913A7E7/serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft Manifest number: 02CA Signing time: Fri 25 Apr 2025 01:09:30 +0000 Manifest this update: Fri 25 Apr 2025 01:09:29 +0000 Manifest next update: Fri 02 May 2025 01:09:29 +0000 Files and hashes: 1: 5luo-mVwW4879u3NnQ2xD9rcuRY.crl (hash: GO2LpQ5gK2B1B6rc5gRil0ei3Sg+LRDC1ppyQb8AZtk=) 2: 35C2303AE6FA11EC87D3034DC4F9AE02.roa (hash: vuVl4x8ODxXITMH7KKkyYBqXNY43fEyh4lQvP95MTPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7E7, serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916 Validity Not Before: Apr 25 01:09:29 2025 GMT Not After : May 2 01:09:29 2025 GMT Subject: CN=680ae0ca-a3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:81:98:28:17:cc:22:45:2f:e8:9d:4e:24: d9:c1:16:25:7b:af:03:b0:7f:be:4e:4a:e9:77:fc: 4c:42:95:29:a3:e9:38:c5:8f:97:00:ea:cb:92:9e: d9:12:94:54:60:c6:78:34:2f:a6:0c:80:2a:5d:5c: 6a:8b:b4:5c:e1:c1:13:d7:28:95:50:62:26:e3:18: b3:32:30:c1:f3:37:0b:af:5c:68:c7:e1:d2:dd:f8: cb:5a:c1:62:56:79:c1:dd:35:08:9c:cd:0b:8c:9a: 83:0e:c2:7c:5e:44:15:90:c3:fb:4c:dc:38:52:6d: d4:ae:59:ac:20:60:b2:c7:5e:03:7e:1b:53:6a:93: 5d:73:43:c0:b3:17:ac:6a:2e:3b:28:5f:40:14:3d: 5f:15:82:02:99:3a:e7:37:09:f0:6b:ad:81:31:60: f7:8e:aa:6c:78:d9:fd:b4:55:1c:8c:d6:71:3d:64: 44:3c:3e:f8:62:06:df:fb:0e:a7:db:88:55:16:fe: eb:8d:94:d0:1d:b6:79:c9:b3:66:b3:70:57:f5:93: 40:9d:5b:e2:af:54:43:26:f3:c1:fe:dc:9a:e3:44: c4:44:06:77:4e:d8:9c:08:e6:1b:29:32:42:3b:ca: 77:44:52:eb:ef:33:39:bc:75:a3:8e:99:bf:66:49: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:49:04:92:23:93:43:98:64:70:A3:D0:8E:D9:55:63:50:08:FA:83 X509v3 Authority Key Identifier: keyid:E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:51:e3:0b:ed:57:9f:d2:7f:80:f1:44:34:0b:3a:18:89:5d: 6d:e0:09:13:e4:bc:74:f1:7a:73:5f:82:ac:ac:2c:ca:d0:f3: 04:0f:e2:73:77:ed:a2:f0:32:2f:16:16:bf:44:f3:49:2a:5c: 7a:0a:a7:88:7f:6e:70:64:18:eb:9a:b3:3a:97:1d:93:cf:f8: 4e:41:50:03:94:0b:5b:e6:b1:8e:ab:d2:03:f4:b8:09:58:d3: f1:63:8b:72:c0:ad:9d:cb:8d:c0:d2:91:23:69:c7:b4:27:b0: e4:bc:ee:46:3e:e9:cf:1e:08:61:9b:0f:f6:c9:96:7b:8d:e7: 14:69:54:ef:8d:16:b7:b2:3b:ec:7f:e1:4b:19:87:fc:ea:fb: 2b:3f:7d:ef:e9:1e:67:6d:b8:13:55:b6:c9:23:68:7a:30:10: 39:97:0b:47:90:31:92:ca:05:25:c1:74:56:54:e3:06:9f:93: fb:3a:09:8e:e8:b3:7c:79:76:0d:b2:a3:63:44:45:0c:b4:e8: f2:4a:31:fb:80:96:db:94:8a:56:97:bf:7b:77:a8:d2:76:42: 46:c9:56:0d:3a:33:52:d1:25:cc:43:7b:ee:bc:0b:62:c5:76: 1f:f3:39:c1:ba:16:dc:5d:71:07:af:bb:62:e6:04:81:4f:ac: eb:07:f3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3RTcxMTAvBgNVBAUTKEU2NUJBOEZBNjU3MDVCOEYzQkY2RURDRDlEMERCMTBG REFEQ0I5MTYwHhcNMjUwNDI1MDEwOTI5WhcNMjUwNTAyMDEwOTI5WjAYMRYwFAYD VQQDEw02ODBhZTBjYS1hM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyaBmCgXzCJFL+idTiTZwRYle68DsH++Tkrpd/xMQpUpo+k4xY+XAOrLkp7Z EpRUYMZ4NC+mDIAqXVxqi7Rc4cET1yiVUGIm4xizMjDB8zcLr1xox+HS3fjLWsFi VnnB3TUInM0LjJqDDsJ8XkQVkMP7TNw4Um3UrlmsIGCyx14DfhtTapNdc0PAsxes ai47KF9AFD1fFYICmTrnNwnwa62BMWD3jqpseNn9tFUcjNZxPWREPD74Ygbf+w6n 24hVFv7rjZTQHbZ5ybNms3BX9ZNAnVvir1RDJvPB/tya40TERAZ3TticCOYbKTJC O8p3RFLr7zM5vHWjjpm/ZklI0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFJBJIj k0OYZHCj0I7ZVWNQCPqDMB8GA1UdIwQYMBaAFOZbqPplcFuPO/btzZ0NsQ/a3LkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdFNy82QjkyMzU0NEU2 RUExMUVDOTk5NDI2NjdDNEY5QUUwMi81bHVvLW1Wd1c0ODc5dTNOblEyeEQ5cmN1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVsdW8tbVZ3VzQ4Nzl1M05uUTJ4RDlyY3VSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdFNy82QjkyMzU0NEU2RUExMUVDOTk5NDI2NjdDNEY5QUUwMi81bHVvLW1Wd1c0 ODc5dTNOblEyeEQ5cmN1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUeML7Vef0n+A8UQ0CzoYiV1t4AkT5Lx08XpzX4KsrCzK0PMED+Jz d+2i8DIvFha/RPNJKlx6CqeIf25wZBjrmrM6lx2Tz/hOQVADlAtb5rGOq9ID9LgJ WNPxY4tywK2dy43A0pEjace0J7DkvO5GPunPHghhmw/2yZZ7jecUaVTvjRa3sjvs f+FLGYf86vsrP33v6R5nbbgTVbbJI2h6MBA5lwtHkDGSygUlwXRWVOMGn5P7OgmO 6LN8eXYNsqNjREUMtOjySjH7gJbblIpWl797d6jSdkJGyVYNOjNS0SXMQ3vuvAti xXYf8znBuhbcXXEHr7ti5gSBT6zrB/M2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:39 2025 by rpki-client