$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json) Hash identifier: W4T8pWwfN+MJ+6uMmhq53lSwahwAUN0HesDeRA/1e60= Subject key identifier: E9:71:CF:48:1D:0A:80:1A:1A:C4:08:91:40:5B:DB:FC:9B:26:72:0C Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft Manifest number: 77 Signing time: Fri 25 Apr 2025 05:47:15 +0000 Manifest this update: Fri 25 Apr 2025 05:47:14 +0000 Manifest next update: Fri 02 May 2025 05:47:14 +0000 Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: j10wRzyhH3JRj6wZhCYjdWHwREyraVmXz47uuynm/H8=) 2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: Apr 25 05:47:14 2025 GMT Not After : May 2 05:47:14 2025 GMT Subject: CN=680b21e2-2bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:02:c9:ec:7c:18:e2:14:3b:1d:3f:57:ed: 5b:f3:e0:cb:f4:bb:d7:1e:f5:ec:08:d3:62:26:51: cd:c1:6f:f9:90:71:36:62:6a:1f:6d:fd:3e:d7:9e: aa:0c:86:37:d1:54:75:a4:be:e7:db:bf:f3:fa:d5: 89:61:29:e7:b3:a8:1f:4e:fa:5b:37:a4:cb:bc:98: 53:d5:93:34:fe:46:2b:15:5b:3c:90:81:e9:bc:f4: b7:63:4a:32:86:28:bd:26:84:00:77:e3:00:43:41: f4:58:2f:8d:5d:5c:c7:50:08:39:13:68:a5:23:c1: 53:c4:a1:8f:27:68:6a:ec:85:e3:62:69:fd:3d:9e: 12:6e:03:e0:c6:02:63:74:a0:cf:c8:33:a1:f5:3e: b7:27:0b:09:b4:d0:6e:6d:51:25:8c:46:cb:9b:e4: ff:6e:56:a3:c3:2a:76:12:84:41:c2:ec:f5:cc:0a: d6:41:11:ed:da:e8:30:00:02:09:fb:19:62:23:0d: a7:8b:02:26:68:06:3f:90:31:e3:45:6f:50:43:53: 13:86:29:7c:b2:d2:b2:15:db:3f:93:be:9f:39:ac: 00:0a:6d:1c:fc:cb:30:69:07:e2:3d:bc:95:fb:d8: 15:62:6c:fb:70:a6:c2:67:57:a2:f7:a4:39:e7:e8: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:CF:48:1D:0A:80:1A:1A:C4:08:91:40:5B:DB:FC:9B:26:72:0C X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f9:a7:55:32:26:8a:27:54:00:96:2d:0b:aa:a3:38:d6:9f: 4f:fa:71:41:de:1b:1e:3a:54:b6:33:c7:cf:46:33:8d:21:bf: 31:10:b0:14:e3:ea:81:5c:88:f9:34:ab:c8:8c:6c:88:85:a1: 50:42:92:51:c9:f1:28:26:cf:43:98:0c:6b:06:d8:65:2a:6f: 57:b7:35:2f:bd:05:36:d7:9c:25:31:1e:6a:d5:22:cc:58:bf: 9a:9d:7d:4a:ff:ff:8c:e6:e3:1b:fc:be:87:ff:33:d6:36:cb: bd:81:97:1a:2d:33:25:24:a8:48:0a:2c:9c:1a:8b:a7:ce:69: 8e:78:a7:eb:62:60:36:0c:19:98:45:d8:97:87:f1:4b:34:62: 6e:0d:ba:ad:fc:f8:5f:45:ae:47:b8:d7:12:83:ec:d6:92:5e: f6:a0:42:29:d0:62:0c:12:41:64:1d:38:59:b5:70:5d:c7:b0: 40:5e:d8:0b:6e:b7:1c:2c:de:e3:52:79:18:72:7c:18:b4:34: 8e:47:1e:07:4f:59:cf:78:ef:e1:ae:89:94:b3:92:5f:44:ba: 7d:3c:b6:af:fc:a9:1d:c5:de:f2:23:3a:eb:b8:8d:fd:81:51: 28:d5:af:59:98:a5:e5:fe:2e:0c:bf:27:57:f3:86:cb:9b:51: 46:86:ef:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDM5MTExMC8GA1UEBRMoOTZBNjM1MDI3QjY0QTY1NEQ4MDg5NDVEQjgzNUE5RTI4 Qzc5NEIwMTAeFw0yNTA0MjUwNTQ3MTRaFw0yNTA1MDIwNTQ3MTRaMBgxFjAUBgNV BAMTDTY4MGIyMWUyLTJiYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJxQLJ7HwY4hQ7HT9X7Vvz4Mv0u9ce9ewI02ImUc3Bb/mQcTZiah9t/T7XnqoM hjfRVHWkvufbv/P61YlhKeezqB9O+ls3pMu8mFPVkzT+RisVWzyQgem89LdjSjKG KL0mhAB34wBDQfRYL41dXMdQCDkTaKUjwVPEoY8naGrsheNiaf09nhJuA+DGAmN0 oM/IM6H1PrcnCwm00G5tUSWMRsub5P9uVqPDKnYShEHC7PXMCtZBEe3a6DAAAgn7 GWIjDaeLAiZoBj+QMeNFb1BDUxOGKXyy0rIV2z+Tvp85rAAKbRz8yzBpB+I9vJX7 2BVibPtwpsJnV6L3pDnn6Bk/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6XHPSB0K gBoaxAiRQFvb/JsmcgwwHwYDVR0jBBgwFoAUlqY1AntkplTYCJRduDWp4ox5SwEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MzkxL0Y3MjA5QzMyNzBB RDExRUZBODQ4QjA2OEM0RjlBRTAyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbHFZMUFudGtwbFRZQ0pSZHVEV3A0b3g1U3dFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MzkxL0Y3MjA5QzMyNzBBRDExRUZBODQ4QjA2OEM0RjlBRTAyL2xxWTFBbnRrcGxU WUNKUmR1RFdwNG94NVN3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJT5p1UyJoonVACWLQuqozjWn0/6cUHeGx46VLYzx89GM40hvzEQsBTj 6oFciPk0q8iMbIiFoVBCklHJ8Sgmz0OYDGsG2GUqb1e3NS+9BTbXnCUxHmrVIsxY v5qdfUr//4zm4xv8vof/M9Y2y72BlxotMyUkqEgKLJwai6fOaY54p+tiYDYMGZhF 2JeH8Us0Ym4Nuq38+F9Frke41xKD7NaSXvagQinQYgwSQWQdOFm1cF3HsEBe2Atu txws3uNSeRhyfBi0NI5HHgdPWc947+GuiZSzkl9Eun08tq/8qR3F3vIjOuu4jf2B USjVr1mYpeX+Lgy/J1fzhsubUUaG77E= -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:48 2025 by rpki-client