$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: ZnXvHk+9GgHWmBbzQJqZvtvSlrm9onYWgW+H+8jHNJ8= Subject key identifier: DD:8A:32:F6:5B:FD:A8:B5:D1:B7:6B:2D:0D:BA:9E:05:88:B7:33:5D Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0B58 Signing time: Thu 24 Apr 2025 19:00:51 +0000 Manifest this update: Thu 24 Apr 2025 19:00:51 +0000 Manifest next update: Thu 01 May 2025 19:00:51 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: vum3rynsu46++ZVfn7EoGlvS7OiHcZnHmrUzhdkS3GM=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Apr 24 19:00:51 2025 GMT Not After : May 1 19:00:51 2025 GMT Subject: CN=680a8a63-c6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:02:4f:70:4c:13:22:be:a5:97:15:1c:95: 68:6a:de:c8:20:6b:fe:05:28:64:c1:f0:fb:27:0b: 80:32:9e:d3:5d:43:87:9c:67:22:25:24:70:cf:8a: bf:06:af:02:d6:17:f8:da:bd:a4:fb:74:ce:a6:c5: 0a:a3:fe:73:32:23:12:e9:77:22:4d:3c:b8:10:54: 54:d8:dc:f3:6d:3f:b7:e6:f7:cc:fb:1f:13:fb:69: 6d:47:52:97:96:b8:47:80:14:ec:25:1b:c1:52:48: 49:df:ee:ee:4e:e2:22:16:c3:15:3d:bf:54:b8:1b: 42:25:d7:d7:5a:da:53:f7:f3:cb:0f:5d:ce:26:74: 78:b4:96:ba:38:a7:be:0a:e6:13:a4:60:3f:68:00: e9:7e:21:3c:ca:0b:ef:92:d5:c3:57:a6:12:66:6a: 6c:ee:2e:46:9f:a4:41:9c:17:c6:89:98:2b:f9:2c: 65:55:48:1d:06:dc:8d:e8:d0:55:c1:0d:90:e9:05: 90:31:a0:10:2b:aa:7a:75:75:81:0c:b6:7b:15:e5: ff:b6:b4:c2:87:87:d7:54:f0:2d:98:9c:df:ca:ba: 95:d0:04:ff:55:b6:63:8c:a2:6f:94:9e:f5:0a:58: 33:bf:95:16:41:d0:ed:e1:f9:40:f3:b8:21:08:2b: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:32:F6:5B:FD:A8:B5:D1:B7:6B:2D:0D:BA:9E:05:88:B7:33:5D X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:32:52:02:14:b1:a5:12:37:a9:c5:d0:91:4f:d6:ba:9b:c1: cb:0c:5a:69:f4:b1:d3:a3:06:9f:10:a8:26:c3:da:c2:87:a4: 8b:3c:a7:bb:88:49:5b:75:3a:2a:50:c0:58:6e:de:46:9b:78: 95:44:12:5a:b4:61:ab:e1:7a:9d:f8:90:ac:ea:9e:46:31:1c: 3c:ce:97:62:da:22:f4:65:4e:8b:94:16:85:3a:11:82:f6:92: e9:d5:05:73:27:18:41:e7:21:06:e1:2a:b1:dd:95:40:9b:e6: 06:1a:33:8d:95:6a:d1:20:2b:5e:3f:5b:c7:9c:05:d5:48:19: 72:2e:ba:29:0d:d8:14:d8:48:a5:54:52:62:61:5e:6c:90:e0: 0f:8b:59:74:fc:83:21:6b:4a:88:57:8d:43:97:ff:4b:d5:fa: 9e:33:99:51:92:1c:80:60:7e:23:92:89:99:36:71:ea:1e:66: 9e:15:40:4b:d2:90:af:b0:c6:a0:20:ce:36:92:40:e1:0c:49: c7:db:24:b6:24:fb:0a:1a:66:44:33:bd:17:03:e7:48:a1:69: 86:d3:ef:65:62:cd:57:35:67:c2:98:79:7c:d2:af:a7:ee:2c: 8a:e1:a1:be:28:2b:06:1a:e8:be:2e:ba:bd:e3:57:40:7f:4c: c2:5d:fc:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUwNDI0MTkwMDUxWhcNMjUwNTAxMTkwMDUxWjAYMRYwFAYD VQQDEw02ODBhOGE2My1jNmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5ECT3BMEyK+pZcVHJVoat7IIGv+BShkwfD7JwuAMp7TXUOHnGciJSRwz4q/ Bq8C1hf42r2k+3TOpsUKo/5zMiMS6XciTTy4EFRU2NzzbT+35vfM+x8T+2ltR1KX lrhHgBTsJRvBUkhJ3+7uTuIiFsMVPb9UuBtCJdfXWtpT9/PLD13OJnR4tJa6OKe+ CuYTpGA/aADpfiE8ygvvktXDV6YSZmps7i5Gn6RBnBfGiZgr+SxlVUgdBtyN6NBV wQ2Q6QWQMaAQK6p6dXWBDLZ7FeX/trTCh4fXVPAtmJzfyrqV0AT/VbZjjKJvlJ71 Clgzv5UWQdDt4flA87ghCCtKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2KMvZb /ai10bdrLQ26ngWItzNdMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6MlICFLGlEjepxdCRT9a6m8HLDFpp9LHTowafEKgmw9rCh6SLPKe7 iElbdToqUMBYbt5Gm3iVRBJatGGr4Xqd+JCs6p5GMRw8zpdi2iL0ZU6LlBaFOhGC 9pLp1QVzJxhB5yEG4Sqx3ZVAm+YGGjONlWrRICteP1vHnAXVSBlyLropDdgU2Eil VFJiYV5skOAPi1l0/IMha0qIV41Dl/9L1fqeM5lRkhyAYH4jkomZNnHqHmaeFUBL 0pCvsMagIM42kkDhDEnH2yS2JPsKGmZEM70XA+dIoWmG0+9lYs1XNWfCmHl80q+n 7iyK4aG+KCsGGui+Lrq941dAf0zCXfz1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:05 2025 by rpki-client