$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: ixeB/eGOSW0njSXkNzgX1jd8WUXcqGyjSPXDevLEgDs= Subject key identifier: C7:62:8D:69:25:16:8A:19:7F:86:87:91:79:41:F5:FA:D7:99:A4:9D Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 052F Signing time: Thu 24 Apr 2025 23:21:15 +0000 Manifest this update: Thu 24 Apr 2025 23:21:15 +0000 Manifest next update: Thu 01 May 2025 23:21:15 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: PkDMSV9wvNLwni7IWDKgqk56i3S+6LeG24eHP3Vbelw=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: IVU27JRYWuBmIt6QcWFMqPFM6vDpf9nhIJBTc75GYY0=) 3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iDEEL9U9FxQCZ93LBYj286NgN76ygoYjLl0M4z8SPpI=) 4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: U7esX+0iuEFV+x7WiXgxLOpS83nYnKPDWOfbwdSRies=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: OD4QLqvF0E7NjniUYIqO9yXt+jiElu9IZS+rh6A1NUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Apr 24 23:21:15 2025 GMT Not After : May 1 23:21:15 2025 GMT Subject: CN=680ac76b-3cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:65:ff:c4:21:3c:95:e3:85:b7:b1:6a:ac: ba:91:7f:15:c1:82:1e:f5:77:01:90:90:1e:6f:c7: 0f:46:e3:02:83:0d:d1:6f:9d:20:be:2e:87:a0:8c: ee:91:36:a7:b6:10:b8:e1:85:d9:0d:4d:af:c3:aa: b6:2f:22:17:1e:e9:2e:01:0c:a1:9b:50:2d:7c:28: 85:9a:8c:63:b9:1d:fe:93:cb:cc:34:f7:cc:58:6d: 76:fe:a5:a9:f3:85:c6:b8:80:a5:e6:b3:e8:44:22: d8:86:43:ed:76:2f:57:63:1a:0a:d7:66:62:e0:45: 33:7f:a1:9f:1c:76:09:e2:0d:20:a4:b4:a4:ee:aa: 1f:73:f7:60:7c:4d:82:52:fa:a7:9b:e6:62:cc:70: bc:4c:e1:e4:df:e1:22:1f:cc:4f:18:44:e9:98:fb: 5f:3d:e6:17:33:71:99:ad:20:ef:c8:4c:b5:d0:8f: 4e:ce:63:87:73:0a:6e:6a:f5:b6:45:15:65:08:3b: 57:cf:ce:27:57:11:01:32:f0:17:c9:0a:8a:0e:96: 8b:52:6c:b0:1d:6b:bd:42:55:7a:92:63:b6:38:e1: cb:c8:f3:1e:a7:51:42:bb:4a:fe:32:73:5f:a5:34: 7c:8a:10:85:4d:33:e6:63:28:a6:11:1e:48:86:c3: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:8D:69:25:16:8A:19:7F:86:87:91:79:41:F5:FA:D7:99:A4:9D X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:7d:73:c2:48:a6:b7:c2:22:e4:b4:cc:e0:8d:87:14:51:70: 78:73:0c:c1:72:3d:e5:95:78:d3:95:59:9f:f2:fd:de:f8:e7: 10:fd:0c:80:e5:85:34:73:93:ec:73:ce:a1:4e:75:e4:2f:25: c5:4e:40:58:0b:e2:38:85:a6:1c:48:3c:87:02:05:bc:04:a1: 7f:a4:2d:16:c2:29:76:78:4e:9a:3a:0c:86:78:ce:07:da:78: 21:e6:ed:6d:27:b0:20:4a:b2:0b:8a:16:c4:d0:f6:b9:d5:b7: 73:ff:48:ff:0d:d7:f7:6e:86:85:6e:3b:0c:01:ec:3c:48:12: 76:ff:76:ac:23:92:a2:eb:c6:c4:43:7a:f8:4e:a4:52:19:fa: e2:e6:c1:f8:db:f0:59:36:25:06:39:1c:4a:79:d7:ce:9a:b3: 25:31:f6:3a:5c:9e:a6:a2:1f:76:b0:0d:05:1a:8a:7e:ac:d6: 9f:9d:39:6b:15:b8:88:d7:ee:ae:2b:e4:3d:96:26:e9:df:65: bc:81:8f:32:14:af:30:1d:70:10:77:78:ba:28:f4:c1:b5:5f: 2b:e0:23:da:3e:83:65:2b:e9:56:1e:af:cb:e8:0a:06:59:1d: e3:c3:b5:d9:5b:2a:7b:01:78:09:01:ee:91:55:87:c1:ba:40: 06:1b:1b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwNDI0MjMyMTE1WhcNMjUwNTAxMjMyMTE1WjAYMRYwFAYD VQQDEw02ODBhYzc2Yi0zY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Udl/8QhPJXjhbexaqy6kX8VwYIe9XcBkJAeb8cPRuMCgw3Rb50gvi6HoIzu kTanthC44YXZDU2vw6q2LyIXHukuAQyhm1AtfCiFmoxjuR3+k8vMNPfMWG12/qWp 84XGuICl5rPoRCLYhkPtdi9XYxoK12Zi4EUzf6GfHHYJ4g0gpLSk7qofc/dgfE2C Uvqnm+ZizHC8TOHk3+EiH8xPGETpmPtfPeYXM3GZrSDvyEy10I9OzmOHcwpuavW2 RRVlCDtXz84nVxEBMvAXyQqKDpaLUmywHWu9QlV6kmO2OOHLyPMep1FCu0r+MnNf pTR8ihCFTTPmYyimER5IhsOMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdijWkl FooZf4aHkXlB9frXmaSdMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8fXPCSKa3wiLktMzgjYcUUXB4cwzBcj3llXjTlVmf8v3e+OcQ/QyA 5YU0c5Psc86hTnXkLyXFTkBYC+I4haYcSDyHAgW8BKF/pC0Wwil2eE6aOgyGeM4H 2ngh5u1tJ7AgSrILihbE0Pa51bdz/0j/Ddf3boaFbjsMAew8SBJ2/3asI5Ki68bE Q3r4TqRSGfri5sH42/BZNiUGORxKedfOmrMlMfY6XJ6moh92sA0FGop+rNafnTlr FbiI1+6uK+Q9libp32W8gY8yFK8wHXAQd3i6KPTBtV8r4CPaPoNlK+lWHq/L6AoG WR3jw7XZWyp7AXgJAe6RVYfBukAGGxsJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:30 2025 by rpki-client