$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: svUvlwJe37AKy6N7OKsg6KqF0duMnUoSO6FGYXHwfdo= Subject key identifier: D8:15:FB:FE:D8:41:E1:69:06:7A:C5:06:F4:45:8F:EA:70:4B:C8:62 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 0612 Signing time: Thu 24 Apr 2025 22:40:19 +0000 Manifest this update: Thu 24 Apr 2025 22:40:19 +0000 Manifest next update: Thu 01 May 2025 22:40:19 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: x6IR+uqPcxcpY7EVrGbqjX3MCfyrGcl26vyLW0cbz7s=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: YhkBn/J1JdTWK5hPkNAkFpEw4Az5dw82JJQnUVEN+2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Apr 24 22:40:19 2025 GMT Not After : May 1 22:40:19 2025 GMT Subject: CN=680abdd3-3db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:21:34:91:4d:6e:ab:39:be:1f:89:9d:5d: 8f:b6:f4:00:4e:0b:f8:fa:ed:91:7b:fd:67:2b:1f: 6b:1b:13:0d:c8:b9:69:90:dc:3b:ac:26:60:d1:48: df:2a:d0:68:20:09:46:27:e3:dc:66:94:e9:9b:57: 83:1b:0b:90:51:f3:ed:7c:bc:09:9f:3f:8f:1b:48: 74:cc:8e:7a:15:6a:93:58:51:f6:5a:01:2b:7e:e9: 92:7d:fb:68:ab:d5:7e:e0:09:40:da:52:bd:9b:6d: 33:47:9e:a2:23:1c:60:ee:b4:52:d8:0c:2d:24:31: 44:4e:ea:5d:62:cf:00:f5:69:76:b6:d5:f5:37:59: e8:28:ba:73:a8:9d:51:93:cf:7d:cc:37:cf:af:d4: 3e:f0:21:c1:b5:51:3b:fd:3a:31:57:45:9d:49:98: 61:45:6f:7a:64:6a:35:ff:d6:ef:f4:23:8b:cb:2e: 7c:17:22:88:27:10:cf:7b:b8:37:0a:09:ad:77:ab: 9d:d8:6b:46:78:f8:6e:e6:4d:3f:07:af:31:28:20: 4b:2e:99:aa:62:1b:53:69:71:fa:f5:88:3c:3a:ef: d0:30:9c:62:21:6c:5f:f7:a1:70:c3:e9:0d:7f:98: c4:5a:de:60:f8:c2:4d:cd:bf:65:d5:43:1a:f1:f4: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:FB:FE:D8:41:E1:69:06:7A:C5:06:F4:45:8F:EA:70:4B:C8:62 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:30:7c:36:62:4b:a1:aa:96:74:7a:1f:4a:1d:7d:fd:60:32: b3:c8:ed:7c:cc:c0:6a:42:61:ec:87:9d:cd:d2:4b:eb:9f:9b: 45:47:76:2b:a5:89:59:9a:7f:7a:fc:a5:7d:0d:18:29:d7:ec: 0b:81:78:16:45:1b:31:18:94:f9:a7:4f:d3:40:e0:cc:5d:2a: b7:06:ec:3a:d6:79:6f:36:ae:92:7f:a7:21:4c:52:10:27:56: f1:87:98:5f:99:b2:b7:07:bd:b0:45:c5:db:c7:69:34:60:0a: ae:5e:53:6f:16:e8:4c:b8:a2:e4:5e:5c:89:c0:9f:b0:db:49: 98:24:c3:6a:1d:05:4f:62:37:6a:75:da:70:0f:fa:56:c3:3a: 4f:e5:41:2b:b0:f5:76:74:da:97:47:43:cb:f3:67:ff:c3:62: f0:2a:a6:75:e9:91:17:ac:af:25:75:33:46:e8:dc:89:ba:b1: 2b:53:30:a1:8a:df:29:d3:c2:3f:19:b9:4a:52:06:67:a1:4f: da:a5:9b:74:f2:0d:44:52:8f:a1:13:46:2a:46:cb:f7:59:55: db:d7:a8:8f:7d:a6:e1:b1:43:e2:96:6b:f8:2e:e6:99:05:5a: b5:2e:5a:9e:75:02:7f:5a:ed:cd:29:2d:61:14:78:81:04:d2: 3d:36:38:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNDI0MjI0MDE5WhcNMjUwNTAxMjI0MDE5WjAYMRYwFAYD VQQDEw02ODBhYmRkMy0zZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJwhNJFNbqs5vh+JnV2PtvQATgv4+u2Re/1nKx9rGxMNyLlpkNw7rCZg0Ujf KtBoIAlGJ+PcZpTpm1eDGwuQUfPtfLwJnz+PG0h0zI56FWqTWFH2WgErfumSffto q9V+4AlA2lK9m20zR56iIxxg7rRS2AwtJDFETupdYs8A9Wl2ttX1N1noKLpzqJ1R k899zDfPr9Q+8CHBtVE7/ToxV0WdSZhhRW96ZGo1/9bv9COLyy58FyKIJxDPe7g3 Cgmtd6ud2GtGePhu5k0/B68xKCBLLpmqYhtTaXH69Yg8Ou/QMJxiIWxf96Fww+kN f5jEWt5g+MJNzb9l1UMa8fRUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgV+/7Y QeFpBnrFBvRFj+pwS8hiMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/MHw2YkuhqpZ0eh9KHX39YDKzyO18zMBqQmHsh53N0kvrn5tFR3Yr pYlZmn96/KV9DRgp1+wLgXgWRRsxGJT5p0/TQODMXSq3Buw61nlvNq6Sf6chTFIQ J1bxh5hfmbK3B72wRcXbx2k0YAquXlNvFuhMuKLkXlyJwJ+w20mYJMNqHQVPYjdq ddpwD/pWwzpP5UErsPV2dNqXR0PL82f/w2LwKqZ16ZEXrK8ldTNG6NyJurErUzCh it8p08I/GblKUgZnoU/apZt08g1EUo+hE0YqRsv3WVXb16iPfabhsUPilmv4LuaZ BVq1LlqedQJ/Wu3NKS1hFHiBBNI9Njja -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:01 2025 by rpki-client