$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: zG7ILrPzHBjkDlzib7n+vjBqYweDDoFq6VXSRmtgOZQ= Subject key identifier: 47:68:58:1C:93:A3:28:27:D9:9E:28:12:89:8B:90:F7:81:93:EB:93 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B21 Signing time: Thu 24 Apr 2025 19:07:23 +0000 Manifest this update: Thu 24 Apr 2025 19:07:22 +0000 Manifest next update: Thu 01 May 2025 19:07:22 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: /2NaT5xdLhxNh3g0kzRS5jsn3MX7CyfYVcfGrqyIhMs=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Apr 24 19:07:22 2025 GMT Not After : May 1 19:07:22 2025 GMT Subject: CN=680a8bea-c3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:ed:b3:36:10:3d:47:0d:a6:97:aa:f3:66: 99:2d:66:03:18:97:c4:9c:b1:8c:d3:c8:2f:dd:53: b2:3e:15:74:4c:35:0c:aa:68:f5:a7:55:d5:cf:4b: a3:53:2a:92:52:8c:86:44:07:83:ab:be:b8:24:4a: 33:58:52:00:38:80:30:a1:cc:85:f4:88:7f:6f:1f: 8c:d6:70:f6:63:d1:a5:de:e3:d3:21:87:db:e0:1d: 0f:dc:de:67:e2:5a:f4:23:64:23:98:9d:d5:fe:82: c7:af:c7:24:ce:b3:b1:5e:d4:3d:cd:32:78:15:42: c2:98:39:db:97:fe:87:4b:5d:4e:29:5a:b7:94:97: f7:45:e8:69:b9:69:62:ec:62:fd:95:b8:34:44:0d: f0:f3:fe:b0:7c:1f:07:2b:8c:75:6d:98:92:23:8e: 92:0c:88:5a:26:dc:5c:80:e6:be:d8:20:99:90:c0: e8:53:86:67:b4:af:d5:a8:ec:c8:42:35:a3:97:c7: bf:2c:95:6e:48:c7:68:be:b5:f6:7b:63:26:2a:eb: 32:fa:2e:e3:62:4c:50:f9:11:7b:80:f0:01:94:ce: ef:c0:83:e7:88:79:e0:77:61:ec:ae:87:23:2b:bb: 57:fa:c3:d0:f3:8f:2d:fa:7c:68:35:f0:64:4c:1c: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:68:58:1C:93:A3:28:27:D9:9E:28:12:89:8B:90:F7:81:93:EB:93 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:84:6a:43:f7:bd:91:3b:c6:ad:a9:4d:a6:3c:e2:54:46:47: 08:df:25:48:aa:d7:8d:5f:08:d4:22:a1:d8:32:9a:f5:89:2a: 42:97:ad:7e:3b:5a:fd:32:f7:87:62:91:f3:9b:82:fe:a4:79: 7f:71:74:d4:52:db:bd:b6:dc:c6:d8:cb:6d:88:30:0d:c5:dd: ba:ab:fc:93:e0:b9:37:a5:86:d5:e1:8c:f1:36:59:45:b7:4b: 3d:65:b9:98:b8:39:85:aa:62:b5:63:52:98:d2:ee:ff:72:8f: bd:05:3a:94:7b:a3:9c:cd:64:2b:3e:97:e7:0e:2f:54:00:da: f2:5d:89:00:bd:f4:61:41:53:e9:fd:a0:ff:34:24:4e:74:8c: 16:2e:53:92:81:ca:b1:2e:2c:8e:27:c3:6b:4f:a0:56:41:49: 9f:b9:3f:62:bd:01:d8:d9:dc:49:7c:f8:66:67:1c:d2:68:fa: fa:1f:06:e6:c3:ca:e1:93:ea:bb:04:5b:67:10:a0:d8:0f:20: 01:47:db:b6:5e:69:0a:7c:a0:58:ff:ca:0b:c5:d7:11:b5:fa: c7:d9:4e:3d:f0:ea:b8:bd:fe:eb:ed:4c:c7:71:46:9a:0a:a6: 9c:d7:6c:f2:6f:c7:c6:3e:3f:bf:77:b9:b3:60:ff:74:f2:bf: b9:ad:f5:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwNDI0MTkwNzIyWhcNMjUwNTAxMTkwNzIyWjAYMRYwFAYD VQQDEw02ODBhOGJlYS1jM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxintszYQPUcNppeq82aZLWYDGJfEnLGM08gv3VOyPhV0TDUMqmj1p1XVz0uj UyqSUoyGRAeDq764JEozWFIAOIAwocyF9Ih/bx+M1nD2Y9Gl3uPTIYfb4B0P3N5n 4lr0I2QjmJ3V/oLHr8ckzrOxXtQ9zTJ4FULCmDnbl/6HS11OKVq3lJf3RehpuWli 7GL9lbg0RA3w8/6wfB8HK4x1bZiSI46SDIhaJtxcgOa+2CCZkMDoU4ZntK/VqOzI QjWjl8e/LJVuSMdovrX2e2MmKusy+i7jYkxQ+RF7gPABlM7vwIPniHngd2Hsrocj K7tX+sPQ848t+nxoNfBkTByQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdoWByT oygn2Z4oEomLkPeBk+uTMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAphGpD972RO8atqU2mPOJURkcI3yVIqteNXwjUIqHYMpr1iSpCl61+ O1r9MveHYpHzm4L+pHl/cXTUUtu9ttzG2MttiDANxd26q/yT4Lk3pYbV4YzxNllF t0s9ZbmYuDmFqmK1Y1KY0u7/co+9BTqUe6OczWQrPpfnDi9UANryXYkAvfRhQVPp /aD/NCROdIwWLlOSgcqxLiyOJ8NrT6BWQUmfuT9ivQHY2dxJfPhmZxzSaPr6Hwbm w8rhk+q7BFtnEKDYDyABR9u2XmkKfKBY/8oLxdcRtfrH2U498Oq4vf7r7UzHcUaa Cqac12zyb8fGPj+/d7mzYP908r+5rfUq -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:50 2025 by rpki-client