$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft File: LOCE4B2sa01jSTjXbOraWWNVvVM.mft (raw, json) Hash identifier: G3ze11YbDD1RSb16+h78xNyt5Y2QpCBPrFhF5xk9uFg= Subject key identifier: CB:60:42:23:2E:8B:C6:5F:05:18:48:B7:2E:49:3E:E1:32:79:1F:7C Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft Manifest number: 022B Signing time: Fri 25 Apr 2025 01:42:00 +0000 Manifest this update: Fri 25 Apr 2025 01:42:00 +0000 Manifest next update: Fri 02 May 2025 01:42:00 +0000 Files and hashes: 1: LOCE4B2sa01jSTjXbOraWWNVvVM.crl (hash: DXtLSeRMKTk8s4cxoAVTO0Hv/TGsdTb6ixV2n4FSkDo=) 2: 028640A8242B11ED9547B486C4F9AE02.roa (hash: DITeel3omkt/jAmQ2Y46ZSrzxcvWz4LWzu2U9pUQbEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53 Validity Not Before: Apr 25 01:42:00 2025 GMT Not After : May 2 01:42:00 2025 GMT Subject: CN=680ae868-af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:08:0b:ea:d0:2e:43:e4:8c:fe:54:24:37: ab:19:35:cc:37:c1:ce:fb:55:b9:7e:42:65:fb:78: 6e:f4:4e:34:1e:3e:61:51:b6:4d:b6:46:af:83:d8: 74:52:14:e8:80:63:5a:55:d5:fa:8f:f5:ad:57:16: 01:9f:46:0d:b4:bc:78:2e:9a:80:d7:ce:a2:a9:c6: c9:76:1c:03:04:d8:f5:25:dd:00:5b:79:f2:2c:df: 97:09:c4:60:fc:09:f5:1b:bc:16:11:ae:19:8f:97: e3:94:31:16:06:67:c5:e8:ad:0d:88:9c:72:07:8a: 39:92:ac:c3:08:c5:66:53:9c:cc:c8:54:96:82:95: 79:e6:69:25:23:f7:7a:05:2b:03:83:f9:f6:9a:e5: 1b:18:d0:44:8e:1e:fb:41:28:03:ec:9a:03:41:88: 35:36:88:2a:3e:c6:d3:3a:7e:29:22:7b:a1:c9:fe: cd:95:5d:f4:75:f6:91:60:9f:e5:f9:dd:59:b4:7e: 0a:88:a6:02:ed:b2:26:d8:6a:f6:66:5c:8d:2d:29: 69:49:89:fb:ba:44:b5:5a:e6:02:a4:cd:e3:b1:6c: fb:66:02:44:94:48:7c:14:65:73:22:40:f0:1a:a4: 82:e3:74:98:be:da:78:9b:c0:1e:50:ba:ac:08:46: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:60:42:23:2E:8B:C6:5F:05:18:48:B7:2E:49:3E:E1:32:79:1F:7C X509v3 Authority Key Identifier: keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c3:87:05:40:93:1f:c0:ea:96:31:a8:f2:e4:bf:cc:20:63: d9:64:1a:98:73:66:fa:c0:9b:05:a2:0c:d0:2c:8f:22:9a:73: b0:8c:78:4f:8e:48:fe:15:a8:26:da:9e:af:4f:89:32:9e:2f: 38:31:e0:a1:01:58:d4:97:a2:22:94:37:35:b0:82:fd:b8:cc: a9:3f:46:b6:b1:c2:39:a2:02:12:ea:59:09:58:ce:75:0a:9d: 8a:ff:99:cd:e5:8b:43:9c:89:74:75:fa:bf:df:6c:45:9c:60: 6c:9c:61:8d:92:43:12:3d:fb:8b:08:2c:a1:8a:fe:a4:47:d1: b7:2f:42:58:c0:c5:8c:a5:f9:63:53:3e:fa:56:ed:61:58:ec: 9f:8e:80:1c:9d:20:c9:bf:ff:cb:1c:50:f5:9b:08:92:fb:34: a0:c1:d1:ce:c9:e2:6b:f9:33:f6:c2:dd:64:58:16:b7:fe:0e: 7a:21:8e:2b:cd:b6:fb:9d:1e:ba:30:f2:b3:93:00:e1:f2:79: cc:3f:0a:30:21:dc:bb:6e:39:51:85:db:24:b7:17:da:2b:7b: bb:52:0e:45:62:a4:28:34:07:b9:23:5a:4a:70:ad:84:6b:11: 97:ea:d0:81:9c:bb:2c:16:c6:38:30:ac:7a:b7:3c:a4:a3:3f: ce:c1:dd:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBOEYxMTAvBgNVBAUTKDJDRTA4NEUwMURBQzZCNEQ2MzQ5MzhENzZDRUFEQTU5 NjM1NUJENTMwHhcNMjUwNDI1MDE0MjAwWhcNMjUwNTAyMDE0MjAwWjAYMRYwFAYD VQQDEw02ODBhZTg2OC1hZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn4IC+rQLkPkjP5UJDerGTXMN8HO+1W5fkJl+3hu9E40Hj5hUbZNtkavg9h0 UhTogGNaVdX6j/WtVxYBn0YNtLx4LpqA186iqcbJdhwDBNj1Jd0AW3nyLN+XCcRg /An1G7wWEa4Zj5fjlDEWBmfF6K0NiJxyB4o5kqzDCMVmU5zMyFSWgpV55mklI/d6 BSsDg/n2muUbGNBEjh77QSgD7JoDQYg1NogqPsbTOn4pInuhyf7NlV30dfaRYJ/l +d1ZtH4KiKYC7bIm2Gr2ZlyNLSlpSYn7ukS1WuYCpM3jsWz7ZgJElEh8FGVzIkDw GqSC43SYvtp4m8AeULqsCEYGlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtgQiMu i8ZfBRhIty5JPuEyeR98MB8GA1UdIwQYMBaAFCzghOAdrGtNY0k412zq2lljVb1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE4Ri9FM0EzNUJCNDI0 MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2EwMWpTVGpYYk9yYVdXTlZ2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPQ0U0QjJzYTAxalNUalhiT3JhV1dOVnZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE4Ri9FM0EzNUJCNDI0MjgxMUVEOEZEMjRDODZDNEY5QUUwMi9MT0NFNEIyc2Ew MWpTVGpYYk9yYVdXTlZ2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEw4cFQJMfwOqWMajy5L/MIGPZZBqYc2b6wJsFogzQLI8imnOwjHhP jkj+Fagm2p6vT4kyni84MeChAVjUl6IilDc1sIL9uMypP0a2scI5ogIS6lkJWM51 Cp2K/5nN5YtDnIl0dfq/32xFnGBsnGGNkkMSPfuLCCyhiv6kR9G3L0JYwMWMpflj Uz76Vu1hWOyfjoAcnSDJv//LHFD1mwiS+zSgwdHOyeJr+TP2wt1kWBa3/g56IY4r zbb7nR66MPKzkwDh8nnMPwowIdy7bjlRhdsktxfaK3u7Ug5FYqQoNAe5I1pKcK2E axGX6tCBnLssFsY4MKx6tzykoz/Owd1C -----END CERTIFICATE-----Generated at Sat Apr 26 04:57:18 2025 by rpki-client