$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: 3N0b475QO0KuSOAIMxyd9PEUM3SrZAaLVHQ5IwlRdDA= Subject key identifier: F8:28:7E:9E:66:68:33:D4:18:C2:39:2D:76:61:35:34:B3:FC:C2:46 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0222 Signing time: Fri 25 Apr 2025 01:44:04 +0000 Manifest this update: Fri 25 Apr 2025 01:44:04 +0000 Manifest next update: Fri 02 May 2025 01:44:04 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: 32pJL01+WCIzew+S63Zobzk0bWQBRUbafO6QKyPRA5I=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Apr 25 01:44:04 2025 GMT Not After : May 2 01:44:04 2025 GMT Subject: CN=680ae8e4-bd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:ac:7f:eb:db:65:d5:67:52:84:18:13:71: 42:70:e7:a6:22:c6:ad:2f:f0:6f:46:96:f5:fa:33: 5f:e7:1e:d3:99:56:bd:82:eb:54:03:30:f6:03:f3: 35:24:1c:9b:e1:b9:0b:5f:b2:34:0d:3a:6f:a7:0c: 1e:19:56:85:46:93:48:d6:ed:3c:a3:f4:3d:fd:e7: 48:67:7c:6f:52:e8:e8:f5:af:8b:f2:5d:7f:28:e2: e3:05:4f:52:c1:52:98:ea:59:10:83:09:35:1e:81: 57:5f:d4:fe:b6:37:fd:a1:70:1f:9e:40:d2:35:b2: c2:2c:22:53:45:30:10:51:f1:5d:1d:3f:52:05:2f: 08:70:5b:62:21:3c:b8:e3:84:ab:e6:72:ba:7b:ec: 40:9b:20:01:af:c9:59:dc:01:90:de:bb:2f:f7:d8: 47:df:17:7f:e6:57:48:79:b9:c3:ac:f1:2a:a4:de: 92:1e:63:3c:f1:cc:16:9b:8b:98:60:8d:2e:71:a2: bf:83:c1:44:10:fa:b7:59:d2:b9:d5:f4:a1:0d:92: a4:8d:5f:6b:66:25:7d:96:95:13:ff:d6:50:f3:d8: bb:e0:42:2e:96:61:dd:51:ca:38:c8:bc:70:a0:3a: 38:29:06:a9:16:40:ac:6e:3d:88:9d:ac:6c:f9:26: ab:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:7E:9E:66:68:33:D4:18:C2:39:2D:76:61:35:34:B3:FC:C2:46 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:03:12:cd:c5:4c:87:e4:b4:06:e6:e2:87:84:85:61:9d:e3: 17:99:99:36:6b:97:a3:1f:fe:3f:37:c9:cb:3a:85:56:c2:ab: 08:3e:41:b9:e0:97:0b:cb:79:d4:05:4e:e9:dd:6b:8d:47:ac: e6:53:c3:e1:3d:7b:b1:c2:6d:6d:41:d4:f0:7b:02:de:84:98: f6:40:97:02:77:db:aa:29:40:f4:14:6f:e4:b8:3f:e5:ee:aa: d4:30:16:49:b6:c7:3d:19:86:62:89:c3:5f:88:fa:7c:ca:90: 36:21:ef:67:06:dd:9c:9e:50:f6:b8:0b:f0:74:7b:0b:d0:fa: ed:04:73:10:7e:50:36:f1:2a:99:e4:b6:1a:ce:0c:20:99:cf: 40:9d:45:dd:6d:97:b4:3c:ac:1b:42:03:b6:1d:06:db:25:ba: d3:fc:2b:a2:a9:6e:8c:fc:13:0a:15:55:f6:7c:eb:37:25:bb: 99:f2:5e:a0:c3:c1:66:f8:f7:d2:06:97:20:e0:7e:0b:bc:b7: da:58:4a:8b:c2:0b:e4:33:00:2c:42:6d:7e:74:58:dd:71:fb: ac:30:bc:8d:f2:d6:d3:de:69:9a:73:42:68:a6:88:ee:ab:ab: 30:d9:c3:dd:81:f8:1a:1d:82:22:bf:72:1d:ac:3f:95:4e:2b: a3:93:5f:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwNDI1MDE0NDA0WhcNMjUwNTAyMDE0NDA0WjAYMRYwFAYD VQQDEw02ODBhZThlNC1iZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLisf+vbZdVnUoQYE3FCcOemIsatL/BvRpb1+jNf5x7TmVa9gutUAzD2A/M1 JByb4bkLX7I0DTpvpwweGVaFRpNI1u08o/Q9/edIZ3xvUujo9a+L8l1/KOLjBU9S wVKY6lkQgwk1HoFXX9T+tjf9oXAfnkDSNbLCLCJTRTAQUfFdHT9SBS8IcFtiITy4 44Sr5nK6e+xAmyABr8lZ3AGQ3rsv99hH3xd/5ldIebnDrPEqpN6SHmM88cwWm4uY YI0ucaK/g8FEEPq3WdK51fShDZKkjV9rZiV9lpUT/9ZQ89i74EIulmHdUco4yLxw oDo4KQapFkCsbj2Inaxs+SarKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgofp5m aDPUGMI5LXZhNTSz/MJGMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOAxLNxUyH5LQG5uKHhIVhneMXmZk2a5ejH/4/N8nLOoVWwqsIPkG5 4JcLy3nUBU7p3WuNR6zmU8PhPXuxwm1tQdTwewLehJj2QJcCd9uqKUD0FG/kuD/l 7qrUMBZJtsc9GYZiicNfiPp8ypA2Ie9nBt2cnlD2uAvwdHsL0PrtBHMQflA28SqZ 5LYazgwgmc9AnUXdbZe0PKwbQgO2HQbbJbrT/CuiqW6M/BMKFVX2fOs3JbuZ8l6g w8Fm+PfSBpcg4H4LvLfaWEqLwgvkMwAsQm1+dFjdcfusMLyN8tbT3mmac0Jopoju q6sw2cPdgfgaHYIiv3IdrD+VTiujk19t -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:15 2025 by rpki-client