$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft File: LzabRI0hcVlrosk82-JY6vMxdZQ.mft (raw, json) Hash identifier: j7MJ3G1r5Tgn/hURqkN4V5AB+1AANSYSIuHSjEXr2+E= Subject key identifier: 95:8E:9E:A5:F4:84:4D:4F:5E:22:52:32:BB:99:C6:83:CE:4E:8F:F4 Authority key identifier: 2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 Certificate issuer: /CN=A9161A5A/serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft Manifest number: 069D Signing time: Thu 24 Apr 2025 22:01:52 +0000 Manifest this update: Thu 24 Apr 2025 22:01:52 +0000 Manifest next update: Thu 01 May 2025 22:01:52 +0000 Files and hashes: 1: LzabRI0hcVlrosk82-JY6vMxdZQ.crl (hash: WUVJiRpxPLdiGdsD6WkYShEkkulBlkc+CEiFjnbRB8U=) 2: 79D611D265E711EBB6FD8A0DC4F9AE02.roa (hash: 8jITrnqODr3hbw+6QboJeBK8U7SJ4xuwPGHj3X5tTD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A5A, serialNumber=2F369B448D2171596BA2C93CDBE258EAF3317594 Validity Not Before: Apr 24 22:01:52 2025 GMT Not After : May 1 22:01:52 2025 GMT Subject: CN=680ab4d0-042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:84:03:08:3b:ca:96:14:b1:1a:ad:26:44: b9:15:b1:3a:9f:43:dd:7b:3f:0a:5a:2c:a3:9c:06: eb:1e:8f:ce:da:95:f6:7f:de:e7:c0:5a:cb:61:b5: 33:a8:14:f4:22:fe:a1:64:0b:31:ab:da:8c:de:d2: 0f:23:6b:89:1d:56:a6:9c:73:72:0b:0e:27:b7:d9: 8b:7b:cf:a5:52:a9:13:db:c0:6c:81:c2:37:98:94: e9:10:ad:b7:ce:e8:25:97:cb:73:e8:6b:15:cb:b9: 5b:88:b2:30:09:ce:15:a6:ed:c4:1d:39:bd:81:25: 15:7a:04:ae:49:24:24:b2:bb:42:0c:49:e5:f1:78: 48:0a:23:3b:c0:0f:6f:0c:10:bb:63:76:6d:4a:be: 85:fc:32:3b:fc:11:8f:08:97:96:70:ea:1c:4a:a6: ef:48:05:31:5d:d5:e6:df:60:5c:9e:77:41:67:77: 95:c8:a2:42:04:4e:ad:bd:12:4c:4c:f2:fc:90:61: 5d:83:01:85:23:22:5a:19:eb:bb:58:17:0a:29:52: a6:29:e3:da:d2:05:f6:38:b5:3d:74:e9:9d:91:15: ef:e0:1b:6e:71:49:3d:a0:59:d3:3b:8d:56:d8:6d: 77:e0:c2:6b:14:8c:f2:07:8e:73:f2:7a:c1:13:06: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:9E:A5:F4:84:4D:4F:5E:22:52:32:BB:99:C6:83:CE:4E:8F:F4 X509v3 Authority Key Identifier: keyid:2F:36:9B:44:8D:21:71:59:6B:A2:C9:3C:DB:E2:58:EA:F3:31:75:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LzabRI0hcVlrosk82-JY6vMxdZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A5A/B8BB568E65E511EBA25F920BC4F9AE02/LzabRI0hcVlrosk82-JY6vMxdZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:85:b3:37:0b:a1:41:06:d9:bf:dc:e4:05:df:1a:5f:c1:49: 92:88:de:e5:7a:4c:37:79:81:9a:7a:ba:f6:88:7e:db:87:b1: 4f:ba:1a:c6:ff:f1:b1:2d:6f:0d:dc:1e:10:95:3e:e6:b5:15: 03:bb:d7:04:cb:42:38:9f:55:22:d6:ac:85:85:a9:25:e6:54: 7d:28:9c:e9:83:53:ce:4a:7b:b5:f8:3a:78:88:60:69:74:08: 88:3c:e4:3d:5c:37:c7:df:ea:06:ce:3f:f0:ae:a2:af:bf:7a: bf:cb:07:2a:d9:5d:06:e6:f5:da:a8:8c:3c:a4:df:50:4c:2e: 0c:6f:70:5b:b2:9b:49:8e:79:d8:10:b4:21:c9:98:50:34:b0: a2:b8:e9:05:36:0c:5c:d9:49:be:c4:63:5f:e0:03:90:3a:f6: fb:77:80:df:b8:fc:46:e3:63:2a:c6:1c:d1:49:68:7e:66:d8: 33:90:85:04:46:7b:84:c9:16:a0:23:48:de:5f:e8:d8:b6:5f: bc:ad:86:a0:83:e5:67:62:d5:4e:b0:fd:63:3f:37:7c:e7:ac: 01:00:1d:f1:2b:03:08:96:28:2a:dc:84:2c:19:e6:f3:a0:8a: f0:e7:6d:04:70:b1:47:9e:77:de:18:d5:26:53:e1:60:e2:13: c0:3d:5a:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNUExMTAvBgNVBAUTKDJGMzY5QjQ0OEQyMTcxNTk2QkEyQzkzQ0RCRTI1OEVB RjMzMTc1OTQwHhcNMjUwNDI0MjIwMTUyWhcNMjUwNTAxMjIwMTUyWjAYMRYwFAYD VQQDEw02ODBhYjRkMC0wNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2iEAwg7ypYUsRqtJkS5FbE6n0Pdez8KWiyjnAbrHo/O2pX2f97nwFrLYbUz qBT0Iv6hZAsxq9qM3tIPI2uJHVamnHNyCw4nt9mLe8+lUqkT28BsgcI3mJTpEK23 zugll8tz6GsVy7lbiLIwCc4Vpu3EHTm9gSUVegSuSSQksrtCDEnl8XhICiM7wA9v DBC7Y3ZtSr6F/DI7/BGPCJeWcOocSqbvSAUxXdXm32BcnndBZ3eVyKJCBE6tvRJM TPL8kGFdgwGFIyJaGeu7WBcKKVKmKePa0gX2OLU9dOmdkRXv4BtucUk9oFnTO41W 2G134MJrFIzyB45z8nrBEwYR4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWOnqX0 hE1PXiJSMruZxoPOTo/0MB8GA1UdIwQYMBaAFC82m0SNIXFZa6LJPNviWOrzMXWU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1QS9COEJCNTY4RTY1 RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNWbHJvc2s4Mi1KWTZ2TXhk WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6YWJSSTBoY1Zscm9zazgyLUpZNnZNeGRaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUE1QS9COEJCNTY4RTY1RTUxMUVCQTI1RjkyMEJDNEY5QUUwMi9MemFiUkkwaGNW bHJvc2s4Mi1KWTZ2TXhkWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxhbM3C6FBBtm/3OQF3xpfwUmSiN7lekw3eYGaerr2iH7bh7FPuhrG //GxLW8N3B4QlT7mtRUDu9cEy0I4n1Ui1qyFhakl5lR9KJzpg1POSnu1+Dp4iGBp dAiIPOQ9XDfH3+oGzj/wrqKvv3q/ywcq2V0G5vXaqIw8pN9QTC4Mb3BbsptJjnnY ELQhyZhQNLCiuOkFNgxc2Um+xGNf4AOQOvb7d4DfuPxG42MqxhzRSWh+ZtgzkIUE RnuEyRagI0jeX+jYtl+8rYagg+VnYtVOsP1jPzd856wBAB3xKwMIligq3IQsGebz oIrw520EcLFHnnfeGNUmU+Fg4hPAPVqW -----END CERTIFICATE-----Generated at Sat Apr 26 17:14:02 2025 by rpki-client