$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: /DqrNfClg3ZIq83yY70TNPqb6W3gG18uNhf1s4It2aA= Subject key identifier: 27:D1:B0:A8:28:01:9C:1C:FC:A1:98:EF:8F:9A:5B:DB:28:BD:C5:AB Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0A79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0A65 Signing time: Thu 24 Apr 2025 19:31:47 +0000 Manifest this update: Thu 24 Apr 2025 19:31:46 +0000 Manifest next update: Thu 01 May 2025 19:31:46 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: CIuSke0ED9hIoayHJWbpAIHsBYe5IvbFVMIB0fsNVzE=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: 5TpXg41XhGRSVvUHK5XRVEgpyHLz9AA+kgJTUOprqi0=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: TRrnPYrOalEPWz9T5KXn22gUrdAbwDlWLGBn2HbQ6ag=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 2Lal6Hihil8XYkgrg/1JrJLddglMRFIWSjh8Zg5doPM=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: 29WR9bK+1J7teRj22ZLgNx6ODw6+LHNBzuwuJrvhB0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Apr 24 19:31:46 2025 GMT Not After : May 1 19:31:46 2025 GMT Subject: CN=680a91a3-b422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:09:e6:56:c5:50:98:d7:58:2c:77:e1:af: bd:2b:17:8e:05:6a:ef:b8:8c:91:84:7e:56:8a:fd: 23:df:de:db:5d:b9:1b:47:62:e4:e5:f4:68:46:0e: 1b:eb:2d:ca:e0:75:42:39:61:d1:f5:37:71:da:9a: eb:de:0a:ae:ad:1a:6d:9c:ac:32:87:32:4b:36:9a: 48:67:75:cc:79:81:ec:32:fa:db:f8:f7:76:3a:f0: fe:ff:e0:2a:18:7f:39:d3:f5:0a:24:78:59:81:24: 18:f8:e8:88:f0:a7:f0:b9:c1:67:83:53:6d:e1:89: 2b:42:89:19:77:89:b0:af:c0:b1:c5:89:82:3c:97: 1b:99:ae:1c:31:58:e2:bb:e5:58:9c:9b:71:61:5e: c3:53:19:ca:1b:a5:89:e9:a7:d5:79:0c:c5:44:93: 26:d5:5b:4c:69:fa:9a:b1:e5:09:c4:89:47:02:08: 62:df:75:39:98:e5:1a:40:c5:3f:b1:82:ae:de:a4: 0a:8b:da:f8:59:14:70:3e:d0:b3:9a:ab:d0:c8:db: 63:a1:8e:77:58:d8:21:c8:a5:77:70:01:00:b2:f7: be:cb:64:2e:49:52:59:7a:f7:d0:45:39:21:3c:d5: c2:0c:f4:28:98:58:ca:0c:b0:89:25:46:c9:a6:fd: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:B0:A8:28:01:9C:1C:FC:A1:98:EF:8F:9A:5B:DB:28:BD:C5:AB X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d4:68:03:cc:d8:29:53:1a:71:c0:e8:99:78:ce:1a:4c:03: 0a:c4:6d:c0:f3:b3:d7:e2:f4:3f:a7:9c:b6:5a:27:b2:19:00: b0:b3:04:9d:ca:11:a3:0c:bb:88:07:a7:0e:29:e4:f7:cd:1e: 27:c4:4b:0d:b4:ec:be:a8:5e:36:c2:ea:e1:e2:ca:b3:6d:6e: 1e:0c:f7:1c:62:5d:13:5c:9d:9c:5e:7f:d0:cc:06:90:13:6d: 46:50:fd:07:09:0c:82:58:19:be:00:83:ce:49:67:d4:17:fb: ea:38:3e:c2:ef:3e:e5:ba:97:8f:7b:2b:ba:35:35:0e:2c:cc: 09:39:4c:89:bc:e0:b8:a5:dc:09:df:cb:89:f5:9b:db:ec:30: 05:ef:91:95:06:04:61:9b:e2:b6:28:2a:20:6d:e5:d5:75:49: 1d:2b:ca:0d:9a:2c:ee:2d:33:3a:95:b3:9c:7b:ad:e6:e2:af: 82:d0:fd:0c:dc:9b:6e:a2:f9:68:67:59:8d:3b:44:42:51:54: 42:05:70:df:45:fd:10:e2:d7:4e:33:c2:90:9c:2a:a0:f1:00: 0f:27:8b:38:03:68:5a:d0:8f:c6:3f:18:1c:51:f6:a1:ef:ce: 28:7b:a9:53:1e:0b:2f:5d:7e:09:e6:d2:ea:6d:d2:e5:13:21: d7:83:22:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwNDI0MTkzMTQ2WhcNMjUwNTAxMTkzMTQ2WjAYMRYwFAYD VQQDEw02ODBhOTFhMy1iNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRAJ5lbFUJjXWCx34a+9KxeOBWrvuIyRhH5Wiv0j397bXbkbR2Lk5fRoRg4b 6y3K4HVCOWHR9Tdx2prr3gqurRptnKwyhzJLNppIZ3XMeYHsMvrb+Pd2OvD+/+Aq GH850/UKJHhZgSQY+OiI8KfwucFng1Nt4YkrQokZd4mwr8CxxYmCPJcbma4cMVji u+VYnJtxYV7DUxnKG6WJ6afVeQzFRJMm1VtMafqaseUJxIlHAghi33U5mOUaQMU/ sYKu3qQKi9r4WRRwPtCzmqvQyNtjoY53WNghyKV3cAEAsve+y2QuSVJZevfQRTkh PNXCDPQomFjKDLCJJUbJpv2jfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfRsKgo AZwc/KGY74+aW9sovcWrMB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv1GgDzNgpUxpxwOiZeM4aTAMKxG3A87PX4vQ/p5y2WieyGQCwswSd yhGjDLuIB6cOKeT3zR4nxEsNtOy+qF42wurh4sqzbW4eDPccYl0TXJ2cXn/QzAaQ E21GUP0HCQyCWBm+AIPOSWfUF/vqOD7C7z7lupePeyu6NTUOLMwJOUyJvOC4pdwJ 38uJ9Zvb7DAF75GVBgRhm+K2KCogbeXVdUkdK8oNmizuLTM6lbOce63m4q+C0P0M 3JtuovloZ1mNO0RCUVRCBXDfRf0Q4tdOM8KQnCqg8QAPJ4s4A2ha0I/GPxgcUfah 784oe6lTHgsvXX4J5tLqbdLlEyHXgyIf -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:53 2025 by rpki-client