$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: U9BFjrrZlN4vPx5TRPJl6JcI0qE3zg8gosMKo3P1ev4= Subject key identifier: 66:C2:95:50:53:DE:87:25:E0:C9:76:85:13:B4:83:63:BB:D1:32:74 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 2559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 254A Signing time: Thu 24 Apr 2025 15:45:57 +0000 Manifest this update: Thu 24 Apr 2025 15:45:56 +0000 Manifest next update: Thu 01 May 2025 15:45:56 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: WS96+ATNFnOuwphuz6OQYXWguVI8Ucn9qqK6uJllss8=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: H+wCANBD5klfwreCxJGeJ4oz5YqLeKbiWBpEUR9/a3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9561 (0x2559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E, serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Validity Not Before: Apr 24 15:45:56 2025 GMT Not After : May 1 15:45:56 2025 GMT Subject: CN=680a5cb4-0a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:3b:e9:27:74:d5:e6:9f:63:6b:16:92:39: 60:82:16:ab:90:f0:4a:b0:17:94:02:fd:cf:ae:0b: 4f:02:01:84:11:0d:d5:4e:d1:c9:2e:ef:62:86:d3: 38:8b:5a:fd:44:8a:f7:4d:a8:d3:ed:bf:c6:9f:92: 9e:d9:6d:2e:8f:77:54:f6:78:33:01:77:e3:b7:33: f0:c3:2d:69:01:78:6d:05:9d:c7:42:7c:cb:53:5e: d4:ee:ce:68:84:69:cc:49:56:61:71:35:97:e5:90: 3a:92:b1:aa:c3:30:59:86:40:d1:88:7f:b0:f4:c4: 3b:d5:c3:2c:3c:c8:26:11:b2:2c:dc:42:52:70:55: 90:fa:bb:2b:e1:17:5c:e6:65:8d:b6:0b:45:a6:cb: 9b:17:8c:79:0f:87:ab:1b:1b:e1:f9:38:90:12:41: a3:a1:80:71:e2:b9:65:d7:ed:0b:c1:25:c0:65:20: 24:93:25:7a:77:fe:3a:6c:66:60:87:76:0e:24:49: 00:70:de:ac:98:57:5e:a0:ec:7b:9f:d3:27:0d:07: a7:9f:15:d7:ee:00:0b:92:6d:6c:60:97:21:71:c5: 97:dc:4e:3d:75:20:ad:15:ec:45:3e:1a:56:14:5b: d8:97:e4:78:e0:60:35:b1:11:74:cb:42:f9:10:1c: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:95:50:53:DE:87:25:E0:C9:76:85:13:B4:83:63:BB:D1:32:74 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e4:02:16:2f:55:8d:c7:25:9a:27:13:94:c3:9a:66:30:a1: bc:ec:e4:a8:73:46:7b:aa:06:15:6a:89:2e:05:74:36:a7:87: d0:04:1c:f4:be:aa:ea:44:85:20:03:51:aa:aa:28:1c:67:9f: 25:4a:b3:a8:ee:92:2c:81:1d:22:d6:89:9b:ff:ac:ac:b7:be: b6:36:b0:bc:b8:16:9d:95:21:e8:9b:f9:77:b2:7e:9b:ac:8b: 24:61:e2:d2:55:1a:76:44:55:27:8f:81:66:ef:db:4d:7e:98: b9:ea:12:c4:c9:98:d6:69:e1:4a:6d:99:fa:11:c4:f4:9a:ef: 42:46:8a:f9:20:5d:ac:ab:dc:18:47:36:88:a8:dd:25:fc:6b: 54:5f:9a:62:1a:e9:9e:c2:4e:12:64:a6:83:56:70:4d:a5:2f: 75:ce:5f:4c:87:6b:bb:d5:0f:8c:88:ab:11:d4:03:86:0c:d5: e6:78:f8:78:cd:36:60:26:bf:f5:f5:64:e5:a0:54:81:3d:7d: c4:48:5c:b9:66:a2:e3:8d:15:cf:14:63:20:f7:f3:4e:9a:8c: d1:50:e4:30:74:c3:16:a2:33:0f:21:3c:b5:4b:8f:29:83:6d: 1b:9f:67:1a:a8:2b:10:36:f4:a7:f9:b7:09:83:e4:58:60:48: 21:9f:f9:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUwNDI0MTU0NTU2WhcNMjUwNTAxMTU0NTU2WjAYMRYwFAYD VQQDEw02ODBhNWNiNC0wYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHo76Sd01eafY2sWkjlggharkPBKsBeUAv3PrgtPAgGEEQ3VTtHJLu9ihtM4 i1r9RIr3TajT7b/Gn5Ke2W0uj3dU9ngzAXfjtzPwwy1pAXhtBZ3HQnzLU17U7s5o hGnMSVZhcTWX5ZA6krGqwzBZhkDRiH+w9MQ71cMsPMgmEbIs3EJScFWQ+rsr4Rdc 5mWNtgtFpsubF4x5D4erGxvh+TiQEkGjoYBx4rll1+0LwSXAZSAkkyV6d/46bGZg h3YOJEkAcN6smFdeoOx7n9MnDQennxXX7gALkm1sYJchccWX3E49dSCtFexFPhpW FFvYl+R44GA1sRF0y0L5EBzaFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbClVBT 3ocl4Ml2hRO0g2O70TJ0MB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa5AIWL1WNxyWaJxOUw5pmMKG87OSoc0Z7qgYVaokuBXQ2p4fQBBz0 vqrqRIUgA1GqqigcZ58lSrOo7pIsgR0i1omb/6yst762NrC8uBadlSHom/l3sn6b rIskYeLSVRp2RFUnj4Fm79tNfpi56hLEyZjWaeFKbZn6EcT0mu9CRor5IF2sq9wY RzaIqN0l/GtUX5piGumewk4SZKaDVnBNpS91zl9Mh2u71Q+MiKsR1AOGDNXmePh4 zTZgJr/19WTloFSBPX3ESFy5ZqLjjRXPFGMg9/NOmozRUOQwdMMWojMPITy1S48p g20bn2caqCsQNvSn+bcJg+RYYEghn/m8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:02 2025 by rpki-client