$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft File: LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json) Hash identifier: JJ2nYcFcvGCIP2CEh3IcMaJxDLxfj1N3h0l0jUG7D00= Subject key identifier: C8:65:23:3A:81:C9:0C:E9:54:C2:B0:BE:9C:3D:DA:50:12:BB:AA:44 Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 Certificate issuer: /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft Manifest number: 01B6 Signing time: Fri 25 Apr 2025 02:18:25 +0000 Manifest this update: Fri 25 Apr 2025 02:18:24 +0000 Manifest next update: Fri 02 May 2025 02:18:24 +0000 Files and hashes: 1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: vE/uQje2lhSTj3UDB00aibyd0SHqOL7Q7gJpHeuM2do=) 2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6 Validity Not Before: Apr 25 02:18:24 2025 GMT Not After : May 2 02:18:24 2025 GMT Subject: CN=680af0f1-9e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:9b:0f:ee:8a:b2:10:94:53:62:06:f8:ac: 6b:08:0e:d7:87:bb:8d:c8:31:ce:38:1d:27:aa:c6: 45:95:6d:d0:a5:fa:9a:21:c6:cb:e6:c7:8f:8d:b9: bd:bd:69:32:5c:22:fc:11:4e:48:bb:51:d5:94:e3: 8e:16:8a:f3:0c:25:4a:5c:26:ef:aa:19:d1:f5:af: 81:cd:43:3a:79:12:cc:a0:ad:5f:b8:0d:06:6e:df: dd:78:f1:91:ce:55:29:2e:e8:2e:2f:32:e8:bf:f1: 93:68:66:52:1e:13:ea:a5:b2:ea:54:1b:45:dc:56: c4:06:57:e9:84:c7:49:5d:10:65:f2:bb:de:07:31: 4a:5e:0f:01:a5:19:7c:ac:47:87:e7:2f:f0:b8:7a: dc:69:79:92:13:65:04:2d:0d:fd:fd:28:ae:f1:89: 25:43:ee:b2:05:ef:66:a8:23:a0:5b:55:35:c0:4c: 7e:44:6c:1e:ed:ce:66:d6:be:a0:6e:27:95:49:7d: 8c:62:0f:fb:d4:71:20:3d:8f:4b:5a:d8:36:06:a8: 06:30:ed:f8:20:fb:5e:a4:53:fa:2f:a3:7e:f0:ca: 81:d1:bd:8e:d8:03:97:82:db:e2:7f:fc:b7:84:58: 1e:68:a9:43:26:be:90:ef:3d:4b:af:a3:d2:26:81: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:65:23:3A:81:C9:0C:E9:54:C2:B0:BE:9C:3D:DA:50:12:BB:AA:44 X509v3 Authority Key Identifier: keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:07:32:e5:9e:cf:bc:54:7b:35:02:2e:d2:f0:83:a2:1f: 63:3c:8b:25:dc:db:17:12:e6:29:fd:b0:e6:a0:6d:f0:94:c2: 0f:2e:e0:b1:a2:3a:89:f1:2f:52:bc:17:d0:7d:16:c6:f4:6a: a2:36:35:7e:53:e1:e1:64:ea:56:99:f9:e9:e0:38:65:ed:bc: 8c:96:2e:e8:16:73:44:e7:5c:bd:a4:c6:9b:37:5e:6e:59:8f: 6f:1c:3d:0d:a7:bb:b5:ea:d0:4c:53:fc:6f:16:1b:b6:a9:de: c8:57:e6:be:01:01:0e:79:2d:ef:69:6d:1f:d2:12:74:9e:92: 4e:a8:d1:ae:3d:8b:35:92:94:60:f0:f5:60:7b:e8:08:d5:c4: 42:e4:f7:9c:25:f0:79:cb:4f:72:d7:06:5d:4a:0b:90:dd:90: f0:a9:8c:db:69:35:cb:bf:c6:e4:be:3a:ca:c2:65:94:a4:b6: d5:12:2d:62:6a:7d:c2:ec:42:cf:65:10:27:59:77:66:27:1e: a1:c4:64:b1:29:1b:89:dd:96:e4:67:76:93:36:5d:0c:76:3e: 16:d8:4f:02:c1:18:b4:c8:c7:94:c6:dc:53:74:4c:9d:ec:59: 1c:a0:ac:47:d7:35:d9:58:53:22:78:28:ae:63:e1:d0:52:d2: ef:54:94:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVENTIxMTAvBgNVBAUTKDJFNzFCOEJBNjMwNUZGRDQ4QzEzMUQwODYwQUYyQzFB Q0Y2RDIyQjYwHhcNMjUwNDI1MDIxODI0WhcNMjUwNTAyMDIxODI0WjAYMRYwFAYD VQQDEw02ODBhZjBmMS05ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02abD+6KshCUU2IG+KxrCA7Xh7uNyDHOOB0nqsZFlW3QpfqaIcbL5sePjbm9 vWkyXCL8EU5Iu1HVlOOOForzDCVKXCbvqhnR9a+BzUM6eRLMoK1fuA0Gbt/dePGR zlUpLuguLzLov/GTaGZSHhPqpbLqVBtF3FbEBlfphMdJXRBl8rveBzFKXg8BpRl8 rEeH5y/wuHrcaXmSE2UELQ39/Siu8YklQ+6yBe9mqCOgW1U1wEx+RGwe7c5m1r6g bieVSX2MYg/71HEgPY9LWtg2BqgGMO34IPtepFP6L6N+8MqB0b2O2AOXgtvif/y3 hFgeaKlDJr6Q7z1Lr6PSJoFL8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhlIzqB yQzpVMKwvpw92lASu6pEMB8GA1UdIwQYMBaAFC5xuLpjBf/UjBMdCGCvLBrPbSK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUQ1Mi82MTJCNjdBQzg0 RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85U01FeDBJWUs4c0dzOXRJ clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuRzR1bU1GXzlTTUV4MElZSzhzR3M5dElyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUQ1Mi82MTJCNjdBQzg0RkExMUVEODBBQzRFMTBDNEY5QUUwMi9Mbkc0dW1NRl85 U01FeDBJWUs4c0dzOXRJclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzwAcy5Z7PvFR7NQIu0vCDoh9jPIsl3NsXEuYp/bDmoG3wlMIPLuCx ojqJ8S9SvBfQfRbG9GqiNjV+U+HhZOpWmfnp4Dhl7byMli7oFnNE51y9pMabN15u WY9vHD0Np7u16tBMU/xvFhu2qd7IV+a+AQEOeS3vaW0f0hJ0npJOqNGuPYs1kpRg 8PVge+gI1cRC5PecJfB5y09y1wZdSguQ3ZDwqYzbaTXLv8bkvjrKwmWUpLbVEi1i an3C7ELPZRAnWXdmJx6hxGSxKRuJ3ZbkZ3aTNl0Mdj4W2E8CwRi0yMeUxtxTdEyd 7FkcoKxH1zXZWFMieCiuY+HQUtLvVJT8 -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:17 2025 by rpki-client