$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: H7U72c9CcGUmKoDfT9WkcoXJEyJjIoktqAYvo3i92IY= Subject key identifier: 1E:3D:0D:D8:D1:4C:C8:BC:5D:2C:55:8B:63:3B:CD:B6:AE:F3:78:5F Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 139E Signing time: Thu 24 Apr 2025 18:38:53 +0000 Manifest this update: Thu 24 Apr 2025 18:38:53 +0000 Manifest next update: Thu 01 May 2025 18:38:53 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: mUM2nfjpvVzeEwZGAvGWreRFqFc/o2rBZOzFEpuIzjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Apr 24 18:38:53 2025 GMT Not After : May 1 18:38:53 2025 GMT Subject: CN=680a853d-9ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:4b:93:d2:77:3c:78:c3:42:e1:06:2c:d7: 7e:e6:eb:b7:3e:45:01:b1:ad:ce:e7:46:8e:41:a4: 77:5c:e5:ed:55:f7:7d:b8:a7:4a:81:08:bf:16:1e: dd:93:fd:e4:ee:29:fa:4d:5c:60:3f:db:b3:ec:2a: e4:14:ff:fd:5f:5a:7e:25:1f:a1:ab:ee:17:17:f2: f4:26:e8:1a:1e:12:24:3b:9d:e3:60:0e:4d:f8:6f: ac:1c:a1:57:ad:29:bc:1b:f0:b5:c3:23:45:99:3b: 7c:c9:42:6c:5e:bf:89:38:c8:7d:fd:fe:ce:a1:58: c6:a9:45:d0:cc:dd:98:07:18:3b:02:7f:4c:4d:2b: 01:cf:d6:0f:3d:f9:ff:12:be:85:1e:d7:8e:bd:87: de:7d:af:26:f2:37:1e:18:b5:2e:b8:97:3c:81:5f: c5:aa:2c:85:7d:34:9e:bc:b8:b9:fb:97:c1:fb:2e: 24:a2:72:46:f4:87:8c:82:30:a1:13:d4:d7:b7:61: 79:de:86:ac:1c:a3:cb:2b:e6:38:b5:fe:ff:5e:fe: 94:87:58:da:d8:76:b5:d9:37:4e:0c:4e:c8:27:dc: 57:de:9d:42:c6:d4:e8:d6:7e:94:a9:ec:e9:60:79: 6b:47:4c:56:c7:04:80:f2:8e:f7:e9:f6:e0:27:58: 6d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:0D:D8:D1:4C:C8:BC:5D:2C:55:8B:63:3B:CD:B6:AE:F3:78:5F X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:6b:4d:27:f1:c7:ee:29:3e:15:47:11:20:9e:9a:80:4b:78: b5:4a:ff:29:ba:4a:86:74:e9:55:ab:ff:39:9c:e1:67:37:54: 9c:20:4c:db:31:7e:83:33:43:fc:a0:6d:ca:af:26:bc:78:22: 43:d0:82:2a:22:64:7c:d2:bd:22:35:c8:bf:e2:23:5c:1a:83: e0:f5:a2:69:1b:6c:7a:04:a3:64:9e:4c:ef:46:43:3e:ff:2a: de:74:ca:f5:cb:a2:66:f1:fc:a1:15:e7:35:09:f0:0a:df:02: 88:49:ca:66:e2:55:9d:4f:42:d6:f5:6a:36:b4:dd:49:09:58: 89:e6:ed:96:48:22:51:99:06:6e:1b:1e:c9:ea:49:a3:3d:36: a4:e5:ec:c5:fb:c2:51:29:70:9e:f2:50:44:ab:91:33:7e:f5: 07:25:98:a4:55:d9:59:29:dd:92:8b:78:a3:18:92:5d:b9:e6: 50:9a:bc:a6:ea:46:1c:43:ed:36:5e:93:1b:89:4a:ab:fb:20: 75:ed:50:88:1c:fe:6e:f6:94:e2:60:70:42:2d:6f:50:d5:fe: 24:04:f9:fd:ff:7f:61:3b:91:bc:d5:f7:aa:0a:35:37:1a:91: 81:7f:3a:98:5a:5c:91:e5:94:a4:f6:42:46:d9:69:c4:6f:56: de:2c:87:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUwNDI0MTgzODUzWhcNMjUwNTAxMTgzODUzWjAYMRYwFAYD VQQDEw02ODBhODUzZC05YWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03ZLk9J3PHjDQuEGLNd+5uu3PkUBsa3O50aOQaR3XOXtVfd9uKdKgQi/Fh7d k/3k7in6TVxgP9uz7CrkFP/9X1p+JR+hq+4XF/L0JugaHhIkO53jYA5N+G+sHKFX rSm8G/C1wyNFmTt8yUJsXr+JOMh9/f7OoVjGqUXQzN2YBxg7An9MTSsBz9YPPfn/ Er6FHteOvYfefa8m8jceGLUuuJc8gV/FqiyFfTSevLi5+5fB+y4konJG9IeMgjCh E9TXt2F53oasHKPLK+Y4tf7/Xv6Uh1ja2Ha12TdODE7IJ9xX3p1CxtTo1n6Uqezp YHlrR0xWxwSA8o736fbgJ1htfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB49DdjR TMi8XSxVi2M7zbau83hfMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATa00n8cfuKT4VRxEgnpqAS3i1Sv8pukqGdOlVq/85nOFnN1ScIEzb MX6DM0P8oG3Krya8eCJD0IIqImR80r0iNci/4iNcGoPg9aJpG2x6BKNknkzvRkM+ /yredMr1y6Jm8fyhFec1CfAK3wKIScpm4lWdT0LW9Wo2tN1JCViJ5u2WSCJRmQZu Gx7J6kmjPTak5ezF+8JRKXCe8lBEq5EzfvUHJZikVdlZKd2Si3ijGJJdueZQmrym 6kYcQ+02XpMbiUqr+yB17VCIHP5u9pTiYHBCLW9Q1f4kBPn9/39hO5G81feqCjU3 GpGBfzqYWlyR5ZSk9kJG2WnEb1beLIfE -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:16 2025 by rpki-client