$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: svZ+f47ItzxyJ6ObGJJjMHT6U/vzIld5LegRLmwnGIw= Subject key identifier: 04:00:4D:26:0F:20:58:E6:41:B5:9B:4F:89:D9:9C:D2:86:CF:5C:85 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: C3 Signing time: Fri 25 Apr 2025 04:52:13 +0000 Manifest this update: Fri 25 Apr 2025 04:52:13 +0000 Manifest next update: Fri 02 May 2025 04:52:13 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: RudvJXlRyiXyL/FLVD1nWdxTWyHJXN4ty071+eBVzmE=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Apr 25 04:52:13 2025 GMT Not After : May 2 04:52:13 2025 GMT Subject: CN=680b14fd-441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:08:6e:41:2d:f1:7a:c5:67:ff:c3:77:a0: d2:b8:1d:ab:67:ad:dd:a7:18:3b:5a:1e:a3:86:af: 04:1a:80:17:e6:a7:76:ef:ab:be:56:63:52:4b:f7: 97:b6:ff:b1:1a:49:df:ab:bc:45:3c:82:c7:0b:8c: d9:a8:c8:d7:22:b7:4e:99:39:9c:d6:d3:f5:b3:cb: 83:db:35:67:59:fa:b2:ed:42:1e:16:2e:a9:b4:40: 04:f7:60:e9:09:41:36:56:d2:14:c9:50:42:cb:88: 26:5f:4d:82:c9:9e:d5:ab:4c:d5:c8:16:c3:10:c4: ae:10:ca:eb:1d:68:11:4e:8d:e0:92:d3:44:fa:6f: a4:a7:b5:7a:cc:d0:3d:84:70:42:f8:02:9b:f7:c9: 1d:a0:1f:0c:fd:62:5e:2a:0b:3c:c8:02:a3:16:50: 30:0a:f8:b9:97:81:50:30:3b:52:62:d5:b0:bc:8b: e4:7f:65:2b:a9:9f:81:bb:92:64:9e:d4:5c:0d:81: 70:8c:b4:ae:ea:6b:f8:2c:a0:64:0a:85:fb:cb:12: 90:b5:60:69:43:12:6e:9a:89:2f:34:7f:a1:f0:dd: ba:93:be:04:3b:61:7d:5d:75:6e:39:06:51:e9:30: b5:06:c9:24:cc:9e:e0:b4:3b:ea:c5:dc:22:0e:a8: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:00:4D:26:0F:20:58:E6:41:B5:9B:4F:89:D9:9C:D2:86:CF:5C:85 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:83:f9:34:df:53:b3:c4:b5:dd:ca:d1:29:a1:35:79:14:15: b5:0d:39:e3:88:ed:2c:fa:ec:c9:06:4a:0e:4d:d2:cf:89:8f: a9:66:1c:e0:3d:13:74:1f:17:5f:42:2b:6f:10:56:f9:22:8e: b6:7b:4a:d5:02:0f:da:25:9a:64:f6:44:ac:2e:89:b4:70:f8: ca:e4:d1:17:0d:83:40:a7:1d:30:90:fe:53:9e:98:97:73:47: 91:40:f1:fa:a6:9d:90:e5:d3:7c:a7:82:cf:24:a7:d1:f2:b5: 43:7e:45:63:0d:80:f4:1a:b8:de:92:04:53:fc:e3:2b:bd:c9: dc:14:59:14:bd:ef:3d:f2:ae:c2:c4:b0:49:78:d0:92:d2:ec: 16:7c:8c:c5:f5:12:64:28:f8:df:40:ad:a5:db:75:75:ee:10: 97:1c:33:36:35:eb:25:60:8b:4c:40:8f:02:4e:cb:74:d5:d9: 65:fe:62:92:29:d3:23:f0:35:28:29:e6:43:4b:0e:32:0c:3c: ab:17:77:4a:2c:7c:33:95:32:23:a2:d6:76:ea:86:14:a5:bd: d0:5b:d9:81:93:be:1a:7e:84:89:bb:77:83:7f:97:95:ac:7f: e7:86:67:3a:bc:8f:2a:6d:90:ea:73:58:dc:9d:6b:b6:23:d1: ae:a9:71:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwNDI1MDQ1MjEzWhcNMjUwNTAyMDQ1MjEzWjAYMRYwFAYD VQQDEw02ODBiMTRmZC00NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpcIbkEt8XrFZ//Dd6DSuB2rZ63dpxg7Wh6jhq8EGoAX5qd276u+VmNSS/eX tv+xGknfq7xFPILHC4zZqMjXIrdOmTmc1tP1s8uD2zVnWfqy7UIeFi6ptEAE92Dp CUE2VtIUyVBCy4gmX02CyZ7Vq0zVyBbDEMSuEMrrHWgRTo3gktNE+m+kp7V6zNA9 hHBC+AKb98kdoB8M/WJeKgs8yAKjFlAwCvi5l4FQMDtSYtWwvIvkf2UrqZ+Bu5Jk ntRcDYFwjLSu6mv4LKBkCoX7yxKQtWBpQxJumokvNH+h8N26k74EO2F9XXVuOQZR 6TC1BskkzJ7gtDvqxdwiDqj2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQATSYP IFjmQbWbT4nZnNKGz1yFMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBag/k031OzxLXdytEpoTV5FBW1DTnjiO0s+uzJBkoOTdLPiY+pZhzg PRN0HxdfQitvEFb5Io62e0rVAg/aJZpk9kSsLom0cPjK5NEXDYNApx0wkP5TnpiX c0eRQPH6pp2Q5dN8p4LPJKfR8rVDfkVjDYD0GrjekgRT/OMrvcncFFkUve898q7C xLBJeNCS0uwWfIzF9RJkKPjfQK2l23V17hCXHDM2NeslYItMQI8CTst01dll/mKS KdMj8DUoKeZDSw4yDDyrF3dKLHwzlTIjotZ26oYUpb3QW9mBk74afoSJu3eDf5eV rH/nhmc6vI8qbZDqc1jcnWu2I9GuqXGE -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:16 2025 by rpki-client