$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: HxvjfRvgLWeUAvw5d+wLH3OFkWukmlicP9JyoElM0dU= Subject key identifier: 1D:69:BE:C5:A0:9A:8F:31:7C:46:B2:D0:64:6B:6E:56:C0:78:40:8E Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 04:03:03 +0000 Manifest this update: Fri 25 Apr 2025 04:03:03 +0000 Manifest next update: Fri 02 May 2025 04:03:03 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: cKgsxlPM7586fNlr7lFKG7RLjrc0hufu0IJYBK+AksU=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: 1La2YjR8695Kv+ENKHdPNPLlVQUHdNzlGYNxYnnCBUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: Apr 25 04:03:03 2025 GMT Not After : May 2 04:03:03 2025 GMT Subject: CN=680b0977-d6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:48:dd:d4:18:5e:64:50:34:bd:72:77:0c: ad:fc:80:ee:4a:47:4e:86:bd:d2:7f:10:35:13:51: 82:17:05:2a:d4:cd:b7:cf:9e:97:86:df:12:47:96: db:f6:bd:56:40:ea:07:d9:42:10:0f:ad:04:ea:b0: 0b:2a:c5:7f:9e:0d:df:1b:44:77:b9:ee:15:90:a8: 2d:cd:81:96:6a:2f:33:96:87:fb:bc:c0:68:55:6f: 2e:92:93:eb:0b:fd:3e:25:3b:2c:b7:1d:83:d8:ff: 46:78:d2:70:9a:5c:2a:60:86:e4:4c:06:61:0e:ff: 79:ca:76:b6:51:c4:74:0e:75:b2:cc:e5:16:99:2c: 03:ef:f8:16:cc:99:c4:21:cf:f1:ad:e5:c1:08:63: de:8d:0d:43:cd:c1:19:59:8c:3a:c5:a5:c0:32:59: 81:b9:8d:fc:e6:79:3d:28:80:5f:82:e4:c0:bf:02: 14:be:1e:3f:ae:10:c8:6f:93:28:35:b0:3a:76:3b: d2:70:2f:2f:03:1c:b2:55:d9:3f:18:00:54:29:f3: 16:03:56:c0:20:90:e3:be:56:6a:d5:46:f9:10:e5: 13:12:bd:c3:59:e2:c6:fd:38:91:29:33:6f:9d:2e: a3:a0:e8:4b:80:8a:30:80:56:da:96:37:4b:e8:eb: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:BE:C5:A0:9A:8F:31:7C:46:B2:D0:64:6B:6E:56:C0:78:40:8E X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:94:e1:14:62:67:d7:27:54:e9:cf:2f:68:29:ce:96:e5:ad: f5:ea:09:32:5d:b9:33:59:0f:2e:da:83:93:07:15:31:89:40: 91:55:0f:3a:ed:5f:88:80:da:e6:87:7c:67:74:ec:37:cf:db: 29:3d:49:ba:04:2b:5d:46:24:4a:70:f8:28:fc:3c:e9:c8:ce: 30:cc:75:cc:04:6a:cd:24:d0:75:f5:88:f4:c8:9f:c6:8f:5a: f7:0c:32:61:19:26:d9:07:66:76:94:66:9e:29:ed:fa:94:6e: 80:5a:ac:d4:94:0b:55:98:e1:f2:15:7c:61:70:86:04:15:15: 9f:30:ee:c1:45:69:8d:ce:3a:50:3e:db:d5:04:f1:99:43:f9: fc:4c:74:43:e7:82:90:48:2c:6d:6e:68:21:85:ca:dc:79:f6: 07:57:3b:be:be:2a:97:be:20:e8:84:f8:a0:3d:29:34:06:27: 30:85:1b:59:e2:79:17:64:14:6a:5b:d9:a0:8c:38:da:6b:31: da:5d:75:55:78:b5:72:80:26:37:d1:cf:d9:f4:f2:6f:3c:a0: 9f:c5:c4:3d:d4:ea:52:f1:2e:63:46:6d:df:06:32:59:bb:97: c0:5a:b2:bb:58:90:fb:9f:5c:19:e3:b7:37:c2:83:d8:28:31: 72:f4:b1:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwNDI1MDQwMzAzWhcNMjUwNTAyMDQwMzAzWjAYMRYwFAYD VQQDEw02ODBiMDk3Ny1kNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEFI3dQYXmRQNL1ydwyt/IDuSkdOhr3SfxA1E1GCFwUq1M23z56Xht8SR5bb 9r1WQOoH2UIQD60E6rALKsV/ng3fG0R3ue4VkKgtzYGWai8zlof7vMBoVW8ukpPr C/0+JTsstx2D2P9GeNJwmlwqYIbkTAZhDv95yna2UcR0DnWyzOUWmSwD7/gWzJnE Ic/xreXBCGPejQ1DzcEZWYw6xaXAMlmBuY385nk9KIBfguTAvwIUvh4/rhDIb5Mo NbA6djvScC8vAxyyVdk/GABUKfMWA1bAIJDjvlZq1Ub5EOUTEr3DWeLG/TiRKTNv nS6joOhLgIowgFbaljdL6OuXXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1pvsWg mo8xfEay0GRrblbAeECOMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqlOEUYmfXJ1Tpzy9oKc6W5a316gkyXbkzWQ8u2oOTBxUxiUCRVQ86 7V+IgNrmh3xndOw3z9spPUm6BCtdRiRKcPgo/DzpyM4wzHXMBGrNJNB19Yj0yJ/G j1r3DDJhGSbZB2Z2lGaeKe36lG6AWqzUlAtVmOHyFXxhcIYEFRWfMO7BRWmNzjpQ PtvVBPGZQ/n8THRD54KQSCxtbmghhcrcefYHVzu+viqXviDohPigPSk0BicwhRtZ 4nkXZBRqW9mgjDjaazHaXXVVeLVygCY30c/Z9PJvPKCfxcQ91OpS8S5jRm3fBjJZ u5fAWrK7WJD7n1wZ47c3woPYKDFy9LHp -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:17 2025 by rpki-client