$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: 2hcSnI3zfNgeGfxKmzikpvKmAcFY6GYUJNMamqVKsR4= Subject key identifier: 23:9C:CA:25:5E:4E:59:77:E5:27:C5:66:00:E2:03:31:B3:65:6A:8B Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B1C Signing time: Thu 24 Apr 2025 19:10:29 +0000 Manifest this update: Thu 24 Apr 2025 19:10:28 +0000 Manifest next update: Thu 01 May 2025 19:10:28 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: 43MWsGaIj3iLPGhR2sKLpOkElRBHWHaJbe2FRqsDb0Q=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) 3: 088BBCAE15BD11F0A1CED525C4F9AE02.roa (hash: TPVp9VWOXR8oVOp+7fMuRvb11VEEdHgj+iQi4wf2KDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: Apr 24 19:10:28 2025 GMT Not After : May 1 19:10:28 2025 GMT Subject: CN=680a8ca5-1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:8f:fd:30:18:44:21:ce:69:f9:d0:da:b4: e2:fd:98:8e:53:9d:48:88:34:7d:98:24:fd:7b:9c: 77:c4:74:ce:a2:87:e1:06:f0:5e:42:9f:44:9f:4d: 95:cb:41:36:cf:4e:03:df:67:87:c0:d1:fa:de:c7: dd:4e:52:0e:27:90:f4:74:77:a0:56:d7:8c:c6:be: 1a:30:dd:a4:8f:01:4f:a5:3f:24:cc:6f:4b:96:53: fa:99:56:5f:3a:d3:04:c4:0b:25:3f:52:f3:dd:45: fa:f9:da:85:2c:46:6c:3c:69:0d:31:4c:72:33:67: c6:fa:b0:92:5e:01:4f:3f:2b:51:fe:de:11:36:71: 64:1a:15:24:fa:f6:7e:02:cb:4d:db:00:c6:15:c3: 8a:37:d5:44:23:ec:2a:44:c7:2a:2f:85:ab:fc:00: 8d:41:88:4e:24:81:1c:bb:09:b8:01:0e:d9:68:e2: 2b:dd:63:9e:ec:10:cb:a2:74:28:cd:a8:bb:26:26: 96:05:01:d9:2b:62:f2:79:e3:40:da:dc:98:aa:5d: bb:3e:66:a3:d9:fa:c1:70:a6:7e:73:e2:14:3c:03: 6f:85:5c:63:b4:d9:c0:1a:49:72:20:17:57:ee:7d: 11:83:0c:bc:7b:a4:2b:ed:03:b2:6b:23:ef:14:09: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:CA:25:5E:4E:59:77:E5:27:C5:66:00:E2:03:31:B3:65:6A:8B X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:53:ae:af:9a:a7:83:bb:e1:6f:84:0d:d0:73:34:c2:53:1b: ee:de:c0:2e:77:c4:3c:62:86:2c:05:44:74:79:78:79:78:59: b0:b8:58:9b:cb:9b:55:f1:4d:d1:8f:af:e3:6a:55:e1:bc:c0: 52:c5:9f:31:6f:ae:12:8c:82:59:a9:07:f2:f3:5b:83:0b:7e: ab:9a:67:85:c2:4f:f6:60:4c:97:28:9e:72:0e:ff:02:93:b8: 7c:29:97:e3:f4:56:4b:e6:08:52:a4:0b:3f:c4:9d:04:f9:68: 8f:0b:ab:e2:3d:2c:a1:3f:34:88:35:75:5c:39:50:6c:3e:d6: 2c:73:e6:18:f9:24:35:d5:f2:d1:49:c8:a6:b5:00:25:73:ff: 61:37:5f:a4:84:fa:af:43:49:17:00:48:f5:6f:00:f8:9f:e1: 57:58:5f:88:ef:f9:26:da:17:f5:27:ab:16:17:86:0c:a1:48: 68:7e:59:48:e1:43:ab:9a:e0:c0:23:0a:23:96:52:8c:7f:35: 88:76:31:ed:15:01:8b:28:5c:20:b1:19:88:89:d9:25:50:53: 3d:67:28:b8:95:e6:68:a5:c4:e5:77:f7:bd:bc:f6:fc:c0:dc: 55:5e:ae:36:17:54:02:97:5b:cc:81:97:8c:f6:58:79:f8:d6: c0:ca:44:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwNDI0MTkxMDI4WhcNMjUwNTAxMTkxMDI4WjAYMRYwFAYD VQQDEw02ODBhOGNhNS0xZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6uP/TAYRCHOafnQ2rTi/ZiOU51IiDR9mCT9e5x3xHTOoofhBvBeQp9En02V y0E2z04D32eHwNH63sfdTlIOJ5D0dHegVteMxr4aMN2kjwFPpT8kzG9LllP6mVZf OtMExAslP1Lz3UX6+dqFLEZsPGkNMUxyM2fG+rCSXgFPPytR/t4RNnFkGhUk+vZ+ AstN2wDGFcOKN9VEI+wqRMcqL4Wr/ACNQYhOJIEcuwm4AQ7ZaOIr3WOe7BDLonQo zai7JiaWBQHZK2LyeeNA2tyYql27Pmaj2frBcKZ+c+IUPANvhVxjtNnAGklyIBdX 7n0Rgwy8e6Qr7QOyayPvFAmtjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOcyiVe Tll35SfFZgDiAzGzZWqLMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIU66vmqeDu+FvhA3QczTCUxvu3sAud8Q8YoYsBUR0eXh5eFmwuFib y5tV8U3Rj6/jalXhvMBSxZ8xb64SjIJZqQfy81uDC36rmmeFwk/2YEyXKJ5yDv8C k7h8KZfj9FZL5ghSpAs/xJ0E+WiPC6viPSyhPzSINXVcOVBsPtYsc+YY+SQ11fLR ScimtQAlc/9hN1+khPqvQ0kXAEj1bwD4n+FXWF+I7/km2hf1J6sWF4YMoUhofllI 4UOrmuDAIwojllKMfzWIdjHtFQGLKFwgsRmIidklUFM9Zyi4leZopcTld/e9vPb8 wNxVXq42F1QCl1vMgZeM9lh5+NbAykR1 -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:28 2025 by rpki-client