$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: BwxCkx9glYFChMYtSxrTt927Y6AU8gchTFiMD8hut6Y= Subject key identifier: F6:65:B3:E0:E4:B2:D4:B0:3A:D7:D4:B6:CD:74:B1:F8:33:4C:E0:86 Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: B6 Signing time: Fri 25 Apr 2025 05:01:12 +0000 Manifest this update: Fri 25 Apr 2025 05:01:12 +0000 Manifest next update: Fri 02 May 2025 05:01:12 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: tLEj8HA4KAz0qTZgWqAyJF0FM25fiAUaqrQFEdMhnzA=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: zjHSWjEAJbElSjtvgLzBTS12ZS/2A0buXGVs+XwBcIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: Apr 25 05:01:12 2025 GMT Not After : May 2 05:01:12 2025 GMT Subject: CN=680b1718-c053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:50:bd:6a:d8:b0:62:c6:10:c0:61:e4:c6: d9:2f:c2:0c:03:47:73:a0:91:7b:43:44:90:33:32: 54:ea:d2:67:23:a2:df:b9:4a:da:fb:5a:fe:ac:5e: f0:ea:33:04:21:7f:c0:98:78:a2:7c:7f:a5:1a:2a: f3:fb:9a:f8:88:1d:f2:fa:98:e1:b8:a0:11:39:d7: d4:49:fc:fa:44:df:97:91:aa:13:cf:de:e3:1d:2a: f4:ca:bc:01:a8:50:43:f9:79:91:a1:89:29:7a:24: 82:52:09:07:95:9c:fe:7c:f9:ed:49:f3:d7:cb:bf: f1:a7:f9:01:b9:d3:15:e0:c8:de:ba:d6:f6:4f:72: 78:b8:0a:8b:41:d3:10:0a:e2:97:89:b5:9a:8b:1b: 2e:35:74:9e:a4:fa:03:d3:cf:d3:b0:6e:9e:c9:ba: 88:ac:1a:df:6a:62:e1:15:ca:2c:f6:e2:5a:c9:62: a0:89:af:05:0a:fb:a5:52:20:fc:9a:6b:b3:e9:09: ca:08:c5:4c:b8:b7:d8:32:a0:50:37:62:5e:35:71: 16:d3:67:56:cf:56:b2:b1:d8:d2:f0:38:61:57:05: 41:b0:b6:e2:6e:93:0a:64:25:c4:4e:2e:36:3f:65: a2:78:d1:5a:e2:15:b7:15:2e:90:66:0c:46:73:a5: 55:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:B3:E0:E4:B2:D4:B0:3A:D7:D4:B6:CD:74:B1:F8:33:4C:E0:86 X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9f:c4:cb:0d:e7:59:20:93:9f:68:68:af:07:3b:e9:a2:15: e7:82:b8:a3:37:ab:1d:db:99:28:32:cb:72:e8:a4:0f:e3:3f: ce:27:dc:e8:fd:c4:31:06:82:65:f4:03:c3:c8:78:b7:dc:89: 01:90:f2:b5:4e:95:e2:20:92:0d:7d:89:a3:05:de:9c:5b:88: eb:71:a9:10:19:37:8e:ea:d3:92:4b:34:b2:42:63:fc:b1:ac: 8b:bc:1c:7e:4a:73:29:5d:53:b7:c1:6f:ef:ca:4a:04:eb:10: 91:a2:6a:0b:8f:ce:92:e9:b7:e1:19:82:03:87:6d:18:a2:fb: be:e9:c7:e1:2c:a9:50:19:88:03:d1:8b:c0:03:b4:a8:bd:6d: 90:22:ce:04:cb:ae:fc:07:2a:0d:45:30:fb:1d:b6:98:a5:f7: ff:c1:41:a9:1a:30:b5:72:af:60:13:11:9c:4f:8d:cd:67:fd: 70:91:39:1e:4f:2c:4b:48:7e:61:c6:db:06:e6:3f:09:0c:cd: d6:50:a8:db:83:f6:c8:ff:e7:81:e6:d2:b4:82:63:05:cc:19: 2f:3d:21:50:8b:11:bb:ba:ea:3b:e8:db:03:52:52:52:25:e8: f4:fc:21:99:5b:5d:53:a9:6e:71:77:53:a8:21:a9:46:45:91: db:12:f2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNDI1MDUwMTEyWhcNMjUwNTAyMDUwMTEyWjAYMRYwFAYD VQQDEw02ODBiMTcxOC1jMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvRQvWrYsGLGEMBh5MbZL8IMA0dzoJF7Q0SQMzJU6tJnI6LfuUra+1r+rF7w 6jMEIX/AmHiifH+lGirz+5r4iB3y+pjhuKAROdfUSfz6RN+XkaoTz97jHSr0yrwB qFBD+XmRoYkpeiSCUgkHlZz+fPntSfPXy7/xp/kBudMV4Mjeutb2T3J4uAqLQdMQ CuKXibWaixsuNXSepPoD08/TsG6eybqIrBrfamLhFcos9uJayWKgia8FCvulUiD8 mmuz6QnKCMVMuLfYMqBQN2JeNXEW02dWz1aysdjS8DhhVwVBsLbibpMKZCXETi42 P2WieNFa4hW3FS6QZgxGc6VVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZls+Dk stSwOtfUts10sfgzTOCGMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7n8TLDedZIJOfaGivBzvpohXngrijN6sd25koMsty6KQP4z/OJ9zo /cQxBoJl9APDyHi33IkBkPK1TpXiIJINfYmjBd6cW4jrcakQGTeO6tOSSzSyQmP8 sayLvBx+SnMpXVO3wW/vykoE6xCRomoLj86S6bfhGYIDh20Yovu+6cfhLKlQGYgD 0YvAA7SovW2QIs4Ey678ByoNRTD7HbaYpff/wUGpGjC1cq9gExGcT43NZ/1wkTke TyxLSH5hxtsG5j8JDM3WUKjbg/bI/+eB5tK0gmMFzBkvPSFQixG7uuo76NsDUlJS Jej0/CGZW11TqW5xd1OoIalGRZHbEvJV -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:47 2025 by rpki-client