$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: vrsoYZ4zxVG3tTyHraVR72xLvWRlXP5QgCZhD064TAc= Subject key identifier: 5B:E8:9F:9D:17:DF:B1:E9:25:CB:E5:CC:29:5B:0F:40:A6:4A:81:01 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 20F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 20F5 Signing time: Sat 26 Apr 2025 15:55:39 +0000 Manifest this update: Sat 26 Apr 2025 15:55:39 +0000 Manifest next update: Sat 03 May 2025 15:55:39 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: 0VzBlwX/8CFoNnaAXGtYItHQmKwoU2hA3/kUuPaBhR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8437 (0x20f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Apr 26 15:55:39 2025 GMT Not After : May 3 15:55:39 2025 GMT Subject: CN=680d01fb-938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:12:54:2d:77:ac:94:e1:3a:cb:62:bd:c9: 87:d4:04:0a:04:9a:51:99:80:3c:28:56:13:7b:25: 72:26:b1:ad:4b:86:86:2f:dc:8b:da:83:eb:85:06: 8e:85:f7:33:4d:df:57:56:f3:7a:ce:54:26:de:b9: 26:4d:0b:4b:d2:fb:3a:5b:5d:a5:fd:0c:e2:86:73: 71:5b:34:33:ca:3a:1a:e2:af:ef:af:eb:de:4c:45: 6d:64:b9:39:2e:4e:a4:e0:1f:38:d4:cc:ab:bb:59: 32:07:28:0f:65:19:53:6e:5f:f6:4e:6d:30:3a:90: 11:a3:50:1b:c1:f5:3b:d0:ad:14:72:11:6b:66:05: 38:75:af:a7:ba:06:eb:38:90:96:c5:fe:8e:ae:9f: 9b:03:c9:e2:19:12:c7:7e:24:81:43:7f:27:a0:e1: a4:5b:a8:45:8e:cc:54:fa:b8:41:31:c9:ca:26:67: 2b:ff:2b:b5:06:cc:7b:65:53:d6:66:59:58:9e:50: 5d:a6:70:2d:f4:c4:dc:18:a5:3a:b9:6c:f2:bf:88: c3:de:2b:fe:0c:70:96:80:53:92:00:40:6c:bb:11: 3f:8a:b4:a4:03:07:e2:a0:ce:90:73:4e:84:54:86: 4a:41:20:fe:44:24:d8:73:04:53:ae:47:84:87:b8: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:9F:9D:17:DF:B1:E9:25:CB:E5:CC:29:5B:0F:40:A6:4A:81:01 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:fd:54:df:f9:a9:ee:34:dc:6f:0c:d5:88:2e:dd:7c:07:83: d2:f1:12:51:b6:b9:de:ce:ec:54:43:de:f6:33:ce:d7:92:41: da:f7:ad:f5:97:f5:f7:37:14:c1:a7:88:8d:f1:39:22:2c:4d: b3:94:0f:fd:ed:24:be:c5:08:db:33:28:27:79:f5:c8:f3:4e: b4:87:f0:bc:ee:0a:02:4a:38:8b:f7:8a:5e:fc:11:7b:dc:85: a9:30:b6:90:42:ee:02:65:5e:11:fc:c8:35:db:09:1a:d5:85: 7c:ae:54:8a:e9:5e:4e:51:d4:86:b4:94:01:5f:a2:f6:c5:f5: 36:26:a4:7e:a5:a8:2f:57:9e:14:40:4d:33:a5:47:68:a2:4b: b3:5b:82:66:66:64:80:1e:fd:1a:d1:c7:d7:76:5d:e1:45:71: df:48:7d:a4:06:6f:1d:70:3a:eb:01:8f:d7:41:93:83:e7:3a: 85:e7:bc:e7:cd:d1:7c:1d:78:8a:7f:3a:df:6c:f1:f0:ae:f6: 50:a8:d5:d9:f1:c1:e9:18:4e:79:ef:6c:43:62:2a:5f:8e:86: f3:96:27:99:8f:ff:65:12:5b:ca:05:27:56:a9:7a:ab:70:fd: 29:08:5a:0d:b3:1b:2a:85:f7:f1:93:2d:b1:65:1d:63:cd:90: 09:56:f2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjUwNDI2MTU1NTM5WhcNMjUwNTAzMTU1NTM5WjAYMRYwFAYD VQQDEw02ODBkMDFmYi05MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36wSVC13rJThOstivcmH1AQKBJpRmYA8KFYTeyVyJrGtS4aGL9yL2oPrhQaO hfczTd9XVvN6zlQm3rkmTQtL0vs6W12l/QzihnNxWzQzyjoa4q/vr+veTEVtZLk5 Lk6k4B841Myru1kyBygPZRlTbl/2Tm0wOpARo1AbwfU70K0UchFrZgU4da+nugbr OJCWxf6Orp+bA8niGRLHfiSBQ38noOGkW6hFjsxU+rhBMcnKJmcr/yu1Bsx7ZVPW ZllYnlBdpnAt9MTcGKU6uWzyv4jD3iv+DHCWgFOSAEBsuxE/irSkAwfioM6Qc06E VIZKQSD+RCTYcwRTrkeEh7gqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvon50X 37HpJcvlzClbD0CmSoEBMB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ/VTf+anuNNxvDNWILt18B4PS8RJRtrnezuxUQ972M87XkkHa9631 l/X3NxTBp4iN8TkiLE2zlA/97SS+xQjbMygnefXI8060h/C87goCSjiL94pe/BF7 3IWpMLaQQu4CZV4R/Mg12wka1YV8rlSK6V5OUdSGtJQBX6L2xfU2JqR+pagvV54U QE0zpUdookuzW4JmZmSAHv0a0cfXdl3hRXHfSH2kBm8dcDrrAY/XQZOD5zqF57zn zdF8HXiKfzrfbPHwrvZQqNXZ8cHpGE5572xDYipfjobzlieZj/9lElvKBSdWqXqr cP0pCFoNsxsqhffxky2xZR1jzZAJVvIz -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:28 2025 by rpki-client