$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft File: LlwMrqX6-WreoBWKqPtS-jRn4Og.mft (raw, json) Hash identifier: HNxh+amgGZBb/ibCLrl+l9AY+Vl8dzdbZqgFclM1PdQ= Subject key identifier: 3F:A3:05:01:0F:15:B1:2A:67:52:08:EB:A8:CF:1E:91:6E:00:9B:74 Authority key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Certificate issuer: /CN=A918F7E6/serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft Manifest number: 0660 Signing time: Thu 24 Apr 2025 22:13:37 +0000 Manifest this update: Thu 24 Apr 2025 22:13:36 +0000 Manifest next update: Thu 01 May 2025 22:13:36 +0000 Files and hashes: 1: LlwMrqX6-WreoBWKqPtS-jRn4Og.crl (hash: 8zz1tqYPlprViXnSnMunkbT7dEEXosuR7JiR5QUlcbI=) 2: D676DC068A7311EEB46D5B0BC4F9AE02.roa (hash: xv4JOTBWCpuFMP+OVuJZ707b0iFlDSezqXisZkWjHnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Validity Not Before: Apr 24 22:13:36 2025 GMT Not After : May 1 22:13:36 2025 GMT Subject: CN=680ab790-fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:57:76:fa:4a:d5:b5:53:a0:1f:6d:22:02: 98:31:00:4f:22:c3:ef:cb:d2:8e:fd:ff:45:95:75: 3b:c6:a0:8c:b6:18:bb:a8:87:4d:aa:ca:ed:03:21: 8c:6c:97:11:b4:64:f3:ff:df:f6:8f:0e:e5:23:66: 70:71:5f:28:6a:a9:32:42:4d:2e:81:da:a2:85:a5: bb:a0:91:cc:32:a6:d8:25:de:77:58:3a:f9:1e:41: 48:8a:46:8c:28:2c:81:46:73:5f:09:7b:f2:6e:05: 4e:f8:e3:3c:a6:10:18:8e:19:98:a8:c0:3d:f9:68: f9:27:76:6c:c1:76:a4:4e:23:d2:38:51:54:06:3c: e8:ad:f0:af:39:8b:52:f3:e9:67:63:64:ae:b0:b1: 28:e3:d0:42:5d:b6:f8:06:95:17:7a:90:8b:df:50: 1a:6f:0d:7a:e0:82:72:a3:b5:cf:14:ee:99:4b:86: d4:ce:51:4e:79:d5:38:b1:ed:91:c5:50:2a:bc:98: 57:b1:16:0c:32:45:43:87:c2:2d:94:a5:6d:c0:92: c6:25:0a:e4:85:b1:ee:a1:82:41:1a:48:f9:51:45: f4:6c:5d:db:b6:81:76:74:f4:f2:9d:ed:9f:21:d8: 6d:79:ce:cf:9b:05:4d:e5:7f:f8:78:3b:a6:b2:02: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A3:05:01:0F:15:B1:2A:67:52:08:EB:A8:CF:1E:91:6E:00:9B:74 X509v3 Authority Key Identifier: keyid:2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:0d:5b:a8:82:cc:62:c0:63:98:9c:2a:b4:68:6a:5d:a1: 64:fb:1c:01:78:65:9a:4c:b7:dc:6a:77:0c:6d:c7:ac:61:44: 83:03:d1:5b:aa:3a:87:e0:cb:9a:43:0f:de:18:f9:b4:61:1e: b1:32:b6:bb:76:90:23:98:dd:25:9f:60:1c:7e:6c:f8:bc:82: 3e:0f:4e:d2:c8:96:64:5a:81:59:49:0a:54:3e:b8:3d:07:40: 05:f5:30:0b:1b:2f:84:fe:0f:75:30:7b:93:3c:d2:4a:0f:9e: ea:ed:d2:24:65:c5:b2:d0:6e:dc:14:27:ce:ac:73:ed:b1:21: 2c:ae:87:95:2c:84:77:26:fa:a8:8d:b1:a9:2d:1c:62:63:50: 5b:5e:f5:74:18:fc:d3:86:4e:30:5f:94:b9:0c:ce:b1:a5:57: da:1a:f5:c1:aa:c9:9e:8e:df:3d:51:08:1c:12:17:fc:04:c6: 63:0b:a5:9e:6c:27:e9:e3:2a:f1:c7:1a:b1:b2:35:e0:b8:9d: 0c:48:8f:68:58:a3:ed:9d:c9:65:e0:79:4f:a4:39:00:d9:65: 12:26:f0:2f:f5:6d:f5:9c:fb:4f:c7:22:ed:b6:70:a0:98:2b: 05:2f:b7:fd:91:21:89:02:f2:c8:98:89:88:70:55:55:96:e1: 9c:27:36:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4QUE4RkI1MkZB MzQ2N0UwRTgwHhcNMjUwNDI0MjIxMzM2WhcNMjUwNTAxMjIxMzM2WjAYMRYwFAYD VQQDEw02ODBhYjc5MC1mYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GhXdvpK1bVToB9tIgKYMQBPIsPvy9KO/f9FlXU7xqCMthi7qIdNqsrtAyGM bJcRtGTz/9/2jw7lI2ZwcV8oaqkyQk0ugdqihaW7oJHMMqbYJd53WDr5HkFIikaM KCyBRnNfCXvybgVO+OM8phAYjhmYqMA9+Wj5J3ZswXakTiPSOFFUBjzorfCvOYtS 8+lnY2SusLEo49BCXbb4BpUXepCL31Aabw164IJyo7XPFO6ZS4bUzlFOedU4se2R xVAqvJhXsRYMMkVDh8ItlKVtwJLGJQrkhbHuoYJBGkj5UUX0bF3btoF2dPTyne2f Idhtec7PmwVN5X/4eDumsgIwrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+jBQEP FbEqZ1II66jPHpFuAJt0MB8GA1UdIwQYMBaAFC5cDK6l+vlq3qAViqj7Uvo0Z+Do MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdFNi8wMUM3MkM4MDdE NzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1XcmVvQldLcVB0Uy1qUm40 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsd01ycVg2LVdyZW9CV0txUHRTLWpSbjRPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFYNi1X cmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbaA1bqILMYsBjmJwqtGhqXaFk+xwBeGWaTLfcancMbcesYUSDA9Fb qjqH4MuaQw/eGPm0YR6xMra7dpAjmN0ln2Acfmz4vII+D07SyJZkWoFZSQpUPrg9 B0AF9TALGy+E/g91MHuTPNJKD57q7dIkZcWy0G7cFCfOrHPtsSEsroeVLIR3Jvqo jbGpLRxiY1BbXvV0GPzThk4wX5S5DM6xpVfaGvXBqsmejt89UQgcEhf8BMZjC6We bCfp4yrxxxqxsjXguJ0MSI9oWKPtncll4HlPpDkA2WUSJvAv9W31nPtPxyLttnCg mCsFL7f9kSGJAvLImImIcFVVluGcJzZi -----END CERTIFICATE-----Generated at Sat Apr 26 04:49:40 2025 by rpki-client