$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: i/rH+qoGb5nk8dBOys8GVtiqN1AwNrmvUmw6/xrWSKE= Subject key identifier: 05:0D:32:F5:86:2B:B7:85:27:17:95:E6:A7:DE:45:A3:D4:88:6E:9A Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 1339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 12E2 Signing time: Thu 24 Apr 2025 17:06:51 +0000 Manifest this update: Thu 24 Apr 2025 17:06:51 +0000 Manifest next update: Thu 01 May 2025 17:06:50 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: TBFgU5/oFYMpo0ZM5lXz/0eVfFiEjrHcB5Idm2fzMaU=) 2: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 3: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: ijr6UDNyvj4aysISbjMaLFQ8kk4sQ7342WXhcB82+Yo=) 4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) 5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4921 (0x1339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Apr 24 17:06:51 2025 GMT Not After : May 1 17:06:50 2025 GMT Subject: CN=680a6fab-1eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:1f:86:3e:7b:f4:72:08:0e:a6:81:45:d7: d7:ee:15:84:b7:13:0b:09:64:11:4d:c0:05:18:7c: cd:6b:46:d8:9a:e2:6d:2b:7f:ba:08:1d:00:18:c8: f2:09:84:f0:69:bd:b6:5c:ee:c0:1d:de:0c:7a:46: f8:49:dc:08:37:5b:44:be:5b:5d:9c:65:4c:ca:4c: f9:92:7c:1c:b6:64:08:ff:af:e8:23:d1:37:df:b7: 50:42:de:ea:78:1a:0d:b1:7c:a1:c8:ec:88:f4:71: 19:c1:4a:91:a1:be:f9:1b:05:2f:64:04:11:f1:f5: 85:81:41:9c:62:f9:3a:57:70:5e:29:f1:ab:61:96: 79:96:26:2d:b5:bf:de:d5:66:ff:d0:c6:23:97:f5: e5:1b:44:7c:1d:44:7c:2e:6a:f4:95:71:a0:79:2c: 38:1d:94:5f:1e:0c:98:6d:da:ed:fa:95:6d:68:f7: d8:79:e3:c1:57:96:c0:cb:8c:1a:2f:0c:b4:bd:32: 8c:c4:e4:7b:97:b8:7e:d2:65:c2:90:84:57:f7:ef: 61:1e:d7:6f:e8:8c:a4:e0:67:03:f0:35:3b:f4:12: 3b:0c:87:57:48:3f:fb:e6:3a:e7:22:60:c2:19:c2: 49:c0:a9:76:9f:76:80:c3:ba:c2:12:76:c3:ed:56: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0D:32:F5:86:2B:B7:85:27:17:95:E6:A7:DE:45:A3:D4:88:6E:9A X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d5:a3:b3:68:8c:75:4d:f9:26:e4:f6:c1:ea:02:30:5e:5e: 68:48:c7:9b:73:2b:70:bd:ed:59:12:e2:de:8e:1b:c4:f7:9c: 1f:72:cc:33:f8:74:c1:55:bb:3e:c6:fe:89:09:72:59:f9:bc: ef:c8:5f:cb:23:84:1d:7d:f1:34:ec:1e:c7:6e:b0:0f:1c:c9: e6:56:a5:d1:13:5e:d0:53:1f:18:e3:6f:24:0a:46:1d:92:c0: 77:f3:9c:60:c7:e5:0f:a9:da:66:53:29:d8:a1:ee:0a:6e:ab: 3d:8f:87:62:15:6c:5c:d9:08:e1:a3:fe:5c:4d:aa:33:e6:3c: ba:49:99:52:c5:0d:ac:08:c4:63:8b:c4:8d:72:0c:2f:a7:60: 1a:32:16:67:aa:6c:f2:d2:36:58:bb:d1:a4:0f:2f:55:9c:e7: bd:ef:16:78:49:c8:54:b1:08:ec:ef:fa:2f:f0:9c:9d:f8:3e: 30:69:84:2d:2a:51:87:9a:5d:97:75:d6:92:db:be:44:70:26: ea:7e:07:bb:af:70:26:7e:aa:bb:d5:1e:ed:a8:36:78:fc:32: 93:bd:06:0c:52:c4:74:45:7e:50:cc:53:56:26:43:9f:4f:21: 93:42:be:43:f3:47:aa:71:57:48:14:7b:61:10:b8:0b:b4:87: b6:b3:e3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUwNDI0MTcwNjUxWhcNMjUwNTAxMTcwNjUwWjAYMRYwFAYD VQQDEw02ODBhNmZhYi0xZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnIfhj579HIIDqaBRdfX7hWEtxMLCWQRTcAFGHzNa0bYmuJtK3+6CB0AGMjy CYTwab22XO7AHd4Mekb4SdwIN1tEvltdnGVMykz5knwctmQI/6/oI9E337dQQt7q eBoNsXyhyOyI9HEZwUqRob75GwUvZAQR8fWFgUGcYvk6V3BeKfGrYZZ5liYttb/e 1Wb/0MYjl/XlG0R8HUR8Lmr0lXGgeSw4HZRfHgyYbdrt+pVtaPfYeePBV5bAy4wa Lwy0vTKMxOR7l7h+0mXCkIRX9+9hHtdv6Iyk4GcD8DU79BI7DIdXSD/75jrnImDC GcJJwKl2n3aAw7rCEnbD7VZzlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUNMvWG K7eFJxeV5qfeRaPUiG6aMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe1aOzaIx1Tfkm5PbB6gIwXl5oSMebcytwve1ZEuLejhvE95wfcswz +HTBVbs+xv6JCXJZ+bzvyF/LI4QdffE07B7HbrAPHMnmVqXRE17QUx8Y428kCkYd ksB385xgx+UPqdpmUynYoe4Kbqs9j4diFWxc2Qjho/5cTaoz5jy6SZlSxQ2sCMRj i8SNcgwvp2AaMhZnqmzy0jZYu9GkDy9VnOe97xZ4SchUsQjs7/ov8Jyd+D4waYQt KlGHml2XddaS275EcCbqfge7r3Amfqq71R7tqDZ4/DKTvQYMUsR0RX5QzFNWJkOf TyGTQr5D80eqcVdIFHthELgLtIe2s+Px -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:11 2025 by rpki-client