$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: WCIvQ7/NaPVUMWFixZ9txLTvrRmLDNxw3eqpfcDGCsA= Subject key identifier: 85:6C:3B:23:57:25:23:A9:05:AE:DC:FB:E0:E9:C5:BC:05:59:E7:8F Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0858 Signing time: Thu 24 Apr 2025 20:34:16 +0000 Manifest this update: Thu 24 Apr 2025 20:34:15 +0000 Manifest next update: Thu 01 May 2025 20:34:15 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: gFkVSVoRvGzbFLymEN4UD0qx4zmY0jxSFugNUcDBRkk=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Apr 24 20:34:15 2025 GMT Not After : May 1 20:34:15 2025 GMT Subject: CN=680aa047-5af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:9d:72:81:a9:92:df:49:49:1d:81:e7:ba: 8f:7a:d7:df:4c:6d:4e:16:ab:d0:24:82:67:1c:b6: 81:b1:54:18:4e:a0:30:d9:bb:16:22:14:6d:14:c8: a2:95:0e:06:b8:88:a7:c3:7e:fe:8f:c1:c3:65:b1: 47:5a:0a:31:c6:4f:fa:65:9b:9e:cb:5a:af:21:b8: 5d:56:a6:6b:2b:0c:4f:26:8b:c9:34:c1:a1:09:df: 33:58:55:d5:f0:e6:f0:97:a5:22:b8:43:65:cf:2c: 25:47:b3:55:d9:8b:b5:87:03:95:3f:7d:f0:c6:ee: a0:14:4c:35:a2:e9:63:e2:c8:0b:65:1f:36:aa:9f: a5:16:7d:52:47:b5:95:c9:f1:e8:ac:22:52:9c:eb: 75:0b:16:3d:91:db:16:82:8a:04:21:35:80:3f:4f: c1:34:c9:ed:50:eb:38:a3:f3:8b:6a:27:fb:47:eb: c1:47:f0:c9:a6:a2:06:82:c2:59:14:b1:f7:74:82: ff:20:9b:d7:13:ab:04:af:3f:73:55:c9:12:f8:31: 06:72:1a:b9:19:84:e6:b2:07:b4:68:9f:55:ae:56: 7d:88:09:92:9f:1a:8e:95:5b:c3:0b:0a:be:e3:33: 80:2b:77:ce:ec:9d:0f:51:0f:34:c8:9c:06:65:84: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:3B:23:57:25:23:A9:05:AE:DC:FB:E0:E9:C5:BC:05:59:E7:8F X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:80:12:36:1b:58:fe:53:05:ad:74:16:35:18:0e:88:51:ae: 72:93:59:c1:6b:35:4a:b4:14:45:ce:d7:b8:39:91:b7:f4:7c: ec:cc:57:3e:35:91:31:55:07:16:df:6b:08:e0:be:b3:18:38: 6f:33:f9:71:eb:c1:29:f7:b0:70:ee:c8:a0:d4:17:e6:f8:6b: 0c:42:1f:e8:b8:e5:65:55:54:8c:70:93:58:5a:84:a6:b5:b1: cc:b6:9e:29:86:9a:4b:ed:cb:fc:5a:40:af:6a:1f:06:88:0a: a5:a7:e1:f2:7c:26:4e:65:85:85:ed:cd:eb:99:86:1d:69:35: 9c:48:99:31:fc:be:6f:4e:4f:17:88:26:5f:c3:a3:15:29:48: 63:4a:bd:8a:ca:ea:c9:81:c4:f1:24:70:18:8a:1e:74:f9:35: 76:8d:1a:ef:cd:4d:3f:90:d3:a2:9a:07:1b:57:04:dd:9d:99: f3:02:cd:8f:76:4d:63:54:79:61:9a:23:8d:75:07:1d:5c:8e: b1:64:7e:a7:be:8c:a1:7a:cc:59:a1:7c:fb:8a:96:77:99:c1: 12:3f:06:9c:f7:02:f6:74:f7:db:ff:b4:a5:38:0f:14:71:b8: 36:07:ce:6a:db:0e:15:fc:2d:b6:2c:c8:a3:f8:5d:a8:fb:52: ca:b4:14:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNDI0MjAzNDE1WhcNMjUwNTAxMjAzNDE1WjAYMRYwFAYD VQQDEw02ODBhYTA0Ny01YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E6dcoGpkt9JSR2B57qPetffTG1OFqvQJIJnHLaBsVQYTqAw2bsWIhRtFMii lQ4GuIinw37+j8HDZbFHWgoxxk/6ZZuey1qvIbhdVqZrKwxPJovJNMGhCd8zWFXV 8Obwl6UiuENlzywlR7NV2Yu1hwOVP33wxu6gFEw1oulj4sgLZR82qp+lFn1SR7WV yfHorCJSnOt1CxY9kdsWgooEITWAP0/BNMntUOs4o/OLaif7R+vBR/DJpqIGgsJZ FLH3dIL/IJvXE6sErz9zVckS+DEGchq5GYTmsge0aJ9VrlZ9iAmSnxqOlVvDCwq+ 4zOAK3fO7J0PUQ80yJwGZYRFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVsOyNX JSOpBa7c++DpxbwFWeePMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCagBI2G1j+UwWtdBY1GA6IUa5yk1nBazVKtBRFzte4OZG39HzszFc+ NZExVQcW32sI4L6zGDhvM/lx68Ep97Bw7sig1Bfm+GsMQh/ouOVlVVSMcJNYWoSm tbHMtp4phppL7cv8WkCvah8GiAqlp+HyfCZOZYWF7c3rmYYdaTWcSJkx/L5vTk8X iCZfw6MVKUhjSr2KyurJgcTxJHAYih50+TV2jRrvzU0/kNOimgcbVwTdnZnzAs2P dk1jVHlhmiONdQcdXI6xZH6nvoyhesxZoXz7ipZ3mcESPwac9wL2dPfb/7SlOA8U cbg2B85q2w4V/C22LMij+F2o+1LKtBS9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:45 2025 by rpki-client