$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json) Hash identifier: xkmtMAlXnVSnOTcdUc3DhcRNkEXIC2ZvmgUI9wRPkDQ= Subject key identifier: 10:DB:CF:A7:D3:2D:86:31:33:F0:A5:E2:43:97:B7:A4:0E:69:DE:A0 Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft Manifest number: 0644 Signing time: Thu 24 Apr 2025 22:23:07 +0000 Manifest this update: Thu 24 Apr 2025 22:23:07 +0000 Manifest next update: Thu 01 May 2025 22:23:07 +0000 Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: MN/ALrjdg+jbIesXJmeA3jth+ib+yrjJm/lml6G8YhM=) 2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=) 3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Apr 24 22:23:07 2025 GMT Not After : May 1 22:23:07 2025 GMT Subject: CN=680ab9cb-675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:1f:8a:df:6d:27:78:93:45:88:17:b5:44: ed:7b:dc:2a:81:c9:48:77:c9:18:9b:bc:34:30:34: 53:7b:8b:28:a8:b7:e4:81:17:a8:3f:5f:db:9f:41: 77:ac:c9:4c:86:18:4c:8c:1d:70:b1:fb:4c:d9:d8: 87:d0:36:31:be:a4:16:5a:6c:0e:47:d1:9a:9f:8b: 7c:d1:ee:40:7f:f7:51:c3:11:35:d3:68:79:74:c6: 4b:7a:94:14:56:f3:da:b9:6f:aa:41:f2:3c:ca:4e: 03:af:a1:82:1d:f4:b0:63:80:8e:17:b2:9b:37:a9: 13:e2:24:aa:b4:2a:ca:fd:6d:5a:96:cc:4a:d5:e2: dd:24:f7:78:af:7e:36:f1:a6:45:87:e5:fb:cd:ff: 37:18:f3:61:ef:9b:96:80:2b:4f:40:8f:e6:5d:d8: a2:f7:0c:8f:85:2d:97:33:f6:ac:e6:9e:93:92:48: d8:fc:80:e8:9c:5d:8c:f0:45:6b:bc:54:43:0a:3e: 2e:d7:52:09:ae:10:3c:e7:f5:fd:94:17:e8:0f:e7: 05:f8:53:3d:73:82:42:85:d9:22:2d:32:45:4e:d1: 2d:6e:a9:46:d5:76:fd:eb:54:49:3b:f2:1a:e3:96: d3:a6:fd:4e:b0:9c:09:5e:c7:fc:a0:dd:f5:ee:67: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:CF:A7:D3:2D:86:31:33:F0:A5:E2:43:97:B7:A4:0E:69:DE:A0 X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ac:13:d8:74:51:39:9f:48:b9:c1:1d:05:9e:c5:dc:21:db: ee:8e:2f:ef:69:c5:b1:1e:8f:2f:f1:a9:52:a1:d1:db:b6:34: 6c:66:4b:99:a1:dc:86:ef:75:06:11:36:ca:a2:4a:36:4b:66: 99:5e:05:86:73:e4:f7:56:c9:45:7d:6e:9d:5f:4e:05:83:dc: d3:0d:49:ab:77:4b:25:2b:bb:ba:cc:3f:b2:48:d0:bb:50:21: 75:98:02:31:c1:ae:ee:dc:ee:54:38:00:34:8f:4e:8e:72:3f: 2c:44:1c:f0:3c:23:c1:51:24:36:8e:e6:67:e8:7b:e7:21:7c: d9:af:a2:e1:74:28:71:ed:a8:3a:f9:7a:91:f9:cb:2b:48:8d: 06:7f:35:f1:fb:0e:31:19:38:60:31:b5:ae:ee:99:95:a4:3b: 7b:c1:ea:f7:87:98:d2:9f:5b:a6:08:2a:b9:5c:0d:36:24:f1: b7:55:68:fd:09:7d:f1:42:7d:94:02:d5:0a:53:d9:7d:86:36: 25:1e:af:41:a4:06:7c:77:a1:bc:6c:39:83:33:90:c2:61:da: 21:48:b0:fe:53:ba:eb:83:c3:e8:1f:ab:68:2f:12:1e:0c:d7: ee:6f:d6:a2:36:fb:50:77:e0:ee:91:e8:38:22:73:54:1d:65: ab:54:fa:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUwNDI0MjIyMzA3WhcNMjUwNTAxMjIyMzA3WjAYMRYwFAYD VQQDEw02ODBhYjljYi02NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TIfit9tJ3iTRYgXtUTte9wqgclId8kYm7w0MDRTe4soqLfkgReoP1/bn0F3 rMlMhhhMjB1wsftM2diH0DYxvqQWWmwOR9Gan4t80e5Af/dRwxE102h5dMZLepQU VvPauW+qQfI8yk4Dr6GCHfSwY4COF7KbN6kT4iSqtCrK/W1alsxK1eLdJPd4r342 8aZFh+X7zf83GPNh75uWgCtPQI/mXdii9wyPhS2XM/as5p6TkkjY/IDonF2M8EVr vFRDCj4u11IJrhA85/X9lBfoD+cF+FM9c4JChdkiLTJFTtEtbqlG1Xb961RJO/Ia 45bTpv1OsJwJXsf8oN317mcw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDbz6fT LYYxM/Cl4kOXt6QOad6gMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOrBPYdFE5n0i5wR0FnsXcIdvuji/vacWxHo8v8alSodHbtjRsZkuZ odyG73UGETbKoko2S2aZXgWGc+T3VslFfW6dX04Fg9zTDUmrd0slK7u6zD+ySNC7 UCF1mAIxwa7u3O5UOAA0j06Ocj8sRBzwPCPBUSQ2juZn6HvnIXzZr6LhdChx7ag6 +XqR+csrSI0GfzXx+w4xGThgMbWu7pmVpDt7wer3h5jSn1umCCq5XA02JPG3VWj9 CX3xQn2UAtUKU9l9hjYlHq9BpAZ8d6G8bDmDM5DCYdohSLD+U7rrg8PoH6toLxIe DNfub9aiNvtQd+Dukeg4InNUHWWrVPqk -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:59 2025 by rpki-client