$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft File: LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json) Hash identifier: q3OyoGrl7h4D4CWznbZIHYIkUqiwSekBfEZY9Naaclw= Subject key identifier: 71:CE:43:BB:2D:79:62:09:12:11:42:04:E7:30:CA:EA:0E:27:CC:5A Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 Certificate issuer: /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft Manifest number: 16 Signing time: Fri 25 Apr 2025 06:58:39 +0000 Manifest this update: Fri 25 Apr 2025 06:58:38 +0000 Manifest next update: Fri 02 May 2025 06:58:38 +0000 Files and hashes: 1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: H0oSH8ElTciF/Can+84+FZtzl30YMB6Jp7ofVOckon4=) 2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: riovgsjK6T9Xk/OVypXbdv81H28kZxqc1J6kqB+epyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039 Validity Not Before: Apr 25 06:58:38 2025 GMT Not After : May 2 06:58:38 2025 GMT Subject: CN=680b329e-aea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:b1:b8:78:d2:04:80:59:9c:54:93:1b:53: 43:5b:d0:1d:fe:1a:b0:ec:cf:da:e3:60:a8:7f:75: 62:1b:16:88:60:e3:1f:6d:71:0c:95:1e:0d:21:86: d3:ce:ca:b6:d3:fe:dc:fa:d4:4a:01:75:28:3d:c0: 70:29:6a:f8:00:a4:0f:fa:f3:47:3e:a5:8a:33:6e: 90:a5:1c:b7:e0:44:63:b0:18:3e:65:30:c3:bf:b7: ea:a9:43:65:b3:a5:33:8b:59:e4:fd:1a:8b:c1:8a: 74:bc:55:bb:9a:2e:3f:ab:bf:0d:1f:23:4c:a2:1b: 30:d4:d4:c2:71:05:41:29:8a:03:ae:10:4d:19:ac: bf:0b:ad:0b:cb:82:e5:52:98:81:3b:03:84:be:3d: 9c:3d:35:d4:36:43:0c:db:c0:94:0c:67:d4:e7:35: b7:23:c9:a3:fa:fb:f2:69:45:bc:e6:73:bf:04:3d: 43:f5:b0:8f:05:ab:fc:50:5e:fc:fa:7f:94:6b:18: 28:36:92:52:03:9b:99:2d:75:53:9a:55:01:54:f7: 0b:4b:e7:2f:a0:a6:1c:1d:58:97:f3:53:43:3b:03: 7f:8a:5a:7e:94:d0:ea:fe:8f:58:17:4d:43:82:6f: 4d:e5:73:a5:27:a2:86:83:28:dd:f3:ea:34:f9:68: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CE:43:BB:2D:79:62:09:12:11:42:04:E7:30:CA:EA:0E:27:CC:5A X509v3 Authority Key Identifier: keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f8:8e:1b:12:b7:e2:a9:73:87:7b:f1:15:42:01:51:cf:a4: 19:bb:a4:81:04:21:d2:2d:4f:17:48:60:7a:ba:1e:e6:be:ad: 66:df:61:d5:bb:37:ac:ce:c0:73:85:90:a9:c3:9f:99:ba:8e: 2a:4f:c1:95:09:b7:65:09:1b:16:c2:66:92:33:a5:cb:43:15: 77:5c:af:91:58:11:75:28:b9:ab:3d:6f:01:ca:fd:48:6c:f1: b4:d3:bc:9b:f4:5b:8c:3a:5e:89:88:fd:81:e7:34:49:88:04: ba:df:fd:e8:2c:11:ed:db:dc:14:72:85:3f:e6:07:46:76:84: 9b:19:86:cc:b2:39:45:e5:cc:bd:ae:64:b3:3c:57:a0:c3:42: 6b:4b:71:83:b8:37:c9:27:3e:6b:c5:84:ec:16:5a:f3:bb:7c: 37:89:aa:22:fe:6f:ec:a8:80:0e:44:9e:db:c9:a9:99:b4:ce: 49:ad:c6:d0:a6:70:09:9b:c1:19:90:c2:4b:07:ad:51:34:85: 1c:00:cb:3e:84:9e:b0:c3:c2:8c:d9:8d:8a:6f:fe:7c:4a:0f: a0:d0:4b:65:82:46:5d:84:b4:39:f8:3d:fd:65:85:d0:bc:82: 01:21:70:b7:30:61:6c:92:10:32:16:55:22:45:b3:39:b0:13: 98:70:05:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjI4NTExMC8GA1UEBRMoMkUwMzdGMjIxQzlBOEQ1RkRDQzg4QzQzQ0E4QjI1RDQ0 MzZCQjAzOTAeFw0yNTA0MjUwNjU4MzhaFw0yNTA1MDIwNjU4MzhaMBgxFjAUBgNV BAMTDTY4MGIzMjllLWFlYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqPrG4eNIEgFmcVJMbU0Nb0B3+GrDsz9rjYKh/dWIbFohg4x9tcQyVHg0hhtPO yrbT/tz61EoBdSg9wHApavgApA/680c+pYozbpClHLfgRGOwGD5lMMO/t+qpQ2Wz pTOLWeT9GovBinS8VbuaLj+rvw0fI0yiGzDU1MJxBUEpigOuEE0ZrL8LrQvLguVS mIE7A4S+PZw9NdQ2QwzbwJQMZ9TnNbcjyaP6+/JpRbzmc78EPUP1sI8Fq/xQXvz6 f5RrGCg2klIDm5ktdVOaVQFU9wtL5y+gphwdWJfzU0M7A3+KWn6U0Or+j1gXTUOC b03lc6UnooaDKN3z6jT5aLwXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcc5Duy15 YgkSEUIE5zDK6g4nzFowHwYDVR0jBBgwFoAULgN/IhyajV/cyIxDyosl1ENrsDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2Mjg1LzhDMjU4QjEyMDI3 QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZfY3lJeER5b3NsMUVOcnNE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGdOX0loeWFqVl9jeUl4RHlvc2wxRU5yc0RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 Mjg1LzhDMjU4QjEyMDI3QjExRjBBOTQ2RUQzNEM0RjlBRTAyL0xnTl9JaHlhalZf Y3lJeER5b3NsMUVOcnNEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEz4jhsSt+Kpc4d78RVCAVHPpBm7pIEEIdItTxdIYHq6Hua+rWbfYdW7 N6zOwHOFkKnDn5m6jipPwZUJt2UJGxbCZpIzpctDFXdcr5FYEXUouas9bwHK/Uhs 8bTTvJv0W4w6XomI/YHnNEmIBLrf/egsEe3b3BRyhT/mB0Z2hJsZhsyyOUXlzL2u ZLM8V6DDQmtLcYO4N8knPmvFhOwWWvO7fDeJqiL+b+yogA5EntvJqZm0zkmtxtCm cAmbwRmQwksHrVE0hRwAyz6EnrDDwozZjYpv/nxKD6DQS2WCRl2EtDn4Pf1lhdC8 ggEhcLcwYWySEDIWVSJFszmwE5hwBSw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:43 2025 by rpki-client