$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: rw3kG2guXOZOTfnS1wBBI/SiUcgUhR+xp2deE80+ts4= Subject key identifier: FF:A9:D6:E4:3E:86:6E:31:88:3F:90:D6:14:AC:18:CF:DB:B4:D0:C6 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34A4 Signing time: Thu 24 Apr 2025 14:24:20 +0000 Manifest this update: Thu 24 Apr 2025 14:24:20 +0000 Manifest next update: Thu 01 May 2025 14:24:20 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: Ly7OpFHkJJmy0qBWVDmvDL9pl/bT2RisBMvdAp7cbok=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Apr 24 14:24:20 2025 GMT Not After : May 1 14:24:20 2025 GMT Subject: CN=680a4994-62e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:8b:b5:80:a0:9e:c0:af:05:5d:25:ea:27: e1:4f:3f:c9:bb:a4:af:85:ef:25:6f:f7:f1:17:b4: 3d:5e:05:de:98:ab:1b:8e:42:0b:34:ad:cc:17:24: 1d:1a:57:b8:5d:bf:b3:b5:8a:20:48:14:28:f0:07: 64:2a:b8:61:aa:ba:56:17:15:ec:22:e4:8c:bb:25: d0:e7:00:c9:4b:d2:76:83:7a:09:b3:4c:03:2e:12: 3b:a2:7c:0c:f5:75:3e:85:e2:bc:e7:4b:b6:35:2b: 08:97:29:28:5a:aa:1b:bf:b8:59:d1:11:ec:d3:1f: 84:1c:21:31:1a:c2:3d:e9:89:d6:bc:b4:6c:eb:1a: b0:ac:07:57:32:0f:64:d6:0c:64:26:fc:05:33:c7: 01:63:d6:7b:1a:9d:63:56:f2:31:79:b7:60:21:a1: 19:ed:b1:d6:fe:44:af:6f:1e:0a:ee:c0:c8:a1:04: b1:05:dd:56:30:fb:4a:8a:37:e0:f8:09:80:a9:75: 5d:43:3b:f2:7e:bf:31:56:a8:ab:57:57:1d:ad:9e: 92:7d:9a:11:65:45:08:37:31:33:b6:d0:5d:a2:66: 50:e9:70:3f:68:e9:18:d3:c3:cd:dc:68:55:65:0f: 29:10:3f:d8:c8:f4:fa:4a:19:21:c2:9f:38:4b:a8: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:D6:E4:3E:86:6E:31:88:3F:90:D6:14:AC:18:CF:DB:B4:D0:C6 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:7d:9b:63:fc:77:ee:ec:cd:72:ad:84:d5:3e:13:80:3b: bf:0f:b6:50:49:a6:f1:f7:b2:95:16:8f:4e:40:0b:86:61:e2: 90:63:ff:ab:b9:cd:13:dd:ba:79:6b:5b:f6:07:ec:4d:ce:45: b1:6d:f6:4f:37:f4:d2:86:03:ed:12:8e:7d:37:1b:a3:25:ef: ab:3d:b4:72:fa:c6:9f:30:03:80:e3:6b:8a:16:2e:6b:0e:f9: 57:ff:28:0b:a8:20:86:d6:73:43:18:dd:3f:62:08:80:4e:dc: 29:82:4a:10:11:5f:dc:b9:49:b4:1b:03:75:9a:15:01:5b:98: a1:47:a0:00:8e:31:e9:c8:96:ce:9d:6f:b2:13:ac:1d:0a:38: b8:68:ed:da:6a:f8:94:bb:18:aa:4c:70:6f:e9:2d:7c:61:b8: 84:4e:05:8c:b6:02:b2:26:6d:2b:2a:fb:6a:66:0b:10:bd:c0: 6f:c6:e5:4e:3d:37:5f:ff:73:5a:d0:ce:09:34:b9:20:74:59: bf:3e:5b:55:3a:be:da:95:19:ee:67:fb:1a:3e:3f:ea:22:dc: f9:33:43:ab:bf:f1:f5:86:a6:7f:9e:5a:77:35:9c:47:94:ef: b5:c8:87:f4:f1:6b:c0:14:e4:0e:f9:6f:0d:10:51:5c:4a:a9: e7:f2:31:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNDI0MTQyNDIwWhcNMjUwNTAxMTQyNDIwWjAYMRYwFAYD VQQDEw02ODBhNDk5NC02MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NqLtYCgnsCvBV0l6ifhTz/Ju6Svhe8lb/fxF7Q9XgXemKsbjkILNK3MFyQd Gle4Xb+ztYogSBQo8AdkKrhhqrpWFxXsIuSMuyXQ5wDJS9J2g3oJs0wDLhI7onwM 9XU+heK850u2NSsIlykoWqobv7hZ0RHs0x+EHCExGsI96YnWvLRs6xqwrAdXMg9k 1gxkJvwFM8cBY9Z7Gp1jVvIxebdgIaEZ7bHW/kSvbx4K7sDIoQSxBd1WMPtKijfg +AmAqXVdQzvyfr8xVqirV1cdrZ6SfZoRZUUINzEzttBdomZQ6XA/aOkY08PN3GhV ZQ8pED/YyPT6Shkhwp84S6ikiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+p1uQ+ hm4xiD+Q1hSsGM/btNDGMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXbn2bY/x37uzNcq2E1T4TgDu/D7ZQSabx97KVFo9OQAuGYeKQY/+r uc0T3bp5a1v2B+xNzkWxbfZPN/TShgPtEo59NxujJe+rPbRy+safMAOA42uKFi5r DvlX/ygLqCCG1nNDGN0/YgiATtwpgkoQEV/cuUm0GwN1mhUBW5ihR6AAjjHpyJbO nW+yE6wdCji4aO3aaviUuxiqTHBv6S18YbiETgWMtgKyJm0rKvtqZgsQvcBvxuVO PTdf/3Na0M4JNLkgdFm/PltVOr7alRnuZ/saPj/qItz5M0Orv/H1hqZ/nlp3NZxH lO+1yIf08WvAFOQO+W8NEFFcSqnn8jEK -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:37 2025 by rpki-client