$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json) Hash identifier: rZ8ePIWaLk0qaf92CoV9QLqvPDhYRmBKWWNmy6RzRWo= Subject key identifier: D2:F0:2F:35:C4:7B:06:51:A5:97:49:82:79:7D:BC:19:9E:31:85:D0 Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft Manifest number: 0AF5 Signing time: Thu 24 Apr 2025 19:15:35 +0000 Manifest this update: Thu 24 Apr 2025 19:15:35 +0000 Manifest next update: Thu 01 May 2025 19:15:35 +0000 Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: rB41Aea9755F6H1WQ8zTz2U56HHuAOnX1m9/09zewDY=) 2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: wUVOr7bU61HRquV+b+lva4AIoFme7G1z56Vw7wfpFH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F10A, serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Validity Not Before: Apr 24 19:15:35 2025 GMT Not After : May 1 19:15:35 2025 GMT Subject: CN=680a8dd7-0d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:99:45:a1:13:d7:17:ea:31:a4:47:9b:81:a0: 47:3a:67:09:03:4a:91:0d:1f:1f:a6:c1:e0:d4:8d: 26:40:5c:f2:d3:91:01:a4:f6:6d:b1:81:7e:7c:7c: bf:cd:95:0f:2f:2b:58:5f:76:b7:48:05:9d:10:ec: 68:b3:d7:0b:a1:7b:c4:1b:1f:74:f5:92:07:b3:79: ed:a2:c4:ac:aa:f2:cb:e5:d3:ea:a6:09:7f:bb:5e: 2b:f9:7c:75:36:3c:0c:d4:69:cf:c8:0a:46:9f:a9: 48:9d:54:2b:23:94:bf:4f:30:32:3e:8e:c6:ea:10: 9a:3b:f5:75:bb:71:15:32:c1:94:8b:9b:d1:4e:dd: e6:41:8f:57:33:8c:bb:11:77:78:2b:39:9a:3a:15: 34:4f:bd:c4:bf:0c:1e:dc:7f:86:4d:31:d7:31:de: a5:51:e9:37:48:7b:da:3f:b9:68:96:55:77:13:39: 22:9c:4e:f1:23:74:7c:d7:fe:9a:6b:1d:ca:cb:de: e9:63:3d:5a:ec:19:95:1d:f1:83:4f:01:30:c7:40: 26:17:1a:50:66:b6:8a:3a:59:17:d2:90:b7:46:fd: e4:ad:59:61:41:46:31:26:10:c5:84:b1:75:1f:e4: 28:35:9b:10:c3:0b:29:63:8e:d2:70:da:35:0b:fd: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F0:2F:35:C4:7B:06:51:A5:97:49:82:79:7D:BC:19:9E:31:85:D0 X509v3 Authority Key Identifier: keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7e:35:fb:46:fe:a9:61:c5:2d:f7:35:35:fa:e1:6a:c9:91: 64:7b:e9:80:f1:cb:a2:b8:eb:ea:da:ab:48:90:05:b0:59:e8: 99:a4:6e:02:f4:47:8a:2c:95:15:d1:d0:64:ae:65:90:28:4c: a3:1a:bd:e2:1b:44:d6:32:b8:86:fc:ac:e7:05:86:02:8c:a5: 86:b0:f8:e6:09:76:1b:a4:e5:b2:ae:7d:a0:6a:d5:33:21:f6: d3:34:f7:67:07:9d:e9:85:7f:b7:20:78:47:f4:55:00:1b:7c: 5f:c1:a5:3b:9a:9f:03:98:9d:b1:61:a6:67:d5:10:ed:27:9e: 6a:17:68:c5:ae:42:6c:58:5e:36:02:d0:64:9c:09:70:17:df: 83:04:70:f9:7f:19:2d:57:17:74:20:2a:68:70:5b:47:3e:c2: 15:ab:d4:19:c1:fd:f1:50:a0:36:af:9c:49:b9:47:72:43:1b: b8:e5:14:cf:e6:a9:cd:13:27:7b:7b:be:42:5b:ae:d1:c6:01: 31:a9:bd:1a:0a:53:f0:02:c6:ac:42:29:e8:67:90:1d:b6:65: e1:c0:01:b4:97:2a:1e:0a:1c:7c:7d:ff:bf:d5:80:22:4c:6e: 8d:65:e2:b2:aa:47:ce:fe:11:9a:cf:44:3a:bf:c6:6f:ad:83: 09:91:a8:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYxMEExMTAvBgNVBAUTKDJENUNDQ0Y3QzMwRUI2M0NEREVBMzRCRTgzQkU2MEJC MEUwMjdBMTMwHhcNMjUwNDI0MTkxNTM1WhcNMjUwNTAxMTkxNTM1WjAYMRYwFAYD VQQDEw02ODBhOGRkNy0wZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+5lFoRPXF+oxpEebgaBHOmcJA0qRDR8fpsHg1I0mQFzy05EBpPZtsYF+fHy/ zZUPLytYX3a3SAWdEOxos9cLoXvEGx909ZIHs3ntosSsqvLL5dPqpgl/u14r+Xx1 NjwM1GnPyApGn6lInVQrI5S/TzAyPo7G6hCaO/V1u3EVMsGUi5vRTt3mQY9XM4y7 EXd4KzmaOhU0T73Evwwe3H+GTTHXMd6lUek3SHvaP7lollV3EzkinE7xI3R81/6a ax3Ky97pYz1a7BmVHfGDTwEwx0AmFxpQZraKOlkX0pC3Rv3krVlhQUYxJhDFhLF1 H+QoNZsQwwspY47ScNo1C/3fEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLwLzXE ewZRpZdJgnl9vBmeMYXQMB8GA1UdIwQYMBaAFC1czPfDDrY83eo0voO+YLsOAnoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjEwQS8yNzQ1NTdGRTQz MTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3RqemQ2alMtZzc1Z3V3NENl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWek05OE1PdGp6ZDZqUy1nNzVndXc0Q2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjEwQS8yNzQ1NTdGRTQzMTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3Rq emQ2alMtZzc1Z3V3NENlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBifjX7Rv6pYcUt9zU1+uFqyZFke+mA8cuiuOvq2qtIkAWwWeiZpG4C 9EeKLJUV0dBkrmWQKEyjGr3iG0TWMriG/KznBYYCjKWGsPjmCXYbpOWyrn2gatUz IfbTNPdnB53phX+3IHhH9FUAG3xfwaU7mp8DmJ2xYaZn1RDtJ55qF2jFrkJsWF42 AtBknAlwF9+DBHD5fxktVxd0ICpocFtHPsIVq9QZwf3xUKA2r5xJuUdyQxu45RTP 5qnNEyd7e75CW67RxgExqb0aClPwAsasQinoZ5AdtmXhwAG0lyoeChx8ff+/1YAi TG6NZeKyqkfO/hGaz0Q6v8ZvrYMJkagM -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:35 2025 by rpki-client