$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: aBico0vYks79h7pBCC+dsCRRkqxaL6U4ENWVzNvk804= Subject key identifier: 91:DC:E7:A6:B7:34:4E:62:A1:6D:A7:C6:EB:0A:0B:E3:8C:5C:53:ED Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 3489 Signing time: Thu 24 Apr 2025 14:59:51 +0000 Manifest this update: Thu 24 Apr 2025 14:59:51 +0000 Manifest next update: Thu 01 May 2025 14:59:51 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: wcK+78y9KTtMJoTAsBBL3CfFySlitjNUaB5x31IfD+A=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: gJwOccgnH3xfVK9Ge3NY4ACv1N9EO/ya1L5O9ulfS9A=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: lCjcuN3RSUzDTTX5oZhMnE3axtzeaFw5cyewHimqMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Apr 24 14:59:51 2025 GMT Not After : May 1 14:59:51 2025 GMT Subject: CN=680a51e7-0532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:67:93:f6:70:a7:6f:64:d9:d7:96:69:91: 52:97:ca:79:4f:50:5e:33:38:9b:05:d9:6f:e0:3d: 84:08:70:c1:7e:34:4f:91:73:41:87:29:ca:79:44: 8b:79:a1:6a:6e:7f:76:80:97:70:3f:c6:77:81:a6: 0b:6f:e2:fe:4a:79:7d:93:50:ab:c1:c8:73:ef:ea: 6d:a5:a4:4e:37:5f:9f:bd:96:d6:de:f8:3e:85:4f: b1:2d:3c:e7:97:94:9f:28:09:8d:1b:9a:82:aa:47: a1:ec:87:9c:0d:dc:9b:40:32:92:98:b1:ee:23:c8: 73:14:75:49:b4:d3:c5:90:7f:9b:cd:62:a0:9a:ad: 65:e2:08:c7:de:40:9a:12:a5:88:66:ca:35:8a:dd: 79:63:7e:98:8a:83:24:c2:03:1d:7b:82:f8:2d:ce: 9d:f9:9e:5c:08:7e:d8:dc:69:21:fd:f1:d5:40:d4: 7d:eb:fb:68:ea:8f:d2:9b:da:c2:a3:d3:a9:13:d7: 12:a4:82:85:0b:fa:3c:8c:10:b4:51:43:15:98:53: d0:97:ec:9f:49:0d:0b:84:c2:39:30:3f:8b:88:50: e6:d3:b4:7f:91:90:c7:9d:dc:63:96:f6:e3:f3:72: 46:98:28:c2:13:d4:46:2c:ff:b0:61:c4:59:40:84: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DC:E7:A6:B7:34:4E:62:A1:6D:A7:C6:EB:0A:0B:E3:8C:5C:53:ED X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:19:78:d9:91:8d:c3:ff:86:09:38:81:75:f3:12:00:d3:a0: 39:2e:67:cd:c6:c4:f6:80:c6:92:85:fd:9e:b8:72:84:4d:b9: 24:d7:33:16:ed:00:50:4e:ed:50:0a:68:fc:eb:16:75:75:8b: ca:5c:06:0b:ba:fa:c0:13:0b:43:2c:be:7e:c8:dc:e3:d6:1e: 99:7a:b6:9b:02:d2:b9:ca:3a:c1:d0:63:e5:85:9b:cd:30:b9: 6e:57:c3:30:b6:c7:5f:9b:45:76:2d:96:96:29:f6:3f:07:9b: 9f:ae:01:5d:e3:e4:7c:eb:e4:58:59:f1:ea:a0:43:8e:79:da: f6:46:fd:ac:ad:f5:f1:7b:01:2f:28:24:a9:e6:63:d9:14:e5: c4:15:b9:e6:5d:8f:20:ef:20:70:b1:36:4d:65:fc:41:76:6e: 16:4b:db:81:ee:03:a7:b3:26:fe:6e:54:d2:ea:a0:6f:3c:c4: 01:c6:6c:9c:28:8d:05:2a:ad:bc:6b:d8:82:94:f6:25:9a:14: a5:8a:83:02:9e:59:d0:3d:d0:31:12:4c:04:2b:d3:e1:bc:4b: f6:87:cb:06:d4:f8:76:e1:29:db:d6:30:aa:f0:20:2a:d0:0d: 28:ec:72:d8:e3:91:ad:08:3d:29:62:8d:0b:dc:47:40:32:c5: 65:75:4f:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUwNDI0MTQ1OTUxWhcNMjUwNTAxMTQ1OTUxWjAYMRYwFAYD VQQDEw02ODBhNTFlNy0wNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQBnk/Zwp29k2deWaZFSl8p5T1BeMzibBdlv4D2ECHDBfjRPkXNBhynKeUSL eaFqbn92gJdwP8Z3gaYLb+L+Snl9k1Crwchz7+ptpaRON1+fvZbW3vg+hU+xLTzn l5SfKAmNG5qCqkeh7IecDdybQDKSmLHuI8hzFHVJtNPFkH+bzWKgmq1l4gjH3kCa EqWIZso1it15Y36YioMkwgMde4L4Lc6d+Z5cCH7Y3Gkh/fHVQNR96/to6o/Sm9rC o9OpE9cSpIKFC/o8jBC0UUMVmFPQl+yfSQ0LhMI5MD+LiFDm07R/kZDHndxjlvbj 83JGmCjCE9RGLP+wYcRZQISsQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHc56a3 NE5ioW2nxusKC+OMXFPtMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHGXjZkY3D/4YJOIF18xIA06A5LmfNxsT2gMaShf2euHKETbkk1zMW 7QBQTu1QCmj86xZ1dYvKXAYLuvrAEwtDLL5+yNzj1h6ZerabAtK5yjrB0GPlhZvN MLluV8Mwtsdfm0V2LZaWKfY/B5ufrgFd4+R86+RYWfHqoEOOedr2Rv2srfXxewEv KCSp5mPZFOXEFbnmXY8g7yBwsTZNZfxBdm4WS9uB7gOnsyb+blTS6qBvPMQBxmyc KI0FKq28a9iClPYlmhSlioMCnlnQPdAxEkwEK9PhvEv2h8sG1Ph24Snb1jCq8CAq 0A0o7HLY45GtCD0pYo0L3EdAMsVldU/R -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:12 2025 by rpki-client