$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: jtSVnFvPLspwxk4oed4gwnMCmamisbxXwiU7eTPIakQ= Subject key identifier: 24:43:8F:D3:A8:7E:0E:99:92:60:1F:56:23:9A:DF:DA:FF:A4:09:1D Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 010D Signing time: Fri 25 Apr 2025 04:07:20 +0000 Manifest this update: Fri 25 Apr 2025 04:07:20 +0000 Manifest next update: Fri 02 May 2025 04:07:20 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: tDH26HsXOyKTMOKifG1y0xHudLAaJRq1cNx+zZ3YpHM=) 2: 624EED84E05611EF94B15084C4F9AE02.roa (hash: 9e4pncNZ34MiHX43g5ImhaCBiJWYtaKufup08D6wHzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: Apr 25 04:07:20 2025 GMT Not After : May 2 04:07:20 2025 GMT Subject: CN=680b0a78-ccf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:c5:81:7e:c7:b4:4c:00:54:a9:85:13:65: 5f:c7:bb:03:79:b0:07:5f:46:1a:09:48:d1:4d:b8: ce:fb:46:4b:8a:b6:09:ee:7c:e0:41:4b:37:7f:22: 74:ed:49:bb:cc:ae:78:d0:e2:af:5b:ee:da:f5:ca: c1:bd:17:c8:db:7f:0c:40:0d:cf:ab:d1:9d:78:5d: 1d:7e:46:b3:f1:6a:a3:88:7e:32:82:8a:ec:21:c2: d7:2a:a8:d6:88:79:3b:1a:86:b1:41:ff:8f:7f:8b: 86:2c:9c:08:95:95:dd:46:03:d8:55:2f:1d:bf:5c: e9:de:83:38:fe:83:42:a1:81:7b:c2:b3:ec:70:17: c4:2f:ec:d2:1f:92:64:41:6c:62:38:e4:f3:0f:fd: b8:d2:6b:bb:82:fd:7b:ac:41:b6:70:e9:66:9f:43: bc:7e:71:86:bb:4d:7b:85:2e:5f:8e:86:82:fa:aa: c7:8e:57:20:cd:4d:33:fc:57:26:77:ad:63:ce:27: 06:51:8d:47:cf:de:d2:e9:50:b7:ba:d8:31:96:0e: b9:05:ca:11:e0:36:00:4b:27:21:f2:67:ea:ac:19: d3:25:4c:aa:d8:99:05:2c:cb:86:1f:a5:6e:dc:e6: cd:0a:d7:b6:98:ca:8e:71:87:f3:47:47:25:fb:06: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:43:8F:D3:A8:7E:0E:99:92:60:1F:56:23:9A:DF:DA:FF:A4:09:1D X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:70:90:39:2b:91:e6:83:a7:b7:a7:a0:fc:48:3b:bd:42:61: 61:52:16:91:90:bb:67:e3:e2:9a:d6:24:76:6c:6f:fe:26:ec: bd:ec:0d:8a:25:96:af:a6:4b:5a:e0:5a:bd:2c:7c:41:8c:1e: 25:7c:c6:c1:5f:12:57:f7:74:ee:3e:84:7b:16:14:12:f5:50: 8a:cf:ea:96:1c:d4:27:05:94:74:47:ae:dc:3c:34:3b:62:87: 3c:94:a9:06:7a:a7:98:2b:d5:bb:29:68:6f:3f:eb:52:bf:a6: e0:a3:b7:95:11:ba:50:82:88:65:0d:fe:04:16:f2:9c:47:74: 44:07:f0:13:8d:cd:ff:21:e2:db:b0:0e:d5:e0:18:b0:f4:a7: ec:13:0e:6c:08:75:3d:20:c3:36:d8:47:54:76:1a:f4:fb:a4: c8:87:d7:87:39:49:0e:39:27:9b:78:a7:24:7c:41:ee:28:a3: 48:f1:07:b2:4e:0a:61:7a:e6:03:6b:79:ad:d8:78:3f:c0:0c: 6f:c6:2b:cd:7d:b3:73:19:11:a0:60:b3:17:ac:3f:72:2b:82: 85:8e:af:f5:2c:77:9a:29:57:17:85:6b:54:ed:f4:ea:7b:7f: f8:ec:ed:9b:02:b5:80:ea:c7:0f:c6:3b:c8:e8:34:35:ff:86: 89:2b:f9:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUwNDI1MDQwNzIwWhcNMjUwNTAyMDQwNzIwWjAYMRYwFAYD VQQDEw02ODBiMGE3OC1jY2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGHFgX7HtEwAVKmFE2Vfx7sDebAHX0YaCUjRTbjO+0ZLirYJ7nzgQUs3fyJ0 7Um7zK540OKvW+7a9crBvRfI238MQA3Pq9GdeF0dfkaz8WqjiH4ygorsIcLXKqjW iHk7GoaxQf+Pf4uGLJwIlZXdRgPYVS8dv1zp3oM4/oNCoYF7wrPscBfEL+zSH5Jk QWxiOOTzD/240mu7gv17rEG2cOlmn0O8fnGGu017hS5fjoaC+qrHjlcgzU0z/Fcm d61jzicGUY1Hz97S6VC3utgxlg65BcoR4DYASych8mfqrBnTJUyq2JkFLMuGH6Vu 3ObNCte2mMqOcYfzR0cl+wauTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRDj9Oo fg6ZkmAfViOa39r/pAkdMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF UWFSUDNLWWZRck9tT3VFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfcJA5K5Hmg6e3p6D8SDu9QmFhUhaRkLtn4+Ka1iR2bG/+Juy97A2K JZavpkta4Fq9LHxBjB4lfMbBXxJX93TuPoR7FhQS9VCKz+qWHNQnBZR0R67cPDQ7 Yoc8lKkGeqeYK9W7KWhvP+tSv6bgo7eVEbpQgohlDf4EFvKcR3REB/ATjc3/IeLb sA7V4Biw9KfsEw5sCHU9IMM22EdUdhr0+6TIh9eHOUkOOSebeKckfEHuKKNI8Qey TgpheuYDa3mt2Hg/wAxvxivNfbNzGRGgYLMXrD9yK4KFjq/1LHeaKVcXhWtU7fTq e3/47O2bArWA6scPxjvI6DQ1/4aJK/na -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:10 2025 by rpki-client