$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: BdgTahHuCLPB0jm5IbS96SVy/uJhSkp4yAoVh904JAs= Subject key identifier: A8:6E:D6:6F:96:11:D8:6B:DE:80:93:26:60:A4:F6:CF:83:9C:DC:14 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 0126 Signing time: Fri 25 Apr 2025 03:44:22 +0000 Manifest this update: Fri 25 Apr 2025 03:44:22 +0000 Manifest next update: Fri 02 May 2025 03:44:22 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: UfDMzE2sXpkPNOZo9S1XcJPyCteLdiPv+gtOSM7Rs+I=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: K2l/EtZxWeLVYqj5ycNq5EmQOfjL5aHh+ijS2CAjoJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Apr 25 03:44:22 2025 GMT Not After : May 2 03:44:22 2025 GMT Subject: CN=680b0516-39a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:9b:89:a1:f5:7c:f4:22:17:c6:29:91:09: 67:41:3d:15:96:58:06:69:27:74:14:ea:b2:1a:1a: de:ab:bd:cb:c4:02:05:63:49:0b:cd:db:65:d3:ef: af:68:b7:ed:b7:7f:80:25:5a:94:aa:23:2b:ee:67: 59:8e:4d:e5:2c:b9:19:07:7a:a2:86:bd:96:30:5f: 6b:99:11:4b:d3:0b:18:07:02:6f:7e:a6:64:8c:e5: f3:01:95:ce:1b:e1:e3:59:a8:40:73:69:7a:da:f4: 3c:c1:ab:b7:cc:ba:f2:73:10:f9:ca:9a:20:0d:29: bb:50:72:b2:34:5c:d0:55:39:fc:fb:6b:14:74:21: bd:3c:3c:9e:50:c4:6a:4c:db:3e:59:02:5d:26:64: 08:0a:ea:8e:c4:83:f7:26:84:31:44:60:d9:b8:e3: b5:ee:39:db:77:c7:cc:b5:9d:a6:0e:a4:6c:30:e0: 96:7f:b4:0d:f9:84:b9:fe:9b:85:2f:b2:a8:ba:e9: 8a:51:a1:8c:50:e4:92:b9:8b:2e:fc:5f:cd:64:30: e7:33:80:1f:11:92:a3:37:53:f8:fa:f6:82:9c:5b: 7e:5c:27:c5:11:e6:03:48:75:94:ca:92:a6:ca:7a: 0c:f7:d8:88:04:4d:e1:94:c0:f3:29:78:22:ee:78: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:D6:6F:96:11:D8:6B:DE:80:93:26:60:A4:F6:CF:83:9C:DC:14 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b1:89:09:2f:49:72:7b:ec:e1:01:84:b2:3b:1f:47:92:0b: 9c:86:16:ac:01:e6:53:15:6d:2d:ea:b2:de:90:ec:62:4a:85: bb:51:6b:f7:1f:be:6e:fe:ca:d0:b5:15:20:c2:52:ab:73:98: 34:14:54:fe:b1:4a:eb:3c:1f:63:d6:63:f3:f0:c5:18:85:fc: dc:f8:41:60:24:b3:d7:8a:22:c9:c1:27:c2:4a:aa:42:e7:e3: 08:9f:2e:9f:38:d4:c3:c8:c9:81:76:43:fe:b0:d7:f3:c8:1d: fc:14:62:eb:04:b8:15:22:8b:a4:1b:4d:6e:ef:0d:d2:50:4e: 52:86:ec:27:60:55:c3:3b:9d:40:37:d7:4d:ae:88:bc:f3:1e: 13:06:30:62:79:a8:72:8e:b2:f7:75:2e:34:99:5b:2e:93:94: da:1d:98:f3:5f:2f:cc:e1:4e:5a:ea:85:9b:b0:93:b8:62:90: ad:e9:08:47:a2:b0:70:46:ff:5b:e1:dc:38:55:b7:e2:96:79: 27:d6:2b:fe:22:2d:d2:2d:ed:b6:ff:ae:42:bd:49:d3:0e:0a: 55:bb:81:d5:9e:7c:68:10:c2:50:9a:30:55:16:e7:0c:8b:5e: f4:f0:0c:15:66:d1:03:ef:82:89:b5:23:90:66:2e:c8:20:68: 66:65:ed:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwNDI1MDM0NDIyWhcNMjUwNTAyMDM0NDIyWjAYMRYwFAYD VQQDEw02ODBiMDUxNi0zOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ+biaH1fPQiF8YpkQlnQT0VllgGaSd0FOqyGhreq73LxAIFY0kLzdtl0++v aLftt3+AJVqUqiMr7mdZjk3lLLkZB3qihr2WMF9rmRFL0wsYBwJvfqZkjOXzAZXO G+HjWahAc2l62vQ8wau3zLrycxD5ypogDSm7UHKyNFzQVTn8+2sUdCG9PDyeUMRq TNs+WQJdJmQICuqOxIP3JoQxRGDZuOO17jnbd8fMtZ2mDqRsMOCWf7QN+YS5/puF L7KouumKUaGMUOSSuYsu/F/NZDDnM4AfEZKjN1P4+vaCnFt+XCfFEeYDSHWUypKm ynoM99iIBE3hlMDzKXgi7nhtIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhu1m+W Edhr3oCTJmCk9s+DnNwUMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWsYkJL0lye+zhAYSyOx9HkguchhasAeZTFW0t6rLekOxiSoW7UWv3 H75u/srQtRUgwlKrc5g0FFT+sUrrPB9j1mPz8MUYhfzc+EFgJLPXiiLJwSfCSqpC 5+MIny6fONTDyMmBdkP+sNfzyB38FGLrBLgVIoukG01u7w3SUE5ShuwnYFXDO51A N9dNroi88x4TBjBieahyjrL3dS40mVsuk5TaHZjzXy/M4U5a6oWbsJO4YpCt6QhH orBwRv9b4dw4Vbfilnkn1iv+Ii3SLe22/65CvUnTDgpVu4HVnnxoEMJQmjBVFucM i1708AwVZtED74KJtSOQZi7IIGhmZe3y -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:17 2025 by rpki-client