$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft File: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft (raw, json) Hash identifier: AW/VzPdekNGkNQiWG35dC4gHGx6ieA82i4ljyiTWGCY= Subject key identifier: E1:4C:FA:DB:19:65:4F:68:7C:7C:84:F1:6B:4A:7F:AC:93:B4:0E:08 Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft Manifest number: 0B59 Signing time: Thu 24 Apr 2025 19:02:37 +0000 Manifest this update: Thu 24 Apr 2025 19:02:36 +0000 Manifest next update: Thu 01 May 2025 19:02:36 +0000 Files and hashes: 1: LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl (hash: 8k9DxQklaVG16/BYvWJ6gt1LqwOp8v6+k9slyMq7bS0=) 2: 933DE524C2B811EEAA1FD486C4F9AE02.roa (hash: fUCvUsdE5BjK2E7JovOFAfK5/ksn+RyULPqTK3NyDTE=) 3: F8088528E65D11EDB5112931C4F9AE02.roa (hash: Lzmul2Cef2NofonlnFrwzVunzHlMbNBTtbdpet7f/jA=) 4: D9173AE459E811ED85614349C4F9AE02.roa (hash: zJ5BK1dHdR/yZ3djpSjZWWfhHBcKyuyePotDm2SHibI=) 5: D7D5B86859E811ED85614349C4F9AE02.roa (hash: Ltz6LBvyoZXhbJ9WTgNP/OOOspHsk57wHv6qE/cOGxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F Validity Not Before: Apr 24 19:02:36 2025 GMT Not After : May 1 19:02:36 2025 GMT Subject: CN=680a8acd-e80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:97:79:af:14:ed:44:d0:ca:0f:c1:b4:ee: c9:a4:fc:86:d5:5f:7c:f9:4a:ab:d9:1f:74:ec:77: 36:db:fe:6a:bf:9a:dd:66:2e:10:09:3c:8e:a2:0f: 61:64:e9:a7:e6:df:02:a1:d5:a5:17:76:48:a7:d5: 0a:7c:4d:c6:8d:c1:10:7d:53:6c:62:d6:8e:98:0d: 8c:bd:24:cf:a7:e4:c7:fa:4b:64:27:d8:0b:fd:27: d2:ae:e9:f6:96:c5:7d:42:c1:56:e6:1c:b9:0d:36: 28:8c:15:80:74:31:3f:4f:eb:7a:50:05:78:19:ba: 33:1b:8c:33:f9:fb:e3:30:7d:5a:29:d9:66:b6:a2: c9:d5:a1:dd:de:dc:92:9b:5e:7f:d3:de:21:71:87: 29:e8:58:b3:c3:a3:55:b1:06:5f:f8:6a:b4:76:7c: 8c:19:68:e0:fe:c1:2c:4a:7f:96:59:8f:4b:a5:14: 3d:1b:fa:20:d3:dd:62:6f:d1:f6:ec:95:1a:2a:fb: 0b:9f:bc:63:5d:7c:44:5b:4f:fe:c7:8f:f0:de:71: d7:57:c2:1b:3d:00:b7:4e:1c:e2:ad:d3:a0:49:2d: c1:ac:bb:20:38:14:b8:69:5b:ce:59:96:ad:93:17: 3a:44:6d:99:10:88:6b:80:70:19:c6:d0:b9:df:4a: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:FA:DB:19:65:4F:68:7C:7C:84:F1:6B:4A:7F:AC:93:B4:0E:08 X509v3 Authority Key Identifier: keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:14:85:3b:3b:bb:cd:65:a0:6f:e9:a2:be:fa:18:66:b7:76: 4a:56:6a:46:e5:63:da:78:e3:6a:8f:3f:bc:68:23:0c:9b:08: 82:e8:ea:0e:42:8d:12:32:2a:46:7e:93:58:94:68:53:6b:0d: 39:2d:00:53:08:af:d4:e9:f9:f3:b9:dd:13:f7:ed:1b:2e:43: d9:c9:f7:aa:92:26:66:6a:a0:42:0a:38:de:26:8e:4f:40:49: e2:54:21:ad:2d:e5:22:51:33:4d:e8:0d:6a:15:15:3c:4d:30: dc:51:cc:f8:48:18:8f:e5:45:5f:1b:01:2c:48:b2:2c:84:5d: 6d:1b:8e:6d:0b:5c:a9:62:4a:32:e9:a9:d1:1d:c2:b5:43:81: f5:e1:dc:eb:f8:42:72:ae:26:96:6c:1e:5f:d2:d4:dd:1d:28: 0b:23:6f:c3:e1:7a:6b:2a:57:93:c9:64:ca:09:35:ba:b7:79: 63:3c:86:dc:d1:71:d1:8a:86:a7:b0:3f:cb:d7:ce:1d:d9:b9: e8:30:00:69:ce:ce:1b:b1:17:ea:a9:49:0c:02:97:38:ba:c6: 62:dd:72:0d:8e:c1:1d:20:80:49:49:01:d3:7b:cf:62:88:d9: e0:c4:79:8d:57:ca:6e:65:2e:b6:3d:2a:6c:23:00:e2:86:93: 68:0e:4d:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0MDUxMTAvBgNVBAUTKDJEOUVEM0QyNkU2MzVGN0NGRkU0QkJGNTIwODcxNTBC N0E0MjE4OEYwHhcNMjUwNDI0MTkwMjM2WhcNMjUwNTAxMTkwMjM2WjAYMRYwFAYD VQQDEw02ODBhOGFjZC1lODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmyXea8U7UTQyg/BtO7JpPyG1V98+Uqr2R907Hc22/5qv5rdZi4QCTyOog9h ZOmn5t8CodWlF3ZIp9UKfE3GjcEQfVNsYtaOmA2MvSTPp+TH+ktkJ9gL/SfSrun2 lsV9QsFW5hy5DTYojBWAdDE/T+t6UAV4GbozG4wz+fvjMH1aKdlmtqLJ1aHd3tyS m15/094hcYcp6Fizw6NVsQZf+Gq0dnyMGWjg/sEsSn+WWY9LpRQ9G/og091ib9H2 7JUaKvsLn7xjXXxEW0/+x4/w3nHXV8IbPQC3ThzirdOgSS3BrLsgOBS4aVvOWZat kxc6RG2ZEIhrgHAZxtC530olGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFM+tsZ ZU9ofHyE8WtKf6yTtA4IMB8GA1UdIwQYMBaAFC2e09JuY198/+S79SCHFQt6QhiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQwNS9GOUMxOTY5NjMy MTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algzel81THYxSUljVkMzcENH STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xaN1QwbTVqWDN6XzVMdjFJSWNWQzNwQ0dJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQwNS9GOUMxOTY5NjMyMTIxMUVBOTM2MzNBNTlDNEY5QUUwMi9MWjdUMG01algz el81THYxSUljVkMzcENHSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYFIU7O7vNZaBv6aK++hhmt3ZKVmpG5WPaeONqjz+8aCMMmwiC6OoO Qo0SMipGfpNYlGhTaw05LQBTCK/U6fnzud0T9+0bLkPZyfeqkiZmaqBCCjjeJo5P QEniVCGtLeUiUTNN6A1qFRU8TTDcUcz4SBiP5UVfGwEsSLIshF1tG45tC1ypYkoy 6anRHcK1Q4H14dzr+EJyriaWbB5f0tTdHSgLI2/D4XprKleTyWTKCTW6t3ljPIbc 0XHRioansD/L184d2bnoMABpzs4bsRfqqUkMApc4usZi3XINjsEdIIBJSQHTe89i iNngxHmNV8puZS62PSpsIwDihpNoDk07 -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:54 2025 by rpki-client