$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: dziMXePgGe7ZsJEJoy82H9oVOZYbK2vssLWMesdJx7A= Subject key identifier: 97:A2:FF:4F:D2:BB:0F:53:F2:5C:CD:B9:94:31:A7:DE:F2:42:C7:B2 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 06CA Signing time: Thu 24 Apr 2025 21:54:48 +0000 Manifest this update: Thu 24 Apr 2025 21:54:47 +0000 Manifest next update: Thu 01 May 2025 21:54:47 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: yzjDewMA2Y1DGehZFXp+q88D7xGvbs+INxiRoELxs88=) 2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=) 3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: Apr 24 21:54:47 2025 GMT Not After : May 1 21:54:47 2025 GMT Subject: CN=680ab327-5795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:51:08:aa:35:b3:81:3b:1f:10:0b:5e:ac:57: 19:47:d1:45:53:9f:96:07:e3:5f:20:a3:88:2b:3e: eb:2c:52:5f:4d:36:5d:fd:69:b9:55:94:8b:38:0f: 8d:f4:05:2a:ce:2b:58:28:c4:1d:56:b1:dd:ce:9f: 32:22:a1:bd:fe:fd:bb:34:31:24:27:bb:61:c3:8b: f8:47:b2:97:39:07:a8:b8:ed:7c:02:b1:07:ff:84: 84:cc:99:13:92:ed:e4:fa:f3:ec:4d:ad:40:21:79: 52:83:93:23:41:31:6d:7d:6b:29:ae:15:11:2a:fe: 21:2d:7e:23:59:46:ca:f9:97:4c:9b:85:6a:98:a1: 03:45:f2:06:01:fd:e2:5b:26:c9:58:19:c9:f1:73: 9f:0c:e3:91:43:25:43:dc:17:54:22:36:69:4e:60: 69:e5:62:1f:56:3e:c1:d4:0c:5d:44:09:e0:bd:2a: 97:25:2e:1c:45:4b:12:10:9e:8b:2e:c2:45:67:22: 63:64:4b:fe:1c:2f:df:47:25:12:42:e8:22:a8:0d: b2:fd:66:e4:44:b9:84:e9:eb:29:67:f4:7c:80:13: fc:15:13:16:24:7b:4c:76:28:29:82:fe:ce:5b:f1: 3e:b7:0d:37:da:f8:4d:5b:90:54:79:3d:5e:e1:07: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:FF:4F:D2:BB:0F:53:F2:5C:CD:B9:94:31:A7:DE:F2:42:C7:B2 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2e:2e:0b:b0:f4:2c:93:76:bb:69:13:26:57:27:76:f3:ea: 45:a5:06:1a:1e:58:1a:08:e7:0e:33:5f:f7:8d:5f:bd:f9:65: 6c:61:a1:fe:68:a2:94:14:29:a5:37:73:66:ab:a6:0b:34:2b: 06:42:cc:87:3f:2f:f5:2e:be:08:04:07:08:82:4e:87:de:ae: 30:e9:64:a4:76:9b:d3:d7:4b:de:5a:5f:8f:30:52:24:13:39: fd:2a:c6:ef:46:5c:f0:94:87:df:08:bc:78:86:13:47:33:e1: 71:15:12:68:f3:12:12:ec:99:00:7b:94:2a:0e:93:68:20:b1: 42:4b:e0:f7:89:40:09:e6:b4:e0:6e:1c:c3:9c:76:03:23:fd: fe:ae:cf:d4:bb:9a:e3:c0:0b:80:01:25:56:ef:44:14:9c:c5: db:80:4f:44:87:de:c6:40:de:dc:17:c3:d0:aa:32:fb:85:78: 80:1c:2f:c5:81:ac:fc:66:dd:53:f6:33:3a:ff:08:66:54:36: 56:1e:ec:13:fa:e7:bb:1b:8e:ac:d1:62:98:7a:23:db:dc:0b: 79:6a:ec:d0:8d:0c:50:38:b6:94:6e:f7:02:e1:63:c9:48:69: 47:c5:bc:b7:77:90:bb:2f:96:27:42:ed:8d:19:31:52:68:19: 3c:8f:cd:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUwNDI0MjE1NDQ3WhcNMjUwNTAxMjE1NDQ3WjAYMRYwFAYD VQQDEw02ODBhYjMyNy01Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31EIqjWzgTsfEAterFcZR9FFU5+WB+NfIKOIKz7rLFJfTTZd/Wm5VZSLOA+N 9AUqzitYKMQdVrHdzp8yIqG9/v27NDEkJ7thw4v4R7KXOQeouO18ArEH/4SEzJkT ku3k+vPsTa1AIXlSg5MjQTFtfWsprhURKv4hLX4jWUbK+ZdMm4VqmKEDRfIGAf3i WybJWBnJ8XOfDOORQyVD3BdUIjZpTmBp5WIfVj7B1AxdRAngvSqXJS4cRUsSEJ6L LsJFZyJjZEv+HC/fRyUSQugiqA2y/WbkRLmE6espZ/R8gBP8FRMWJHtMdigpgv7O W/E+tw032vhNW5BUeT1e4QfblQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJei/0/S uw9T8lzNuZQxp97yQseyMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLi4LsPQsk3a7aRMmVyd28+pFpQYaHlgaCOcOM1/3jV+9+WVsYaH+ aKKUFCmlN3Nmq6YLNCsGQsyHPy/1Lr4IBAcIgk6H3q4w6WSkdpvT10veWl+PMFIk Ezn9KsbvRlzwlIffCLx4hhNHM+FxFRJo8xIS7JkAe5QqDpNoILFCS+D3iUAJ5rTg bhzDnHYDI/3+rs/Uu5rjwAuAASVW70QUnMXbgE9Eh97GQN7cF8PQqjL7hXiAHC/F gaz8Zt1T9jM6/whmVDZWHuwT+ue7G46s0WKYeiPb3At5auzQjQxQOLaUbvcC4WPJ SGlHxby3d5C7L5YnQu2NGTFSaBk8j82W -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:55 2025 by rpki-client