$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: 6kLj7TDnSy6QyR2R+A1k4LFx26kQuVpzvQnBaWCZBos= Subject key identifier: 43:75:9C:2B:9E:6D:7D:8A:46:49:96:49:4B:DD:BC:22:30:1F:79:BF Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 0799 Signing time: Thu 24 Apr 2025 21:12:01 +0000 Manifest this update: Thu 24 Apr 2025 21:12:01 +0000 Manifest next update: Thu 01 May 2025 21:12:01 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: IWT3vSX9Gf6sIs70O52flsUh1a5Top4XkgEPbkL9/rM=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Apr 24 21:12:01 2025 GMT Not After : May 1 21:12:01 2025 GMT Subject: CN=680aa921-c4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:92:2f:74:26:49:71:78:99:65:e4:f4:56: 53:59:8f:44:44:4d:41:12:66:fa:c3:2a:a9:7d:48: 22:ed:2d:27:32:6c:4d:a2:1c:4b:31:e2:f4:ca:22: 1d:9f:f7:73:31:12:58:cc:f9:90:55:d9:7c:89:0a: 9e:20:55:2f:da:e3:6b:c4:51:e4:ec:28:7d:47:8e: 42:14:b4:6e:dd:bd:13:da:af:29:d1:51:74:f6:ec: 0d:18:49:bc:a3:13:e5:01:5e:b2:4d:f2:a0:b4:ab: 10:e8:b5:67:7d:7e:24:84:7f:e2:db:2a:8b:52:dc: e9:54:2b:6f:b5:37:2f:a7:8f:97:db:3d:87:ed:8c: ca:f6:53:c4:78:dd:83:13:ff:b8:18:a8:65:7a:ea: 55:7e:02:57:8f:c5:ff:6a:26:05:13:e3:70:54:43: dd:4f:be:7c:26:58:3b:3c:5f:9d:5d:07:5b:00:49: 65:71:16:76:52:64:49:33:e4:f4:b7:25:59:b3:91: 38:db:3e:b8:fd:23:70:bd:7d:9c:0f:f6:e5:98:49: 0c:3f:ca:30:43:9f:87:64:59:73:41:3b:e2:4b:66: da:19:18:4b:2e:d5:de:6a:d6:e6:55:3d:b9:0d:21: f7:28:09:b6:64:cb:35:7e:3f:76:3d:54:87:9a:4f: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:9C:2B:9E:6D:7D:8A:46:49:96:49:4B:DD:BC:22:30:1F:79:BF X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:40:cf:ce:5c:41:db:82:0b:f9:87:59:fc:f6:9b:e5:68:e1: 45:10:d8:9c:7f:7b:e1:98:ad:57:31:e2:79:ab:f0:c9:7d:59: dc:56:4d:e8:ad:23:d3:aa:5d:f8:4d:46:df:00:f5:b6:de:ae: ce:23:a9:cd:d6:0a:c2:52:e5:34:a7:b7:59:3f:e1:0c:78:f9: de:f8:ad:ae:bd:f5:41:ad:b3:9b:50:20:3e:22:eb:c9:38:0f: 13:da:10:34:e7:e1:dd:67:3d:b0:bb:6d:18:36:0c:d8:e2:a7: f3:b4:51:5c:6c:9e:8d:37:d0:7d:e1:bb:27:31:b0:02:96:6a: 3d:3f:28:04:39:d9:a4:84:8d:65:64:32:24:d1:ab:7b:35:c1: 1e:b0:ab:fe:54:db:3c:77:5f:ce:79:44:57:f0:0d:da:6d:59: 6c:b7:87:da:df:47:db:dd:8e:79:44:e3:6d:4c:02:12:4d:8f: 01:0d:03:37:3e:0f:e3:d0:72:33:9d:28:c5:60:98:fa:fe:38: 8d:27:f7:58:b3:3f:31:9d:58:53:60:5f:f4:60:86:5b:b9:6c: c8:31:6e:5f:80:f3:e8:ea:08:79:54:24:42:85:50:66:98:a1: 34:68:1d:0f:d1:2b:ba:d8:b0:28:10:91:69:b1:63:8b:dc:80: a9:12:b1:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwNDI0MjExMjAxWhcNMjUwNTAxMjExMjAxWjAYMRYwFAYD VQQDEw02ODBhYTkyMS1jNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh2SL3QmSXF4mWXk9FZTWY9ERE1BEmb6wyqpfUgi7S0nMmxNohxLMeL0yiId n/dzMRJYzPmQVdl8iQqeIFUv2uNrxFHk7Ch9R45CFLRu3b0T2q8p0VF09uwNGEm8 oxPlAV6yTfKgtKsQ6LVnfX4khH/i2yqLUtzpVCtvtTcvp4+X2z2H7YzK9lPEeN2D E/+4GKhleupVfgJXj8X/aiYFE+NwVEPdT758Jlg7PF+dXQdbAEllcRZ2UmRJM+T0 tyVZs5E42z64/SNwvX2cD/blmEkMP8owQ5+HZFlzQTviS2baGRhLLtXeatbmVT25 DSH3KAm2ZMs1fj92PVSHmk8wZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN1nCue bX2KRkmWSUvdvCIwH3m/MB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQM/OXEHbggv5h1n89pvlaOFFENicf3vhmK1XMeJ5q/DJfVncVk3o rSPTql34TUbfAPW23q7OI6nN1grCUuU0p7dZP+EMePne+K2uvfVBrbObUCA+IuvJ OA8T2hA05+HdZz2wu20YNgzY4qfztFFcbJ6NN9B94bsnMbAClmo9PygEOdmkhI1l ZDIk0at7NcEesKv+VNs8d1/OeURX8A3abVlst4fa30fb3Y55RONtTAISTY8BDQM3 Pg/j0HIznSjFYJj6/jiNJ/dYsz8xnVhTYF/0YIZbuWzIMW5fgPPo6gh5VCRChVBm mKE0aB0P0Su62LAoEJFpsWOL3ICpErE9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:16 2025 by rpki-client