$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: Lqmqt0fkq1r7UT7QTjarbFBBIjpNDau/IRZ0Z0CYmKk= Subject key identifier: 4B:06:BF:4B:D8:EC:0A:9D:E8:9D:01:14:D3:70:6C:B7:F2:18:98:04 Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 41 Signing time: Sun 27 Apr 2025 06:16:09 +0000 Manifest this update: Sun 27 Apr 2025 06:16:09 +0000 Manifest next update: Sun 04 May 2025 06:16:09 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: rp44Azyqv0vbYW3kiGOW+VhRVmR+FYrmZtnE6yYMJmk=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 06:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Apr 27 06:16:09 2025 GMT Not After : May 4 06:16:09 2025 GMT Subject: CN=680dcba9-e042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:b6:ea:88:88:e0:60:06:96:76:e3:b9:03: 85:0e:ca:9b:ea:c0:a0:10:3c:5f:b8:23:db:c2:c0: 94:d2:0a:b9:9d:8a:d5:a2:8a:cd:11:5c:c6:d3:cc: 76:2f:a6:a5:f6:df:d4:f4:30:31:33:8c:0f:d5:b2: 10:68:bb:55:bf:15:f2:ae:4f:38:30:1d:42:b4:b3: ab:20:0a:1d:50:49:74:c8:b3:f2:16:2b:14:66:27: eb:5d:28:6d:58:2e:31:d5:a3:55:20:88:7a:1d:8b: 9f:58:e3:aa:75:28:84:04:1c:7f:d8:2b:df:c8:8b: 97:43:6d:7d:55:47:4e:0f:4c:ab:10:73:a7:3e:30: 1d:81:ed:3f:0c:b3:7b:df:35:95:46:23:28:2e:ee: f0:4d:cc:d9:b3:b9:ba:ba:f6:b0:3f:6c:15:9b:00: da:73:5b:f5:ac:58:db:03:07:8e:4f:9a:1f:e9:23: 6b:54:a0:a6:57:88:75:ec:a8:64:60:fc:5e:62:0a: 59:8b:55:e3:d0:ea:91:f6:49:8e:64:11:a8:f0:c9: b3:61:de:96:c8:82:88:98:cb:1b:92:c4:d9:bd:dc: a4:6b:f6:75:0d:57:6f:ec:34:a2:7b:3c:84:91:bd: f7:bc:64:9e:2b:f1:bb:83:e2:33:02:4e:9b:c7:06: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:BF:4B:D8:EC:0A:9D:E8:9D:01:14:D3:70:6C:B7:F2:18:98:04 X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:19:4e:70:0c:dd:d6:56:42:1d:89:f2:81:19:5b:28:60: ff:44:6c:70:52:70:6d:f4:07:cd:4d:ec:be:2f:f7:10:66:a1: 1c:08:93:e1:98:e9:75:ce:07:97:78:00:0c:7b:f5:81:88:4b: bc:3e:cc:fa:e1:d6:ff:a4:38:9e:ec:23:c6:d8:31:89:2b:3b: 84:a4:3a:2a:b5:1f:8a:8c:1f:e2:99:1b:c3:e8:2a:6c:04:d2: f0:31:0d:7e:8d:bd:d7:5e:06:13:c5:63:0c:8d:9d:93:cf:ab: 89:f7:23:05:72:c4:b7:26:8b:b3:ce:38:33:f3:bf:f0:8b:45: cf:52:6b:66:73:32:c3:8b:35:d0:89:c3:57:f8:88:d8:23:ea: f7:9c:c6:84:7b:70:c8:08:c7:81:cc:ab:35:df:66:1c:ba:8e: a5:cc:d9:76:65:94:cb:59:4f:de:aa:79:77:07:5e:6f:85:36: 33:5f:f2:a6:50:99:8f:e4:56:55:6c:b2:36:dd:9c:91:52:37: 6e:a6:19:5d:c2:03:aa:c3:07:5b:8d:c1:5a:c7:ce:3a:d1:22: 0f:cb:4b:ca:36:ef:4b:97:6e:3b:9a:ec:7f:a7:fe:7c:c8:d7: 6b:49:e7:fb:40:1a:5f:1d:5b:55:89:d4:fd:c4:27:81:36:7b: 3d:2b:b9:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA0MjcwNjE2MDlaFw0yNTA1MDQwNjE2MDlaMBgxFjAUBgNV BAMTDTY4MGRjYmE5LWUwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWArbqiIjgYAaWduO5A4UOypvqwKAQPF+4I9vCwJTSCrmditWiis0RXMbTzHYv pqX239T0MDEzjA/VshBou1W/FfKuTzgwHUK0s6sgCh1QSXTIs/IWKxRmJ+tdKG1Y LjHVo1UgiHodi59Y46p1KIQEHH/YK9/Ii5dDbX1VR04PTKsQc6c+MB2B7T8Ms3vf NZVGIygu7vBNzNmzubq69rA/bBWbANpzW/WsWNsDB45Pmh/pI2tUoKZXiHXsqGRg /F5iClmLVePQ6pH2SY5kEajwybNh3pbIgoiYyxuSxNm93KRr9nUNV2/sNKJ7PISR vfe8ZJ4r8buD4jMCTpvHBioFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSwa/S9js Cp3onQEU03Bst/IYmAQwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABANGU5wDN3WVkIdifKBGVsoYP9EbHBScG30B81N7L4v9xBmoRwIk+GY 6XXOB5d4AAx79YGIS7w+zPrh1v+kOJ7sI8bYMYkrO4SkOiq1H4qMH+KZG8PoKmwE 0vAxDX6NvddeBhPFYwyNnZPPq4n3IwVyxLcmi7POODPzv/CLRc9Sa2ZzMsOLNdCJ w1f4iNgj6vecxoR7cMgIx4HMqzXfZhy6jqXM2XZllMtZT96qeXcHXm+FNjNf8qZQ mY/kVlVssjbdnJFSN26mGV3CA6rDB1uNwVrHzjrRIg/LS8o270uXbjua7H+n/nzI 12tJ5/tAGl8dW1WJ1P3EJ4E2ez0ruW4= -----END CERTIFICATE-----Generated at Sun Apr 27 20:43:33 2025 by rpki-client