$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: D6HsrOD4Iy/S9uGDVrcSas11SsRMHlO4eXugX4UGcVg= Subject key identifier: D6:C1:C1:02:38:82:34:55:AF:BA:AE:A3:3A:54:81:C6:25:CC:63:E2 Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 0455 Signing time: Thu 24 Apr 2025 23:57:40 +0000 Manifest this update: Thu 24 Apr 2025 23:57:39 +0000 Manifest next update: Thu 01 May 2025 23:57:39 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: XKZxRnq4xNZ08H4xXeQ5HIAynDUX/rDfUJq1sLuFqME=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: Apr 24 23:57:39 2025 GMT Not After : May 1 23:57:39 2025 GMT Subject: CN=680acff4-dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:83:7f:66:3d:5b:20:3b:94:8b:94:0b:7c: c6:4f:7e:c0:4f:4d:07:c1:22:56:96:b8:3c:c2:bd: c8:17:4a:cc:10:6b:bc:c5:a6:c4:25:f5:f1:53:9f: 9d:b7:e6:14:0b:95:cb:99:b7:50:c7:13:ea:f2:8e: ba:59:1e:c5:a2:bc:6a:33:95:34:6c:03:2c:b3:e1: 25:24:74:f8:8c:fb:c0:ec:a5:6f:91:f8:25:b7:be: e6:26:e0:a5:1c:cb:90:d9:c5:2f:7b:58:6e:02:65: 6c:68:8c:aa:aa:94:7f:bc:cf:da:30:fd:92:94:c3: f3:91:43:cf:2b:db:09:40:d0:a2:b5:f7:0a:7d:c2: e4:08:13:43:62:ea:db:e8:95:4e:c6:e9:e0:69:6a: fd:79:f0:68:bf:fb:fe:df:6b:15:76:ef:bd:5d:a9: 3b:95:c0:16:63:89:b0:71:ee:b0:11:42:0e:4b:56: 97:c1:f7:bc:c7:b0:8e:98:55:ba:f4:9a:21:73:01: 30:20:a2:4f:96:cb:be:0a:55:dc:93:52:44:c7:a2: f5:4d:1b:c6:d5:d9:17:65:8d:58:aa:f8:65:96:2c: 74:19:c7:7a:17:db:a5:87:32:1a:66:56:fa:2d:c8: ac:ce:4d:ea:e2:2d:f5:4b:11:b8:89:25:d6:8c:91: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:C1:02:38:82:34:55:AF:BA:AE:A3:3A:54:81:C6:25:CC:63:E2 X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:77:46:95:20:c0:2c:3a:02:51:67:33:94:7e:ec:30:76:7f: 8c:07:81:77:00:76:34:0d:54:c0:7f:5f:b4:ef:7b:13:3b:0b: d9:f7:ba:d3:af:f2:5c:dc:31:7a:74:8e:52:9a:f3:3c:71:52: f5:10:6b:99:4e:fc:5b:60:27:58:74:ad:6b:f2:a0:62:98:87: 94:11:39:77:ad:85:66:f3:39:71:60:a5:5c:a8:81:e1:a7:03: 2c:69:a8:39:9a:8e:5b:31:30:c4:a8:9a:67:e6:c5:72:ca:0a: cb:5d:85:61:15:ff:3f:d3:33:bd:70:2f:4a:55:5b:bd:28:35: f7:a0:94:d8:88:fd:cc:2d:d7:0e:f1:a1:ba:a4:1a:81:03:d9: 84:b4:bd:43:ad:f6:ad:e3:05:66:b7:b0:25:50:2d:ad:b3:37: a5:b1:dd:32:5a:cf:5b:ff:50:f2:8f:7b:46:e8:e6:6b:e7:d0: b3:ab:03:6b:c2:19:ad:34:76:f0:da:b3:0d:49:d0:b9:40:a5: 55:48:85:28:4c:5d:46:3c:23:77:79:d8:74:41:5e:72:70:d2: e2:f8:3f:46:c0:6b:07:ba:31:30:a6:e4:63:2e:ea:cb:f9:62: 07:64:5c:91:6a:76:79:18:66:9c:2b:2c:f4:74:90:05:9e:2e: 02:a8:bf:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjUwNDI0MjM1NzM5WhcNMjUwNTAxMjM1NzM5WjAYMRYwFAYD VQQDEw02ODBhY2ZmNC1kY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1q6Df2Y9WyA7lIuUC3zGT37AT00HwSJWlrg8wr3IF0rMEGu8xabEJfXxU5+d t+YUC5XLmbdQxxPq8o66WR7ForxqM5U0bAMss+ElJHT4jPvA7KVvkfglt77mJuCl HMuQ2cUve1huAmVsaIyqqpR/vM/aMP2SlMPzkUPPK9sJQNCitfcKfcLkCBNDYurb 6JVOxungaWr9efBov/v+32sVdu+9Xak7lcAWY4mwce6wEUIOS1aXwfe8x7COmFW6 9JohcwEwIKJPlsu+ClXck1JEx6L1TRvG1dkXZY1Yqvhllix0Gcd6F9ulhzIaZlb6 Lciszk3q4i31SxG4iSXWjJHRdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbBwQI4 gjRVr7quozpUgcYlzGPiMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxd0aVIMAsOgJRZzOUfuwwdn+MB4F3AHY0DVTAf1+073sTOwvZ97rT r/Jc3DF6dI5SmvM8cVL1EGuZTvxbYCdYdK1r8qBimIeUETl3rYVm8zlxYKVcqIHh pwMsaag5mo5bMTDEqJpn5sVyygrLXYVhFf8/0zO9cC9KVVu9KDX3oJTYiP3MLdcO 8aG6pBqBA9mEtL1Drfat4wVmt7AlUC2tszelsd0yWs9b/1Dyj3tG6OZr59CzqwNr whmtNHbw2rMNSdC5QKVVSIUoTF1GPCN3edh0QV5ycNLi+D9GwGsHujEwpuRjLurL +WIHZFyRanZ5GGacKyz0dJAFni4CqL+4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:59 2025 by rpki-client