$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft File: lziO_EXUlu7urpSEfaYKzOXRF_k.mft (raw, json) Hash identifier: PuQKIMQ9wp235VX0OZWYSBtqcoosPtmogsniO+n0QAY= Subject key identifier: BD:32:BA:36:D5:A8:86:D8:DF:BA:46:DC:55:7A:E1:28:9A:4B:96:18 Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft Manifest number: 05C5 Signing time: Thu 24 Apr 2025 22:59:07 +0000 Manifest this update: Thu 24 Apr 2025 22:59:07 +0000 Manifest next update: Thu 01 May 2025 22:59:07 +0000 Files and hashes: 1: lziO_EXUlu7urpSEfaYKzOXRF_k.crl (hash: eincXeo7TpA8gCQmGqZC2hddRxuOBtkxgXJirinh4So=) 2: 33B3C60425FD11EDA4097785C4F9AE02.roa (hash: YmHPckT0dIFNHqb1yogDfQ9UG6heaZWXlhIbS1BD/e8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D39, serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9 Validity Not Before: Apr 24 22:59:07 2025 GMT Not After : May 1 22:59:07 2025 GMT Subject: CN=680ac23b-8c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:98:b3:d7:8f:c4:29:70:95:d8:6c:2f:98: 6b:6f:fd:17:f3:87:08:cd:ce:6c:2f:1d:08:f4:06: de:af:c6:7f:10:35:ec:d8:e8:19:7d:ab:40:d1:ed: ab:50:47:74:bf:86:96:7c:2b:66:3d:ad:a6:dd:1f: 8b:69:a9:b0:51:a5:ad:1e:f6:c5:78:7f:29:06:4e: 77:48:7a:12:be:91:9b:c6:d1:03:46:c6:93:86:27: f2:76:9d:05:77:78:36:da:f0:a4:19:9b:f4:3c:6f: 92:b5:46:11:84:cd:08:78:d0:f3:2b:4d:fe:de:a8: e7:bd:41:7d:58:2b:9f:2f:5b:56:3c:af:4c:c3:b4: 20:76:53:ce:77:49:4b:4f:4f:a0:c5:11:b2:e5:82: f5:72:53:27:0c:9f:de:47:57:5c:46:47:78:c5:29: 6c:38:14:c1:7f:f0:92:3d:0b:90:75:b9:bc:48:8e: 9a:f2:8f:8e:7e:65:5e:25:42:8c:64:5f:38:ea:ba: dd:07:d6:c9:a3:0e:a4:54:f1:fd:77:91:cc:9a:54: a3:e7:41:0a:70:38:2a:bd:0d:c0:85:fc:dd:f4:b4: 6c:31:f6:c3:cd:4d:d6:c1:eb:05:97:d6:4b:99:12: 6b:3a:78:53:c0:9e:60:ff:fc:bd:44:26:09:04:1d: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:BA:36:D5:A8:86:D8:DF:BA:46:DC:55:7A:E1:28:9A:4B:96:18 X509v3 Authority Key Identifier: keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:ca:40:53:54:96:5e:54:03:56:c9:1d:dd:1e:1b:fb:cd: 5d:fb:77:39:83:60:66:c1:62:5e:2d:82:73:95:a9:e0:50:6f: de:32:46:e3:1b:56:fc:98:5b:d9:3b:34:6d:1e:57:3d:70:91: 40:52:c1:d6:53:96:79:99:a4:13:bf:2e:f6:90:2d:f9:66:83: 35:f8:91:a3:75:a1:75:f0:9b:97:8a:25:3a:46:8f:f4:76:be: 90:cb:be:ce:37:b8:d6:48:6f:4a:3b:6c:67:d7:c0:c6:dc:60: 06:2e:00:bd:e1:e1:81:39:1c:d0:ca:b0:fa:18:15:30:0d:58: 1a:10:ab:b1:c4:66:97:6d:af:24:a1:42:bd:4a:b5:b1:ed:e5: 29:27:c5:40:b4:29:aa:3a:02:c8:36:a2:cf:90:e6:6f:a6:aa: cc:24:2a:e3:7b:47:49:27:24:3c:f7:c4:38:aa:ff:39:07:d1: 3f:47:fe:f1:8e:f4:ef:8e:17:c5:65:f8:4e:0c:07:1a:41:87: f3:92:77:c3:c6:73:b1:3b:a2:08:50:62:05:ab:95:0c:b5:94: 09:a6:ad:92:4c:97:92:2c:49:4f:35:66:04:20:65:7c:66:b2: 08:4d:54:2a:95:d6:ff:86:2a:c0:07:2e:48:62:a8:bf:dd:0b: 1a:67:31:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEMzkxMTAvBgNVBAUTKDk3Mzg4RUZDNDVENDk2RUVFRUFFOTQ4NDdEQTYwQUND RTVEMTE3RjkwHhcNMjUwNDI0MjI1OTA3WhcNMjUwNTAxMjI1OTA3WjAYMRYwFAYD VQQDEw02ODBhYzIzYi04Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM2Ys9ePxClwldhsL5hrb/0X84cIzc5sLx0I9Aber8Z/EDXs2OgZfatA0e2r UEd0v4aWfCtmPa2m3R+LaamwUaWtHvbFeH8pBk53SHoSvpGbxtEDRsaThifydp0F d3g22vCkGZv0PG+StUYRhM0IeNDzK03+3qjnvUF9WCufL1tWPK9Mw7QgdlPOd0lL T0+gxRGy5YL1clMnDJ/eR1dcRkd4xSlsOBTBf/CSPQuQdbm8SI6a8o+OfmVeJUKM ZF846rrdB9bJow6kVPH9d5HMmlSj50EKcDgqvQ3Ahfzd9LRsMfbDzU3WwesFl9ZL mRJrOnhTwJ5g//y9RCYJBB06uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0yujbV qIbY37pG3FV64SiaS5YYMB8GA1UdIwQYMBaAFJc4jvxF1Jbu7q6UhH2mCszl0Rf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQzOS83RjI0RkZEMEM4 NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1N3VycFNFZmFZS3pPWFJG X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6aU9fRVhVbHU3dXJwU0VmYVlLek9YUkZfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQzOS83RjI0RkZEMEM4NTgxMUVCQkUwRUY4MzRDNEY5QUUwMi9semlPX0VYVWx1 N3VycFNFZmFZS3pPWFJGX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhispAU1SWXlQDVskd3R4b+81d+3c5g2BmwWJeLYJzlangUG/eMkbj G1b8mFvZOzRtHlc9cJFAUsHWU5Z5maQTvy72kC35ZoM1+JGjdaF18JuXiiU6Ro/0 dr6Qy77ON7jWSG9KO2xn18DG3GAGLgC94eGBORzQyrD6GBUwDVgaEKuxxGaXba8k oUK9SrWx7eUpJ8VAtCmqOgLINqLPkOZvpqrMJCrje0dJJyQ898Q4qv85B9E/R/7x jvTvjhfFZfhODAcaQYfzknfDxnOxO6IIUGIFq5UMtZQJpq2STJeSLElPNWYEIGV8 ZrIITVQqldb/hirABy5IYqi/3QsaZzEx -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:01 2025 by rpki-client