$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: J2KhZg5WpUB8dptVNFdBno1fzKBV68ydI+kPHSKyGo4= Subject key identifier: F0:E2:89:37:34:20:4B:5E:4D:51:3E:AF:E3:84:67:BE:6D:4E:B2:B2 Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 11D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 11D7 Signing time: Thu 24 Apr 2025 17:11:08 +0000 Manifest this update: Thu 24 Apr 2025 17:11:07 +0000 Manifest next update: Thu 01 May 2025 17:11:07 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: EICCo4Ls+nd+M768UTJyWVMWv8InzOOZ5h16U7ig0UE=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: ysxysi1JRRCeXPbgklO9daFHXOXqs2WRrFVz0QeKvyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4569 (0x11d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Apr 24 17:11:07 2025 GMT Not After : May 1 17:11:07 2025 GMT Subject: CN=680a70ab-de40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:c0:3c:fe:21:92:10:4a:2b:3a:ae:59:ae: 31:f1:e8:40:0b:29:45:86:bc:d5:f0:7a:88:8f:11: b6:4d:42:f5:30:8a:a9:83:af:55:e2:08:f9:87:08: 87:6b:d4:1e:3f:3b:9f:be:b9:50:05:af:d0:4a:12: b5:7e:3a:5a:c2:a6:53:e2:77:5e:fb:ad:88:e8:28: fe:8c:9f:f6:46:6d:c5:3d:9b:cb:44:3a:9b:f7:12: 58:4d:82:77:19:3c:9c:d7:38:57:66:76:da:5a:f0: e4:47:7f:3e:91:dd:09:8b:67:6d:65:05:ae:8e:49: 05:f4:69:2a:ce:24:de:d6:c5:a2:d1:e3:6b:45:de: f5:b1:d3:cf:cb:94:50:52:34:63:93:33:13:89:05: 83:62:0a:a8:7e:a3:f0:8e:f3:05:5f:b2:14:f2:85: 0c:03:92:03:c1:c2:33:39:55:27:18:14:61:40:e8: d7:c0:e9:2e:c3:6c:ca:23:68:68:58:86:e6:45:1e: 02:03:b7:80:a2:79:cf:8f:68:cd:4e:f1:f1:02:a5: e1:78:4d:44:cc:75:7c:52:ba:0a:aa:6e:47:53:45: 21:e6:59:f4:2a:65:b7:d1:12:58:36:8b:cb:cc:5d: 34:4d:36:72:d5:b0:8b:85:bb:29:26:80:d6:45:0b: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:89:37:34:20:4B:5E:4D:51:3E:AF:E3:84:67:BE:6D:4E:B2:B2 X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:57:a4:62:cb:bb:33:37:c2:e9:84:d3:90:e9:a2:94:80:a1: 2b:37:d1:2d:2c:69:7a:d1:e5:2a:b9:c4:f9:39:cb:19:76:20: d2:c8:9f:d1:7f:6f:09:28:5c:13:9b:9b:5c:d7:90:90:b3:24: 66:f6:3c:be:c9:70:7a:41:54:f6:a5:77:f9:5a:5d:2d:31:7d: 73:79:56:35:4d:67:ab:77:4a:fb:27:81:6d:02:87:b7:52:aa: 95:a6:e3:e3:36:bf:a9:e9:5b:3f:5f:aa:37:5d:17:1f:a5:a0: 42:02:94:56:90:a9:89:08:bc:e0:af:78:69:2c:72:e3:41:b5: 65:ed:cb:a7:44:6b:44:ab:8e:fb:4d:9e:e0:ea:f0:29:d7:de: 92:e4:44:e5:3a:22:a2:83:3c:88:3c:e6:53:e7:6d:4f:3d:72: 0a:40:74:09:b3:76:3b:4b:80:23:b1:0a:69:2e:46:04:f4:c9: 1a:6a:81:f0:80:23:98:fe:d2:70:fc:7c:cc:07:c8:c3:d3:c5: 7b:07:c6:fb:3a:77:7a:d7:a6:6f:a2:bd:87:f2:02:52:97:e5: c5:71:34:35:3a:72:18:b0:6d:eb:57:ab:83:b8:13:22:56:21: 8c:be:a4:3e:dd:3c:6b:00:9f:63:b2:c7:d5:1f:4f:0c:f5:0c: 5f:19:c5:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUwNDI0MTcxMTA3WhcNMjUwNTAxMTcxMTA3WjAYMRYwFAYD VQQDEw02ODBhNzBhYi1kZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB7APP4hkhBKKzquWa4x8ehACylFhrzV8HqIjxG2TUL1MIqpg69V4gj5hwiH a9QePzufvrlQBa/QShK1fjpawqZT4nde+62I6Cj+jJ/2Rm3FPZvLRDqb9xJYTYJ3 GTyc1zhXZnbaWvDkR38+kd0Ji2dtZQWujkkF9GkqziTe1sWi0eNrRd71sdPPy5RQ UjRjkzMTiQWDYgqofqPwjvMFX7IU8oUMA5IDwcIzOVUnGBRhQOjXwOkuw2zKI2ho WIbmRR4CA7eAonnPj2jNTvHxAqXheE1EzHV8UroKqm5HU0Uh5ln0KmW30RJYNovL zF00TTZy1bCLhbspJoDWRQvoqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDiiTc0 IEteTVE+r+OEZ75tTrKyMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKV6Riy7szN8LphNOQ6aKUgKErN9EtLGl60eUqucT5OcsZdiDSyJ/R f28JKFwTm5tc15CQsyRm9jy+yXB6QVT2pXf5Wl0tMX1zeVY1TWerd0r7J4FtAoe3 UqqVpuPjNr+p6Vs/X6o3XRcfpaBCApRWkKmJCLzgr3hpLHLjQbVl7cunRGtEq477 TZ7g6vAp196S5ETlOiKigzyIPOZT521PPXIKQHQJs3Y7S4AjsQppLkYE9MkaaoHw gCOY/tJw/HzMB8jD08V7B8b7Ond616Zvor2H8gJSl+XFcTQ1OnIYsG3rV6uDuBMi ViGMvqQ+3TxrAJ9jssfVH08M9QxfGcXu -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:34 2025 by rpki-client