$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft File: LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json) Hash identifier: GGVQ5OEH0IhwObBETPpdrK4hxvyafqu64aS6FQbVd4g= Subject key identifier: AF:50:F7:6E:F2:A1:F2:CF:FF:A8:03:13:5E:61:CB:6E:72:5A:70:9C Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F Certificate issuer: /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Certificate serial: 05E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft Manifest number: 05E6 Signing time: Thu 24 Apr 2025 22:43:55 +0000 Manifest this update: Thu 24 Apr 2025 22:43:55 +0000 Manifest next update: Thu 01 May 2025 22:43:55 +0000 Files and hashes: 1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: i8m7welQnyB9opkkn3yDWZST6O8g2sHGfw7gmFIvHu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F Validity Not Before: Apr 24 22:43:55 2025 GMT Not After : May 1 22:43:55 2025 GMT Subject: CN=680abeab-77df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:d8:c0:97:36:cc:00:22:d0:2b:62:5f:a2: 0f:be:e7:d0:02:c4:66:63:6c:12:3a:42:59:3e:26: 96:27:57:ff:4a:8a:22:4a:ff:dc:f3:85:b6:9e:3c: 6e:5f:d4:72:dd:44:13:c8:5a:1b:4e:a6:df:8c:e5: 26:c0:e8:9a:da:73:25:e3:60:f8:ba:7e:5c:80:9e: 15:03:7d:c1:f8:41:f9:33:48:b3:c8:b3:b4:18:eb: 64:72:04:e8:58:88:76:6b:cc:34:d1:34:35:b3:7e: 89:42:e2:05:ba:eb:1a:f2:53:cd:6a:dc:95:4c:21: 4d:12:71:a7:d5:31:bb:d7:da:47:d3:01:ba:ad:70: 31:8e:d5:2c:00:0c:b0:0d:c8:25:06:cb:22:52:34: af:20:c9:22:2b:c9:5d:14:bf:6b:01:85:89:1b:71: c1:62:05:ec:79:2a:d4:2b:44:02:31:d7:89:2d:cd: 2e:3a:aa:d6:66:03:b8:f4:8c:3f:ca:ae:fb:41:49: 6d:64:e5:af:57:8e:ab:23:ff:0c:b8:0e:c0:2d:bf: d1:10:8d:45:ee:59:f8:44:b0:20:69:90:e1:65:97: 39:c0:9f:c2:1d:19:e6:4f:a3:2a:c7:47:67:ff:02: 78:4a:27:a8:8b:f1:c7:04:6f:6c:85:75:bc:15:ce: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:F7:6E:F2:A1:F2:CF:FF:A8:03:13:5E:61:CB:6E:72:5A:70:9C X509v3 Authority Key Identifier: keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ed:1c:14:1e:5f:89:90:a8:b6:fb:95:4b:b1:51:e8:df:53: 11:c5:a1:52:51:0c:24:18:4c:1f:b7:37:f8:3d:86:47:96:cf: 0c:df:54:97:53:e5:f2:91:ec:e3:27:60:7a:ae:a9:a7:dd:4e: 93:25:f9:f2:71:71:8e:6c:8d:b0:3f:c5:fe:9c:6b:f1:7f:b2: f9:45:27:51:88:f5:1b:1d:8a:c1:34:a9:8a:3a:7c:97:04:01: b8:eb:97:9c:2e:dd:5b:ac:0c:2e:fd:76:3e:fd:e4:16:a2:2b: a0:3e:63:bf:37:b6:62:96:d9:52:fd:48:fb:32:e8:77:58:31: 8e:53:e9:a7:c8:c4:7c:e7:25:ec:52:c7:a8:d2:03:d2:9f:29: e5:a2:33:e5:d8:3e:7e:bf:7b:a8:76:ed:91:e8:b3:45:0f:c2: 54:9d:9f:f6:9c:39:d9:0b:cb:ea:7e:d6:b4:4d:09:ba:c3:84: 83:85:a1:8b:50:73:e3:23:03:58:7c:49:28:91:04:7f:d7:3a: 0f:0c:06:91:95:21:a6:67:fb:82:e4:86:65:fa:1e:b9:dc:38: 64:c6:b1:b3:ab:cb:9c:01:1d:8a:c5:bd:39:c6:6d:03:a7:02: ee:b4:e9:d2:48:f2:9f:69:95:f6:9d:54:5e:da:dc:46:19:8d: 1a:19:0a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwRDIxMTAvBgNVBAUTKDJFODI1Q0RGMjQ4QUMyMEEzOUMwNThFMjM4RkE5MjYx NDkyNEZBMEYwHhcNMjUwNDI0MjI0MzU1WhcNMjUwNTAxMjI0MzU1WjAYMRYwFAYD VQQDEw02ODBhYmVhYi03N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6vYwJc2zAAi0CtiX6IPvufQAsRmY2wSOkJZPiaWJ1f/SooiSv/c84W2njxu X9Ry3UQTyFobTqbfjOUmwOia2nMl42D4un5cgJ4VA33B+EH5M0izyLO0GOtkcgTo WIh2a8w00TQ1s36JQuIFuusa8lPNatyVTCFNEnGn1TG719pH0wG6rXAxjtUsAAyw DcglBssiUjSvIMkiK8ldFL9rAYWJG3HBYgXseSrUK0QCMdeJLc0uOqrWZgO49Iw/ yq77QUltZOWvV46rI/8MuA7ALb/REI1F7ln4RLAgaZDhZZc5wJ/CHRnmT6Mqx0dn /wJ4Sieoi/HHBG9shXW8Fc6itQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9Q927y ofLP/6gDE15hy25yWnCcMB8GA1UdIwQYMBaAFC6CXN8kisIKOcBY4jj6kmFJJPoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTBEMi82RkExMjFBQUE5 QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dnbzV3RmppT1BxU1lVa2st ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvSmMzeVNLd2dvNXdGamlPUHFTWVVray1nOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTBEMi82RkExMjFBQUE5QUExMUVCODU0MDc5NDNDNEY5QUUwMi9Mb0pjM3lTS3dn bzV3RmppT1BxU1lVa2stZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ7RwUHl+JkKi2+5VLsVHo31MRxaFSUQwkGEwftzf4PYZHls8M31SX U+XykezjJ2B6rqmn3U6TJfnycXGObI2wP8X+nGvxf7L5RSdRiPUbHYrBNKmKOnyX BAG465ecLt1brAwu/XY+/eQWoiugPmO/N7ZiltlS/Uj7Muh3WDGOU+mnyMR85yXs Useo0gPSnynlojPl2D5+v3uodu2R6LNFD8JUnZ/2nDnZC8vqfta0TQm6w4SDhaGL UHPjIwNYfEkokQR/1zoPDAaRlSGmZ/uC5IZl+h653DhkxrGzq8ucAR2Kxb05xm0D pwLutOnSSPKfaZX2nVRe2txGGY0aGQrj -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:12 2025 by rpki-client