$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: 8R6pM7uMgnAV5RwMjehm2bh9kZgvUerTBTp5m5ZQbSQ= Subject key identifier: 43:AF:B5:3C:E2:A5:8D:19:4F:BF:00:EE:46:25:A4:9F:AC:05:6E:4B Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0B30 Signing time: Thu 24 Apr 2025 19:05:50 +0000 Manifest this update: Thu 24 Apr 2025 19:05:49 +0000 Manifest next update: Thu 01 May 2025 19:05:49 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: EjrK16Yz9Wh3qG0LULO/KfUxrzO1kXDYbJ5AMPG0RxI=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: oocbcY3iFDyepn5SUv3wuDXzWJtrjmxt4UkH5Dd68Ak=) 3: 837821AA9B0811EDB5FDAF75C4F9AE02.roa (hash: kTlw3wh1lAf36RxrCeqt67ctmc2qb6ZS1z3/jQIhcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Apr 24 19:05:49 2025 GMT Not After : May 1 19:05:49 2025 GMT Subject: CN=680a8b8e-e33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ec:a5:40:36:dd:8d:df:04:01:dc:9f:80:cb: 48:67:f8:2d:c3:43:25:9f:b4:98:33:57:1d:19:43: b5:13:09:04:89:b8:d5:45:b7:42:6f:e4:6a:61:51: c7:2c:c6:e5:ce:7b:28:a9:2f:c1:38:4a:bb:d4:3a: 54:fb:ff:d4:fc:3f:9f:5c:09:ad:f3:6a:8b:f5:a7: 68:57:f2:ff:4a:76:6c:a3:6b:71:6c:9a:bc:32:ec: ed:fa:e9:b3:03:89:09:bb:d7:64:25:94:b7:1a:3c: fc:39:73:0c:e6:4a:a5:e7:7b:04:fa:0f:b9:54:7e: 16:bd:32:4f:49:35:23:25:dc:df:a7:c0:4b:2e:8d: 21:3d:5b:72:b8:bd:ad:dc:f4:69:ce:9a:76:3c:b9: 04:6f:c5:07:c7:47:e3:21:cf:62:93:54:b1:9f:a3: c2:d9:28:55:57:3f:ba:08:d7:45:7d:23:ac:3f:bb: 53:1a:8c:9c:46:c9:7f:b9:56:5b:81:bd:b7:ac:15: 2a:85:c4:57:25:87:ea:a0:84:66:bb:3b:11:03:e6: f3:1d:21:2f:0b:9d:09:66:df:81:df:eb:55:49:e9: 28:9a:47:6d:d3:25:00:f3:ea:b9:97:d7:dc:0b:56: 5d:12:59:96:74:2c:2c:4d:4b:a6:83:22:c4:e7:a7: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AF:B5:3C:E2:A5:8D:19:4F:BF:00:EE:46:25:A4:9F:AC:05:6E:4B X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:19:6a:cc:29:b0:0a:ee:98:61:39:c1:26:9b:b3:41:6a:a7: f5:e7:bd:79:e6:c2:45:85:ad:fa:c6:0a:22:cc:63:f2:64:2f: ed:f2:f2:49:f1:4c:4f:38:da:54:27:30:17:4f:5b:a7:88:c3: 49:5f:22:d6:6d:63:0e:72:54:99:ce:97:95:63:cd:ab:12:72: 17:7f:b6:d9:ed:a7:43:d0:83:5b:58:82:cc:7a:87:21:b1:1f: 89:a3:a9:91:e5:94:9c:f4:89:d3:d9:f2:96:e7:3c:0c:aa:dd: 38:13:b9:a9:12:7b:6e:6d:77:db:e7:a7:f7:08:42:88:7a:4e: 14:d8:60:06:bc:27:91:7b:10:e5:83:7a:e1:1f:1e:17:79:99: 69:2a:5b:45:31:1f:7a:bb:18:6f:54:ac:96:1f:41:fc:bb:d3: e5:ff:6d:d9:c1:81:ba:c5:b3:0c:16:01:52:fe:d9:3b:d2:ca: f9:97:12:d8:3a:7b:80:4e:1e:91:59:8c:09:b7:7a:15:66:32: 7c:47:a6:5c:c2:31:2a:dd:e4:66:20:41:a7:0f:7c:fd:9d:70: c2:fb:dc:42:d0:a7:f2:11:30:b6:0f:a1:f7:4d:69:9a:20:83: e1:39:15:16:37:fb:1b:18:9c:59:6c:64:17:e7:12:1c:40:a8: db:e9:57:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwNDI0MTkwNTQ5WhcNMjUwNTAxMTkwNTQ5WjAYMRYwFAYD VQQDEw02ODBhOGI4ZS1lMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OylQDbdjd8EAdyfgMtIZ/gtw0Mln7SYM1cdGUO1EwkEibjVRbdCb+RqYVHH LMblznsoqS/BOEq71DpU+//U/D+fXAmt82qL9adoV/L/SnZso2txbJq8Muzt+umz A4kJu9dkJZS3Gjz8OXMM5kql53sE+g+5VH4WvTJPSTUjJdzfp8BLLo0hPVtyuL2t 3PRpzpp2PLkEb8UHx0fjIc9ik1Sxn6PC2ShVVz+6CNdFfSOsP7tTGoycRsl/uVZb gb23rBUqhcRXJYfqoIRmuzsRA+bzHSEvC50JZt+B3+tVSekomkdt0yUA8+q5l9fc C1ZdElmWdCwsTUumgyLE56ftrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOvtTzi pY0ZT78A7kYlpJ+sBW5LMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHGWrMKbAK7phhOcEmm7NBaqf157155sJFha36xgoizGPyZC/t8vJJ 8UxPONpUJzAXT1uniMNJXyLWbWMOclSZzpeVY82rEnIXf7bZ7adD0INbWILMeoch sR+Jo6mR5ZSc9InT2fKW5zwMqt04E7mpEntubXfb56f3CEKIek4U2GAGvCeRexDl g3rhHx4XeZlpKltFMR96uxhvVKyWH0H8u9Pl/23ZwYG6xbMMFgFS/tk70sr5lxLY OnuATh6RWYwJt3oVZjJ8R6ZcwjEq3eRmIEGnD3z9nXDC+9xC0KfyETC2D6H3TWma IIPhORUWN/sbGJxZbGQX5xIcQKjb6VeH -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:07 2025 by rpki-client