$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: FygVgI1RtzN3FDZMlzh3kK+rkM0LvndnR/HhFBConcA= Subject key identifier: 5F:D9:01:83:59:16:7A:5B:E1:C4:76:E2:F1:AB:EB:A7:85:93:1B:8B Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B51 Signing time: Thu 24 Apr 2025 19:02:30 +0000 Manifest this update: Thu 24 Apr 2025 19:02:29 +0000 Manifest next update: Thu 01 May 2025 19:02:29 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: cSgg4UIdNVBM36IXcH/HgMep18JErNHPp4f8OW+/6NU=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Apr 24 19:02:29 2025 GMT Not After : May 1 19:02:29 2025 GMT Subject: CN=680a8ac5-49b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c1:43:6f:72:50:28:0e:b7:68:cb:49:a5:80: c5:1c:74:81:43:6e:e0:ea:73:2c:65:27:30:cf:99: a0:23:03:0b:1e:6f:71:59:c6:bf:26:33:04:2a:12: 64:3c:f3:f5:d7:44:75:22:3e:66:20:d7:81:4d:9e: 23:3e:5b:77:c9:2a:4b:b8:3a:a0:46:a1:48:72:a0: 50:47:61:cd:3d:c4:d8:d1:99:6f:67:52:6b:4c:72: f4:4c:b1:f3:ff:ab:cc:c6:ea:18:ce:e9:c7:d1:1b: 6e:3d:45:dc:91:e9:93:3f:c7:03:8a:bb:42:8e:1b: 72:62:d0:c4:32:c0:a4:b2:1c:de:02:01:21:aa:58: a7:70:cd:58:47:5b:df:2d:df:83:f1:54:4a:68:92: bf:62:f8:b2:45:9c:0c:ad:a7:1d:80:21:4a:0e:01: 97:b1:a5:31:e2:8c:b8:9c:68:22:2d:4f:d8:78:09: b8:54:18:b8:7c:ce:02:a8:a4:f6:fe:58:1e:1d:79: 6a:24:ba:75:3f:c2:da:52:e5:05:31:97:4b:a5:59: e1:77:5c:d1:f5:61:1b:a5:2b:16:89:2c:1e:b3:0a: 0f:fa:e3:60:77:dc:da:c9:aa:fe:6d:44:bd:2b:de: 99:55:12:05:fb:3a:30:73:8d:90:cb:cc:e9:a0:dc: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:01:83:59:16:7A:5B:E1:C4:76:E2:F1:AB:EB:A7:85:93:1B:8B X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:53:8b:1e:3d:7a:eb:30:81:41:98:fc:5c:b3:41:85:1c:e4: 47:81:75:f7:06:06:ca:aa:9e:49:e8:fb:c5:97:fd:c4:09:d3: 5e:9c:29:d6:3b:0e:b7:0e:66:0c:4c:f5:86:47:ca:8c:00:7f: 64:2e:9f:5b:75:3e:21:91:ee:35:19:0f:b7:8d:d7:87:28:87: 56:a8:f9:79:0e:c6:ec:66:5a:d0:91:67:5e:8c:47:61:e0:e8: cd:56:c9:aa:21:c4:dd:b6:fb:3e:85:17:a6:48:8c:c1:aa:d9: 0b:e8:16:ab:2d:ea:75:23:1b:f8:af:fd:c5:84:bd:11:03:42: 08:34:6f:56:2e:43:20:08:80:91:0f:be:13:c5:43:51:f1:26: 98:6c:32:f6:5c:3a:9a:d7:90:69:e3:1a:7b:49:74:6f:40:16: 23:b2:d8:83:09:e2:e3:a8:65:2d:0c:52:fd:91:d1:36:71:f0: 81:de:27:fc:60:32:b8:da:6e:2d:b0:c5:c6:7a:19:96:17:a5: 3a:88:36:be:5d:16:20:61:9f:8b:52:f3:b5:e3:45:71:e3:4d: 3e:cd:ce:55:66:e7:17:e2:b5:8a:4e:12:7f:dd:a2:78:43:89: d3:c3:50:93:4f:73:4a:7a:43:7e:66:07:d2:cb:c6:be:a7:29: 16:43:e1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNDI0MTkwMjI5WhcNMjUwNTAxMTkwMjI5WjAYMRYwFAYD VQQDEw02ODBhOGFjNS00OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cFDb3JQKA63aMtJpYDFHHSBQ27g6nMsZScwz5mgIwMLHm9xWca/JjMEKhJk PPP110R1Ij5mINeBTZ4jPlt3ySpLuDqgRqFIcqBQR2HNPcTY0ZlvZ1JrTHL0TLHz /6vMxuoYzunH0RtuPUXckemTP8cDirtCjhtyYtDEMsCkshzeAgEhqlincM1YR1vf Ld+D8VRKaJK/YviyRZwMracdgCFKDgGXsaUx4oy4nGgiLU/YeAm4VBi4fM4CqKT2 /lgeHXlqJLp1P8LaUuUFMZdLpVnhd1zR9WEbpSsWiSweswoP+uNgd9zayar+bUS9 K96ZVRIF+zowc42Qy8zpoNxA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/ZAYNZ Fnpb4cR24vGr66eFkxuLMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjU4sePXrrMIFBmPxcs0GFHORHgXX3BgbKqp5J6PvFl/3ECdNenCnW Ow63DmYMTPWGR8qMAH9kLp9bdT4hke41GQ+3jdeHKIdWqPl5DsbsZlrQkWdejEdh 4OjNVsmqIcTdtvs+hRemSIzBqtkL6BarLep1Ixv4r/3FhL0RA0IING9WLkMgCICR D74TxUNR8SaYbDL2XDqa15Bp4xp7SXRvQBYjstiDCeLjqGUtDFL9kdE2cfCB3if8 YDK42m4tsMXGehmWF6U6iDa+XRYgYZ+LUvO140Vx400+zc5VZucX4rWKThJ/3aJ4 Q4nTw1CTT3NKekN+ZgfSy8a+pykWQ+Eb -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:46 2025 by rpki-client