$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: SWWdvNqDI3P9VXc2DtxHql8khJPx46OjkZRIuVL/s5A= Subject key identifier: EE:7D:C3:16:4C:FD:F9:20:38:58:36:BF:31:40:23:DA:0E:2A:71:E0 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 11DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 11BF Signing time: Thu 24 Apr 2025 17:12:49 +0000 Manifest this update: Thu 24 Apr 2025 17:12:48 +0000 Manifest next update: Thu 01 May 2025 17:12:48 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: eVL9+UffP60g7RClzaeDF/8OLXZfk7OA8CYiqel10Ic=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: AHDoKb/llb+LLqKjO48bsoYIkNNC05Md7hDccepwp54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Apr 24 17:12:48 2025 GMT Not After : May 1 17:12:48 2025 GMT Subject: CN=680a7110-ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:98:6e:79:65:47:b0:82:c1:95:c6:6c:f6: eb:75:79:b7:04:98:9d:9d:f7:8e:26:3b:ef:9e:f5: 82:c4:5b:a4:f2:47:40:1c:09:a3:39:42:85:d7:67: 79:b2:d8:72:35:21:00:83:dc:d6:3b:f1:59:e6:b6: f1:3d:63:9f:d2:e9:9c:0c:87:f1:67:14:d9:bc:9e: 25:53:97:99:14:45:ba:ac:b9:60:43:00:8d:01:c9: e4:f4:06:30:a4:31:c6:89:f5:34:9c:65:7c:0b:8c: 80:f6:eb:08:94:b9:6d:66:b8:51:69:87:17:2f:c5: f4:c1:46:06:b8:7e:85:ff:a9:b1:52:81:4e:2d:93: 3d:84:f6:a6:c9:46:34:c0:8c:c6:58:73:72:d3:71: a6:94:c6:d1:67:65:b5:59:ef:b2:24:48:56:86:fc: 8a:d6:c6:a3:d8:47:e9:10:25:20:66:d2:0c:fe:4a: 9b:9f:5d:54:a6:41:15:a9:75:ff:81:c2:43:cc:ae: 13:0c:f4:78:e4:b6:f8:c0:81:e8:a4:9e:69:9e:0a: b9:ad:a0:8a:35:26:4e:8a:59:f9:b2:e5:40:aa:ae: de:4b:6b:c5:1b:b2:2d:e6:41:af:8a:27:5a:49:39: 09:59:14:69:5d:9b:f2:16:6a:0e:9a:5c:fd:09:71: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7D:C3:16:4C:FD:F9:20:38:58:36:BF:31:40:23:DA:0E:2A:71:E0 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ca:f9:66:d2:1a:a5:bf:62:74:00:7e:da:af:0a:20:bd:0f: 4d:c5:d4:0f:81:52:ae:1c:67:40:6d:f7:27:e2:74:63:01:34: 37:97:02:7b:e4:d0:62:1d:f3:cc:7a:98:70:8a:c0:1c:df:dd: 2b:73:f7:7c:e8:37:48:da:47:d1:e4:a8:ce:db:3d:44:ff:79: 33:40:77:1f:3f:7a:22:8a:49:ee:23:2e:0e:20:91:de:b0:86: 03:08:c3:5e:7f:a4:34:2a:fe:16:dd:c0:52:90:4d:68:df:be: 41:16:e5:ac:c9:57:d9:f7:95:5a:b4:be:f3:c4:60:25:71:d8: 2f:63:65:10:aa:8e:92:f9:bd:7f:87:6e:7a:d5:f2:a1:c8:9b: 41:3d:fb:2d:b1:ee:a7:ca:90:15:86:97:c7:55:7b:e1:ec:2b: 31:b0:5e:f0:1e:05:14:4c:bd:03:68:20:1f:5a:ac:28:e0:00: 9c:62:c0:17:39:59:76:6e:6c:71:5b:e1:e9:fc:00:45:e9:bc: 05:cc:f3:07:23:6f:7b:55:e1:d2:d5:c9:07:bd:37:ad:75:87: 3c:e4:cf:79:fd:bc:93:0a:4b:a9:57:6f:6a:a4:d8:7e:56:c2: c5:bd:28:a3:79:a3:ed:2e:9f:c9:4b:7b:2f:e3:30:85:9c:10: 34:5d:e2:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUwNDI0MTcxMjQ4WhcNMjUwNTAxMTcxMjQ4WjAYMRYwFAYD VQQDEw02ODBhNzExMC1lYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybmYbnllR7CCwZXGbPbrdXm3BJidnfeOJjvvnvWCxFuk8kdAHAmjOUKF12d5 sthyNSEAg9zWO/FZ5rbxPWOf0umcDIfxZxTZvJ4lU5eZFEW6rLlgQwCNAcnk9AYw pDHGifU0nGV8C4yA9usIlLltZrhRaYcXL8X0wUYGuH6F/6mxUoFOLZM9hPamyUY0 wIzGWHNy03GmlMbRZ2W1We+yJEhWhvyK1saj2EfpECUgZtIM/kqbn11UpkEVqXX/ gcJDzK4TDPR45Lb4wIHopJ5pngq5raCKNSZOiln5suVAqq7eS2vFG7It5kGviida STkJWRRpXZvyFmoOmlz9CXERCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO59wxZM /fkgOFg2vzFAI9oOKnHgMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyvlm0hqlv2J0AH7arwogvQ9NxdQPgVKuHGdAbfcn4nRjATQ3lwJ7 5NBiHfPMephwisAc390rc/d86DdI2kfR5KjO2z1E/3kzQHcfP3oiiknuIy4OIJHe sIYDCMNef6Q0Kv4W3cBSkE1o375BFuWsyVfZ95VatL7zxGAlcdgvY2UQqo6S+b1/ h2561fKhyJtBPfstse6nypAVhpfHVXvh7CsxsF7wHgUUTL0DaCAfWqwo4ACcYsAX OVl2bmxxW+Hp/ABF6bwFzPMHI297VeHS1ckHvTetdYc85M95/byTCkupV29qpNh+ VsLFvSijeaPtLp/JS3sv4zCFnBA0XeJ8 -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:10 2025 by rpki-client