$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft File: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json) Hash identifier: zhX56zfOai1ee2WXdhKl1PmoEAIXu2HrU84ER5FLPYk= Subject key identifier: 75:D0:EB:99:F0:6E:C6:B2:30:C0:D7:D1:6D:D0:7A:AD:A3:9C:AC:DB Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 Certificate issuer: /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft Manifest number: 02B2 Signing time: Fri 25 Apr 2025 01:14:00 +0000 Manifest this update: Fri 25 Apr 2025 01:13:59 +0000 Manifest next update: Fri 02 May 2025 01:13:59 +0000 Files and hashes: 1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 4wqMSUEG6zdf/XVaMj8k/EUd+sQi3glzBhF9qaExxZk=) 2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: lNppuM2/IdxAAhctCe7rRBT4xZtGXRvN8aRrKBnWfmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998 Validity Not Before: Apr 25 01:13:59 2025 GMT Not After : May 2 01:13:59 2025 GMT Subject: CN=680ae1d7-31c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:c1:35:65:71:6a:47:da:21:78:89:14:12: 61:35:aa:4a:60:26:4f:d9:35:0d:ba:1d:a2:7b:65: 52:28:d9:d2:ed:bb:f1:00:ab:bd:d7:c7:6f:b0:92: d5:c1:3c:61:d1:7f:eb:02:21:66:a8:3b:17:9b:69: 3d:45:5a:b7:39:19:9b:3c:16:07:7d:be:c9:c1:eb: 24:10:59:9b:e4:22:a9:65:da:e0:2f:f3:b8:27:3e: b5:8e:dd:97:4c:4d:1e:f8:e2:1e:ce:a1:f9:a7:3f: 64:6b:87:ed:fe:98:97:5d:aa:89:63:ca:72:c9:7e: 83:84:43:35:14:36:4f:33:f4:af:0e:33:d2:cb:be: 8a:46:74:61:e1:e8:5a:6e:50:4c:ba:75:f3:a9:e8: 2b:22:71:1e:49:fa:10:a2:b8:62:c3:59:5f:45:5b: d1:a5:4b:78:6a:2e:57:c2:25:84:d4:d0:3d:a2:73: 29:58:26:40:e0:4b:8f:81:11:73:10:a2:ea:fb:96: 09:10:30:62:6e:22:2b:d2:8e:bb:ff:d2:05:8f:bd: d2:df:39:e3:f4:ce:ba:29:25:a6:6e:51:c3:a5:57: 85:c4:99:2e:f9:8d:9e:a9:ac:0a:87:b0:80:72:0f: 0d:ff:fa:67:71:91:29:09:11:e6:46:ff:01:f5:e9: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:EB:99:F0:6E:C6:B2:30:C0:D7:D1:6D:D0:7A:AD:A3:9C:AC:DB X509v3 Authority Key Identifier: keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:87:01:d0:90:f5:6b:42:7e:14:ce:8a:b3:de:19:01:21:d1: ae:a8:34:6f:be:fe:0f:34:62:d9:17:0c:cc:47:e0:1c:86:f0: 08:28:1a:b3:a5:c1:39:d3:7e:9c:5e:7e:59:1a:57:95:4d:72: d1:ef:13:21:68:60:93:87:44:cb:4a:c7:9e:13:2a:16:93:46: c9:e0:ba:0e:04:5c:b9:eb:e6:c2:a8:d9:93:57:ef:27:6a:f2: 67:be:83:dc:ea:7f:2d:fc:a5:30:9c:f1:d7:61:4d:fd:28:83: be:a9:14:ae:98:d3:a4:30:02:1c:8c:86:4a:87:c3:08:0c:a6: 33:c3:61:85:f9:c4:bc:d0:de:e9:24:08:8e:cd:b9:1d:a7:e8: 42:43:53:69:6c:77:88:82:14:85:a4:c9:08:f8:5b:a9:7d:f6: f0:52:30:31:a8:d4:0b:f4:05:99:62:4b:88:e4:17:32:d5:1c: bb:01:25:86:70:d7:95:c9:4d:25:2e:aa:bd:42:f7:d7:ac:8b: 6f:04:37:7b:ab:f2:5f:67:58:9d:41:6c:30:87:aa:b8:4a:1b: 4d:71:e6:8c:39:58:ca:93:0f:c4:96:5b:71:13:92:fd:f2:d0: 93:de:12:28:bf:a9:5b:ca:01:f4:41:8e:95:62:3e:d8:80:35: 83:79:d3:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGODMxMTAvBgNVBAUTKDJFRjg3NkE2NjRFNUQ4QjZDREUwMUNGMDg0MTBEQkFE OTZCQzQ5OTgwHhcNMjUwNDI1MDExMzU5WhcNMjUwNTAyMDExMzU5WjAYMRYwFAYD VQQDEw02ODBhZTFkNy0zMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHLBNWVxakfaIXiJFBJhNapKYCZP2TUNuh2ie2VSKNnS7bvxAKu918dvsJLV wTxh0X/rAiFmqDsXm2k9RVq3ORmbPBYHfb7JweskEFmb5CKpZdrgL/O4Jz61jt2X TE0e+OIezqH5pz9ka4ft/piXXaqJY8pyyX6DhEM1FDZPM/SvDjPSy76KRnRh4eha blBMunXzqegrInEeSfoQorhiw1lfRVvRpUt4ai5XwiWE1NA9onMpWCZA4EuPgRFz EKLq+5YJEDBibiIr0o67/9IFj73S3znj9M66KSWmblHDpVeFxJku+Y2eqawKh7CA cg8N//pncZEpCRHmRv8B9emtUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXQ65nw bsayMMDX0W3Qeq2jnKzbMB8GA1UdIwQYMBaAFC74dqZk5di2zeAc8IQQ262WvEmY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREY4My9FMkFFM0IwQUYx MzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJMYk40Qnp3aEJEYnJaYThT WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x2aDJwbVRsMkxiTjRCendoQkRiclphOFNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REY4My9FMkFFM0IwQUYxMzAxMUVDODZERTdENjNDNEY5QUUwMi9MdmgycG1UbDJM Yk40Qnp3aEJEYnJaYThTWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABhwHQkPVrQn4Uzoqz3hkBIdGuqDRvvv4PNGLZFwzMR+AchvAIKBqz pcE5036cXn5ZGleVTXLR7xMhaGCTh0TLSseeEyoWk0bJ4LoOBFy56+bCqNmTV+8n avJnvoPc6n8t/KUwnPHXYU39KIO+qRSumNOkMAIcjIZKh8MIDKYzw2GF+cS80N7p JAiOzbkdp+hCQ1NpbHeIghSFpMkI+FupffbwUjAxqNQL9AWZYkuI5Bcy1Ry7ASWG cNeVyU0lLqq9QvfXrItvBDd7q/JfZ1idQWwwh6q4ShtNceaMOVjKkw/ElltxE5L9 8tCT3hIov6lbygH0QY6VYj7YgDWDedPt -----END CERTIFICATE-----Generated at Sat Apr 26 05:19:32 2025 by rpki-client