$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: sskW5S6k5QlcaxKHtgwkKWpF2/HZ/YWz5bA5wXelZIk= Subject key identifier: 5C:E1:23:D1:B7:4E:A5:CE:C4:33:56:F3:DF:81:60:90:FB:73:81:9C Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 9A Signing time: Fri 25 Apr 2025 05:18:26 +0000 Manifest this update: Fri 25 Apr 2025 05:18:26 +0000 Manifest next update: Fri 02 May 2025 05:18:26 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: iINVIJMaJj+gC3aQ/rrfM0yNxTbHr5WnuB0mkmod/AU=) 2: ACCFC92C38E111EF99DA0575C4F9AE02.roa (hash: WzrI+LT1o8icpXLN53gt7R+lLc++MvJ4Kq6tWgFCwq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Apr 25 05:18:26 2025 GMT Not After : May 2 05:18:26 2025 GMT Subject: CN=680b1b22-9a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:21:f7:08:a4:47:47:93:00:b8:11:9d:b7: a9:51:ba:85:54:66:bc:0f:a8:e7:84:0e:e2:37:91: 07:33:83:e0:37:8a:05:df:28:35:27:1f:7d:e3:7c: 06:5e:80:55:98:47:47:ce:da:dc:f9:fb:b3:c1:e4: c7:39:12:61:ec:59:e4:6d:49:eb:22:66:c1:c1:a9: ed:fc:00:05:c4:6f:9c:09:37:c4:c2:13:76:fc:5f: 1a:03:cc:b7:a2:b3:f3:b9:cb:e4:78:c6:7b:47:c8: 63:30:fa:30:8a:c2:f8:bd:ca:94:12:e5:bc:aa:54: fb:9a:b2:cf:20:d6:5a:6d:8e:ed:e4:d6:f8:0d:e5: 1f:bf:46:1b:09:11:be:7f:cd:aa:56:6a:db:fe:8e: 5a:2d:ac:60:92:48:51:a1:9d:cb:3e:87:91:6e:32: f0:36:56:25:9f:ea:99:dd:80:7c:54:ec:8f:97:af: f2:37:99:b6:4f:91:da:08:2c:d5:16:f9:d7:40:bd: 2b:27:ee:70:6d:3b:7a:5f:f2:ba:29:96:c6:0f:d2: 98:e0:bf:a3:25:4b:ac:9b:df:ef:ed:d5:8d:a6:6c: fa:9d:9a:59:8e:ff:9e:57:73:d4:e5:c2:8f:ba:0b: 52:22:ae:66:36:43:7f:d0:29:52:06:19:2a:34:90: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:23:D1:B7:4E:A5:CE:C4:33:56:F3:DF:81:60:90:FB:73:81:9C X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:53:3b:d6:3d:a9:f4:ad:4a:58:16:6d:80:27:08:67:f9:69: 62:26:13:f4:3a:fb:88:b3:fc:67:f9:51:2e:09:1f:68:1b:98: 7d:44:c7:53:69:aa:d9:76:57:09:bf:12:10:32:80:aa:9e:73: 49:79:9c:cd:36:8f:d8:36:ad:c8:79:f4:1d:a9:6a:2a:1f:30: 4a:b8:37:0d:54:22:b8:36:0c:03:f2:68:5a:87:a7:c2:b3:47: 63:e1:46:38:45:ba:a9:ad:33:44:a2:a9:2f:cf:0d:43:41:cf: 88:85:35:35:e7:22:8e:80:fd:19:52:78:79:6f:a4:70:51:f8: d7:6a:ab:27:46:23:03:0e:31:dc:a5:d9:b3:a6:64:4a:a2:62: 57:74:9e:cf:4c:7f:a7:fb:55:6d:2c:f2:47:9b:44:5d:61:ec: 89:62:37:03:a7:e8:7e:c4:78:f4:65:57:af:9c:24:3d:73:4d: 8f:7d:1e:f4:88:f8:cc:af:4c:61:ea:3b:ce:84:57:db:e0:c0: 14:e4:2e:25:77:51:f6:d6:f4:d4:61:46:1f:76:c4:65:95:d1: 01:26:a1:32:12:c7:28:cb:1d:56:0e:07:0a:e4:e7:9e:d4:37: 3e:eb:df:aa:14:01:91:09:b3:a4:aa:91:10:df:72:11:18:b7: 63:71:6a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjUwNDI1MDUxODI2WhcNMjUwNTAyMDUxODI2WjAYMRYwFAYD VQQDEw02ODBiMWIyMi05YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPsh9wikR0eTALgRnbepUbqFVGa8D6jnhA7iN5EHM4PgN4oF3yg1Jx9943wG XoBVmEdHztrc+fuzweTHORJh7FnkbUnrImbBwant/AAFxG+cCTfEwhN2/F8aA8y3 orPzucvkeMZ7R8hjMPowisL4vcqUEuW8qlT7mrLPINZabY7t5Nb4DeUfv0YbCRG+ f82qVmrb/o5aLaxgkkhRoZ3LPoeRbjLwNlYln+qZ3YB8VOyPl6/yN5m2T5HaCCzV FvnXQL0rJ+5wbTt6X/K6KZbGD9KY4L+jJUusm9/v7dWNpmz6nZpZjv+eV3PU5cKP ugtSIq5mNkN/0ClSBhkqNJDhkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzhI9G3 TqXOxDNW89+BYJD7c4GcMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARUzvWPan0rUpYFm2AJwhn+WliJhP0OvuIs/xn+VEuCR9oG5h9RMdT aarZdlcJvxIQMoCqnnNJeZzNNo/YNq3IefQdqWoqHzBKuDcNVCK4NgwD8mhah6fC s0dj4UY4RbqprTNEoqkvzw1DQc+IhTU15yKOgP0ZUnh5b6RwUfjXaqsnRiMDDjHc pdmzpmRKomJXdJ7PTH+n+1VtLPJHm0RdYeyJYjcDp+h+xHj0ZVevnCQ9c02PfR70 iPjMr0xh6jvOhFfb4MAU5C4ld1H21vTUYUYfdsRlldEBJqEyEscoyx1WDgcK5Oee 1Dc+69+qFAGRCbOkqpEQ33IRGLdjcWqJ -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:38 2025 by rpki-client