$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: BXAlTJMn4Cngy6xVDBfNj68wuOiRClfm32wx7fyC3tI= Subject key identifier: C0:AD:48:E8:03:DF:29:94:7C:8A:02:F9:1C:AE:C5:37:55:C4:FE:78 Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: 7F Signing time: Fri 25 Apr 2025 05:43:14 +0000 Manifest this update: Fri 25 Apr 2025 05:43:13 +0000 Manifest next update: Fri 02 May 2025 05:43:13 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: r6uHm5oHSmmP8LFbgPAUyRLqxeLnmChpooSJAaqlU/w=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: r6mTJvt8SukGGtNb+WgynqBgaxV1KBCRpaFxjoCbFH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Apr 25 05:43:13 2025 GMT Not After : May 2 05:43:13 2025 GMT Subject: CN=680b20f1-d466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:2c:0d:3c:b6:3a:d3:51:f5:11:5c:8d:ad: 5a:ce:1b:f5:b8:09:c5:26:eb:8c:2e:87:69:d6:25: 80:ce:30:77:6f:5b:83:9d:ec:f2:62:1b:e7:d4:02: 72:fb:c7:f0:5c:fb:20:ba:ac:8b:1d:fa:71:e0:15: 7d:de:9b:c3:d7:85:53:ba:36:31:ab:f6:1a:75:78: 34:d4:ad:b7:67:e4:ed:92:9e:b4:6f:b4:d9:da:5b: ae:12:c6:e2:eb:07:cb:68:dd:58:92:84:80:52:a8: e5:38:de:33:c3:ac:8b:d5:21:61:63:78:c7:5e:74: 34:bf:45:06:4c:84:88:d5:fc:75:53:15:03:3e:ed: a3:85:83:46:94:24:3d:8a:83:b5:fb:61:53:dc:9c: a7:43:59:20:0b:47:d7:16:ed:d2:b9:b8:d8:8d:db: 94:0f:f6:c6:bf:36:99:16:cf:c5:dc:8a:da:06:30: b4:be:9d:3a:ed:6d:ba:5c:c2:29:e3:56:8c:49:51: 76:32:b2:14:2f:31:34:d0:8b:f1:d1:eb:83:c0:51: 7a:b4:16:85:1a:b3:60:b4:b3:46:ae:96:82:fc:a1: 60:76:68:33:fe:3b:88:fa:f7:7f:0a:9a:91:8b:4e: 71:f4:80:8d:39:d1:46:93:41:05:aa:94:9c:fb:76: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AD:48:E8:03:DF:29:94:7C:8A:02:F9:1C:AE:C5:37:55:C4:FE:78 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:57:a6:a5:68:1f:9b:c0:6f:7a:ab:e0:ca:87:4b:77:83:e9: 84:50:1c:2f:c2:60:dc:e4:11:50:60:d6:c5:ab:01:00:87:94: 22:a1:a0:62:56:7b:a6:2f:34:12:3e:b0:7c:a6:02:85:d8:91: a9:bc:e3:b8:7f:a6:ac:19:a0:92:7c:23:a9:10:24:57:9b:1e: b1:fc:51:da:a4:9e:41:b7:11:a7:a0:33:30:37:44:9b:3f:9d: 45:25:b8:2e:00:cd:c8:c7:c5:42:fd:ce:cc:a5:f7:e5:b9:0e: 38:cb:e9:b1:15:d2:21:4d:1d:1b:eb:d3:ed:d2:fb:c8:01:32: 59:eb:68:02:32:2a:43:47:23:fd:25:9b:dd:0e:b3:50:45:6b: ac:46:e2:0e:76:5f:e5:df:cf:d0:25:aa:bb:5e:47:aa:cb:27: 4e:84:a1:21:07:09:0a:2f:fa:eb:25:b8:63:8f:54:2f:c9:14: 13:38:ad:45:10:71:72:19:fb:2f:b3:57:d7:e2:d4:5b:68:25: 08:99:25:c5:07:58:6e:d5:96:c3:3f:3d:9b:36:be:ee:44:5f: 3b:33:6a:9b:2f:86:e9:78:d2:46:6b:25:b6:e9:a6:86:bb:5d: 11:e2:38:42:8e:d5:96:e3:f5:16:4e:fb:df:6b:c3:84:1f:66: 1d:ec:8d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUwNDI1MDU0MzEzWhcNMjUwNTAyMDU0MzEzWjAYMRYwFAYD VQQDEw02ODBiMjBmMS1kNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4gsDTy2OtNR9RFcja1azhv1uAnFJuuMLodp1iWAzjB3b1uDnezyYhvn1AJy +8fwXPsguqyLHfpx4BV93pvD14VTujYxq/YadXg01K23Z+Ttkp60b7TZ2luuEsbi 6wfLaN1YkoSAUqjlON4zw6yL1SFhY3jHXnQ0v0UGTISI1fx1UxUDPu2jhYNGlCQ9 ioO1+2FT3JynQ1kgC0fXFu3SubjYjduUD/bGvzaZFs/F3IraBjC0vp067W26XMIp 41aMSVF2MrIULzE00Ivx0euDwFF6tBaFGrNgtLNGrpaC/KFgdmgz/juI+vd/CpqR i05x9ICNOdFGk0EFqpSc+3YXWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCtSOgD 3ymUfIoC+RyuxTdVxP54MB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhV6alaB+bwG96q+DKh0t3g+mEUBwvwmDc5BFQYNbFqwEAh5QioaBi VnumLzQSPrB8pgKF2JGpvOO4f6asGaCSfCOpECRXmx6x/FHapJ5BtxGnoDMwN0Sb P51FJbguAM3Ix8VC/c7MpffluQ44y+mxFdIhTR0b69Pt0vvIATJZ62gCMipDRyP9 JZvdDrNQRWusRuIOdl/l38/QJaq7XkeqyydOhKEhBwkKL/rrJbhjj1QvyRQTOK1F EHFyGfsvs1fX4tRbaCUImSXFB1hu1ZbDPz2bNr7uRF87M2qbL4bpeNJGayW26aaG u10R4jhCjtWW4/UWTvvfa8OEH2Yd7I3a -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:20 2025 by rpki-client