$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json) Hash identifier: kfVQ9+X4iOGcNdAk9qkAZkh7Vgro0Ra6OjRcnmXcL0w= Subject key identifier: 02:AD:1F:4A:68:90:2D:B6:84:36:27:B8:E1:49:7C:7B:BF:1D:DD:B9 Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft Manifest number: 83 Signing time: Fri 25 Apr 2025 05:34:35 +0000 Manifest this update: Fri 25 Apr 2025 05:34:35 +0000 Manifest next update: Fri 02 May 2025 05:34:35 +0000 Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: 2mrPBQszo0KzRvjcdiFKftjXmWBvECsEde3NpHlrxXs=) 2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Validity Not Before: Apr 25 05:34:35 2025 GMT Not After : May 2 05:34:35 2025 GMT Subject: CN=680b1eeb-c779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5e:20:5d:19:ad:62:68:d2:e4:db:38:ca:d7: 9a:94:a4:ea:d5:09:e2:8e:53:ac:95:35:3f:51:05: 8a:4a:d4:2f:d8:d3:19:fd:09:86:24:1b:00:a7:2a: df:08:cb:cd:17:ef:1d:d5:97:3a:78:9f:be:65:70: 69:ec:7c:09:b4:40:f3:a6:ad:31:4e:aa:8d:f3:a2: 3e:ba:fd:12:a3:26:47:a6:60:eb:76:06:fb:ef:47: 38:16:4a:64:4c:9d:cb:b3:1e:bb:76:a9:6f:31:6b: 3c:f3:a1:43:a2:b9:1a:8b:f2:ea:eb:a9:9e:f6:c0: 15:74:0b:ed:17:9b:4f:9c:de:2f:c2:43:cb:62:a0: 48:d0:83:b0:b7:f2:d9:fa:ce:72:bd:be:5d:79:d6: 9b:11:75:61:54:1d:db:0b:c9:99:02:d1:a3:35:bd: 2f:5c:d0:fd:c9:70:ec:fe:b8:54:36:05:7a:d9:48: 09:ac:4f:9a:25:a2:4e:3b:ca:ee:1b:01:4e:5b:d0: 9c:84:ac:5f:7e:b8:f9:0a:b9:54:eb:b7:85:6e:ce: 9e:70:5c:6a:7b:1a:2b:55:5d:1a:16:a0:1b:92:28: df:f0:81:c2:0c:00:ed:06:44:05:ae:a8:66:2c:a0: 4d:5d:d3:c5:38:31:13:ce:f4:6e:aa:3d:74:86:ad: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:1F:4A:68:90:2D:B6:84:36:27:B8:E1:49:7C:7B:BF:1D:DD:B9 X509v3 Authority Key Identifier: keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ba:c1:02:59:06:8c:99:89:68:87:94:a3:67:3f:1f:29:03: f5:df:f9:67:f4:32:16:a6:eb:2a:56:38:17:55:48:af:3e:e6: ac:58:87:1d:d6:1d:b5:fe:ae:8e:99:c5:24:11:fb:c4:fb:85: c0:88:0a:1c:cb:a1:5c:55:bb:95:8a:fc:ad:30:56:28:3b:c4: 2c:25:99:fd:71:83:c2:87:f2:93:59:5b:67:f2:73:1a:fe:a6: 6e:e3:54:ca:c0:ce:66:2c:0a:ba:8e:f6:62:2c:b1:3c:b2:d5: 72:00:80:2d:4b:93:e0:06:82:54:98:7f:db:4e:80:71:43:d4: ef:7b:67:29:0e:85:a2:b7:b7:d5:5f:23:ec:68:55:48:f9:38: db:ce:26:d9:95:1c:4b:c1:d7:74:77:6f:fe:a2:f9:79:f1:32: 5c:8c:bd:5f:dd:7c:a8:ff:82:8a:0f:3e:12:43:58:c3:69:9d: cf:e6:41:91:72:82:ad:de:c1:50:18:e2:14:4a:a9:aa:95:d7: 60:97:cf:91:42:40:ee:d9:d0:4a:75:95:ae:81:c8:0c:db:d7: 0e:28:bc:20:f7:da:dd:8e:67:ef:03:95:1c:1c:c8:b1:3d:1b: 0e:24:ae:3d:90:1d:d3:1c:14:bd:7e:03:51:4a:bc:1c:f6:f8: 1b:6b:68:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD NjlERDVDQ0MwHhcNMjUwNDI1MDUzNDM1WhcNMjUwNTAyMDUzNDM1WjAYMRYwFAYD VQQDEw02ODBiMWVlYi1jNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8F4gXRmtYmjS5Ns4ytealKTq1QnijlOslTU/UQWKStQv2NMZ/QmGJBsApyrf CMvNF+8d1Zc6eJ++ZXBp7HwJtEDzpq0xTqqN86I+uv0SoyZHpmDrdgb770c4Fkpk TJ3Lsx67dqlvMWs886FDorkai/Lq66me9sAVdAvtF5tPnN4vwkPLYqBI0IOwt/LZ +s5yvb5dedabEXVhVB3bC8mZAtGjNb0vXND9yXDs/rhUNgV62UgJrE+aJaJOO8ru GwFOW9CchKxffrj5CrlU67eFbs6ecFxqexorVV0aFqAbkijf8IHCDADtBkQFrqhm LKBNXdPFODETzvRuqj10hq1gZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKtH0po kC22hDYnuOFJfHu/Hd25MB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2Nk SWRxUUJZTHo3SWZHbmRYTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtusECWQaMmYloh5SjZz8fKQP13/ln9DIWpusqVjgXVUivPuasWIcd 1h21/q6OmcUkEfvE+4XAiAocy6FcVbuVivytMFYoO8QsJZn9cYPCh/KTWVtn8nMa /qZu41TKwM5mLAq6jvZiLLE8stVyAIAtS5PgBoJUmH/bToBxQ9Tve2cpDoWit7fV XyPsaFVI+TjbzibZlRxLwdd0d2/+ovl58TJcjL1f3Xyo/4KKDz4SQ1jDaZ3P5kGR coKt3sFQGOIUSqmqlddgl8+RQkDu2dBKdZWugcgM29cOKLwg99rdjmfvA5UcHMix PRsOJK49kB3THBS9fgNRSrwc9vgba2hT -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:56 2025 by rpki-client