$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: PJKYPPjIVmAFAJUFemA2L83scUz3LQUE37y+Flsx2Ws= Subject key identifier: EF:FB:7F:CD:76:50:34:BB:99:55:C1:0D:10:D0:D1:D7:DE:1E:08:AB Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 0243 Signing time: Fri 25 Apr 2025 01:38:52 +0000 Manifest this update: Fri 25 Apr 2025 01:38:51 +0000 Manifest next update: Fri 02 May 2025 01:38:51 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 6O0jzA/TfKwADZhTVh9An+OjI63D2JXAQhE+qsPctxY=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: c791advS7FJxJQliNVREZFMZhHtkZDtdWCzXey8hKmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Apr 25 01:38:51 2025 GMT Not After : May 2 01:38:51 2025 GMT Subject: CN=680ae7ac-bcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:5c:42:d8:96:3f:79:9d:a0:cf:f2:c5:03: be:1d:6c:86:9d:37:ed:53:95:2a:bf:f3:2d:1d:23: 7f:4f:ed:da:ff:87:5a:cf:52:f6:59:98:cc:3b:0d: de:ef:ce:e8:83:22:39:cc:79:7c:95:18:0a:a6:e1: 5e:6b:bc:4a:ac:13:4c:e2:bd:fa:f2:12:25:a6:20: 89:b0:a5:77:a9:3b:dd:ba:2e:64:d5:c2:77:5e:fd: 64:9a:e6:19:c1:6f:9a:b5:ea:1d:f1:5b:bb:42:fb: 73:4d:44:34:34:27:ef:9c:66:e1:78:6c:61:da:11: 91:9f:5f:5b:50:53:2c:11:43:81:68:c2:58:05:e5: 5a:a0:28:36:40:ca:cd:10:33:7b:3a:89:ce:ca:52: 3c:75:ac:5b:18:53:c3:85:aa:ae:22:47:3d:62:af: 35:d1:ce:2c:82:fc:49:6b:2e:8c:52:52:db:76:9a: 22:f4:5e:a8:b0:72:65:a1:1a:8e:ae:36:c9:91:2d: 97:2e:10:68:3e:19:a0:bb:af:5b:3c:4e:73:9d:a4: 20:92:41:60:a9:76:42:d0:8e:7d:09:bc:bf:f5:44: 2f:94:f0:e3:09:57:bc:a7:36:ef:60:d1:bd:de:dd: c7:e3:3a:83:c0:99:68:56:6f:66:33:b4:65:fc:5e: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FB:7F:CD:76:50:34:BB:99:55:C1:0D:10:D0:D1:D7:DE:1E:08:AB X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3c:4f:c2:f3:44:b8:ff:2f:0c:ca:28:36:97:9d:0a:ff:a5: ca:b5:10:0f:31:70:b1:b2:7f:e5:63:a0:92:85:30:3d:a0:98: a1:49:fa:e6:1d:72:88:53:e6:d4:33:e2:00:40:25:e4:ea:9c: b5:c4:86:c5:ab:f3:9b:56:65:de:71:f8:a7:90:49:45:15:ba: 85:5a:3b:95:64:33:7d:bb:f3:22:50:ae:4c:d3:cf:39:f8:51: 27:f9:73:fd:b1:26:c6:ab:26:2f:76:39:23:4b:54:41:98:2a: 67:9a:8c:3f:ab:b3:52:5b:f1:4d:04:15:df:cb:50:64:1d:bb: bf:93:06:9c:0d:a8:47:fc:09:82:ca:62:3f:88:63:f0:98:70: e3:52:5f:5a:49:d7:f8:f1:b6:64:37:91:5e:11:80:33:63:54: 21:46:ea:fe:36:3b:09:25:c5:4c:14:58:3a:f6:e3:6d:17:2f: de:ef:57:43:64:29:f0:71:b7:8f:7d:68:cc:95:8a:09:fb:6e: dd:c7:7b:2a:3f:3d:db:a7:46:79:91:29:9e:07:85:3a:c3:c0: 7d:48:cb:79:c9:92:d7:a9:a7:9e:1b:d4:09:7a:09:7b:73:8a: a3:34:31:f6:10:32:f1:e0:aa:e4:f1:f7:06:84:48:62:ad:0f: c6:01:ce:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjUwNDI1MDEzODUxWhcNMjUwNTAyMDEzODUxWjAYMRYwFAYD VQQDEw02ODBhZTdhYy1iY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EBcQtiWP3mdoM/yxQO+HWyGnTftU5Uqv/MtHSN/T+3a/4daz1L2WZjMOw3e 787ogyI5zHl8lRgKpuFea7xKrBNM4r368hIlpiCJsKV3qTvdui5k1cJ3Xv1kmuYZ wW+ateod8Vu7QvtzTUQ0NCfvnGbheGxh2hGRn19bUFMsEUOBaMJYBeVaoCg2QMrN EDN7OonOylI8daxbGFPDhaquIkc9Yq810c4sgvxJay6MUlLbdpoi9F6osHJloRqO rjbJkS2XLhBoPhmgu69bPE5znaQgkkFgqXZC0I59Cby/9UQvlPDjCVe8pzbvYNG9 3t3H4zqDwJloVm9mM7Rl/F5b2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/7f812 UDS7mVXBDRDQ0dfeHgirMB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQPE/C80S4/y8Myig2l50K/6XKtRAPMXCxsn/lY6CShTA9oJihSfrm HXKIU+bUM+IAQCXk6py1xIbFq/ObVmXecfinkElFFbqFWjuVZDN9u/MiUK5M0885 +FEn+XP9sSbGqyYvdjkjS1RBmCpnmow/q7NSW/FNBBXfy1BkHbu/kwacDahH/AmC ymI/iGPwmHDjUl9aSdf48bZkN5FeEYAzY1QhRur+NjsJJcVMFFg69uNtFy/e71dD ZCnwcbePfWjMlYoJ+27dx3sqPz3bp0Z5kSmeB4U6w8B9SMt5yZLXqaeeG9QJegl7 c4qjNDH2EDLx4Krk8fcGhEhirQ/GAc6/ -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:31 2025 by rpki-client