$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: p3f+E/6yoxp/vmUh+f+kCp7hvWnZ/6ME4Fnb727u33o= Subject key identifier: 01:5B:D4:00:87:D1:01:FC:73:2F:9E:0A:35:27:82:33:F4:4D:F6:78 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 098B Signing time: Fri 02 May 2025 20:15:58 +0000 Manifest this update: Fri 02 May 2025 20:15:58 +0000 Manifest next update: Fri 09 May 2025 20:15:58 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: Vu+xLPTM/cY7zxGdgSAdIzlRYcPRWDoNXb4LRmcmX84=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: 1ZtsZNF5jFsKlAT00IrDzQyZHeqFH7iBf+N8uJoqrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: May 2 20:15:58 2025 GMT Not After : May 9 20:15:58 2025 GMT Subject: CN=681527fe-4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:af:1c:52:ff:5d:f0:42:38:8b:09:a7:98: 89:4d:ed:ac:ed:95:0e:5e:7a:0f:54:bc:b1:dd:3b: d0:a2:b3:9d:5c:db:54:5d:fa:a0:59:2f:5d:1d:73: e7:33:1c:63:dd:9a:5b:25:33:49:20:97:2e:8b:3f: 69:b2:92:a4:f5:ae:f6:7f:ea:d1:57:ed:5a:12:44: 2a:ad:1c:d3:78:68:6a:a0:47:05:33:73:f5:c6:2b: 50:d9:3a:01:a1:c5:3e:3b:ce:26:c1:eb:0a:d6:c2: a4:2e:d6:d1:1a:72:54:a1:e2:84:1e:f7:3b:f3:e4: bb:10:37:b4:07:55:4f:24:5d:c9:a8:92:55:bc:f4: 92:a4:a8:74:e8:d4:c7:91:bf:4c:32:0d:5c:03:dd: ba:88:7c:45:6b:e5:fa:d1:4c:87:05:59:4f:e2:79: 35:4b:7b:5c:b5:a0:bc:82:51:ee:1a:72:9b:ba:7c: f1:13:c9:30:23:c3:d7:dd:a0:b1:22:1f:60:f2:7d: b8:46:13:e7:e1:7d:84:2a:57:e9:26:cb:09:a5:df: 00:ff:2a:20:a4:e7:7e:c2:bb:cb:fd:37:70:37:cc: 1d:7b:26:40:57:65:b5:39:bd:c2:37:a9:f1:79:34: d7:ca:03:e2:8b:7b:cc:36:01:8a:03:e1:d9:8d:c9: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:D4:00:87:D1:01:FC:73:2F:9E:0A:35:27:82:33:F4:4D:F6:78 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fb:dd:a6:5b:c6:f8:05:c1:ad:af:49:6b:d1:23:dc:1e:f5: 6d:8d:f2:fe:6e:aa:ca:46:8f:e0:32:75:76:c7:05:37:56:e0: 70:a1:f2:8d:ff:99:5d:d8:a2:85:37:ea:c2:49:05:d8:85:d2: bc:9e:8a:42:f1:7c:01:df:6c:8f:0b:13:f4:41:49:51:1a:a2: e3:e2:7d:27:3f:cd:7d:a5:57:ac:1c:44:62:66:34:2b:2a:d5: 22:1d:f1:de:92:4b:72:b2:f6:75:4e:f2:eb:94:d3:f6:b9:d5: 3e:46:c5:71:7b:35:32:7b:7c:cc:a6:83:b9:92:d8:23:8c:fe: ff:f9:24:04:94:d9:d3:85:a8:6c:33:21:3d:41:2b:10:78:a4: 42:54:8f:a5:3a:52:76:e7:ff:cf:3a:4f:76:4a:49:ee:b3:70: 16:05:47:c6:0f:b2:71:cc:a7:f8:fe:44:9d:18:14:b2:cd:83: 32:e3:03:36:55:7a:02:c3:cd:2a:54:3b:fe:87:bb:fb:55:ce: 81:92:65:ad:44:60:ba:48:52:9d:ac:3a:68:e6:1c:4f:dc:6d: 6b:bb:0a:95:45:eb:9b:74:f3:28:e4:c7:01:18:c3:6b:0d:67: d5:79:ad:04:db:61:2f:a5:17:3e:e9:22:d2:76:0e:07:93:8c: e0:9a:40:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUwNTAyMjAxNTU4WhcNMjUwNTA5MjAxNTU4WjAYMRYwFAYD VQQDEw02ODE1MjdmZS00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeqvHFL/XfBCOIsJp5iJTe2s7ZUOXnoPVLyx3TvQorOdXNtUXfqgWS9dHXPn Mxxj3ZpbJTNJIJcuiz9pspKk9a72f+rRV+1aEkQqrRzTeGhqoEcFM3P1xitQ2ToB ocU+O84mwesK1sKkLtbRGnJUoeKEHvc78+S7EDe0B1VPJF3JqJJVvPSSpKh06NTH kb9MMg1cA926iHxFa+X60UyHBVlP4nk1S3tctaC8glHuGnKbunzxE8kwI8PX3aCx Ih9g8n24RhPn4X2EKlfpJssJpd8A/yogpOd+wrvL/TdwN8wdeyZAV2W1Ob3CN6nx eTTXygPii3vMNgGKA+HZjclr+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFb1ACH 0QH8cy+eCjUngjP0TfZ4MB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ+92mW8b4BcGtr0lr0SPcHvVtjfL+bqrKRo/gMnV2xwU3VuBwofKN /5ld2KKFN+rCSQXYhdK8nopC8XwB32yPCxP0QUlRGqLj4n0nP819pVesHERiZjQr KtUiHfHekktysvZ1TvLrlNP2udU+RsVxezUye3zMpoO5ktgjjP7/+SQElNnThahs MyE9QSsQeKRCVI+lOlJ25//POk92Sknus3AWBUfGD7JxzKf4/kSdGBSyzYMy4wM2 VXoCw80qVDv+h7v7Vc6BkmWtRGC6SFKdrDpo5hxP3G1ruwqVReubdPMo5McBGMNr DWfVea0E22EvpRc+6SLSdg4Hk4zgmkDl -----END CERTIFICATE-----Generated at Sat May 3 03:01:46 2025 by rpki-client