$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: zCTNkuVvhxVyvrsEZxgkr4Hrf2nUg2UFDpZoaqCRTu8= Subject key identifier: F6:D0:08:12:A1:2B:C3:A7:27:FE:85:AA:7D:62:CA:90:65:13:6C:47 Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 014B Signing time: Fri 25 Apr 2025 03:21:33 +0000 Manifest this update: Fri 25 Apr 2025 03:21:32 +0000 Manifest next update: Fri 02 May 2025 03:21:32 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: ZRXR+z2YOwVVtX8V4KvrWfcLG3qzRLq2gyAU0OkDp9Q=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5, serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Apr 25 03:21:32 2025 GMT Not After : May 2 03:21:32 2025 GMT Subject: CN=680affbc-d320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:2d:d4:99:f2:6f:f7:3f:06:0b:34:a3:ce: bd:f9:fd:7e:8e:76:e4:8e:15:10:9c:e2:69:78:09: ee:c2:74:c8:da:4b:95:68:60:3c:c6:7d:5d:12:e1: fd:5a:a7:42:f3:55:3c:36:12:a9:29:79:7a:c6:d5: e3:47:94:bb:96:2d:37:10:7d:f0:42:7b:bb:32:a5: b8:8f:fd:a9:fb:b0:60:b7:b3:da:cb:6a:2e:54:7b: 21:b9:43:8d:45:74:f2:f8:59:09:72:20:20:24:25: 44:8d:3e:68:ff:ac:f4:55:45:5e:24:81:21:df:ab: 3c:46:e5:78:21:c3:43:7c:73:7c:84:bf:15:25:d9: 4e:ac:66:24:4b:d5:20:0e:7b:44:90:38:20:63:b9: f0:5e:08:fa:36:b6:9d:60:c1:cb:fb:92:1f:be:df: 80:fb:91:9e:13:70:bb:b1:c5:96:33:9c:7a:76:83: 6d:96:f4:ec:d7:fe:0f:b6:f5:ef:a0:8f:a3:e6:07: f4:7d:f6:f2:04:16:30:2c:47:8d:ef:87:f5:33:46: 70:1a:1a:bf:db:4e:74:dc:cf:6d:9a:2f:1d:e3:a7: 7c:e8:7d:b0:88:dc:da:f6:28:cf:49:0c:d7:ae:09: 92:38:99:ce:20:64:8b:60:cf:52:43:ca:58:d5:e9: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D0:08:12:A1:2B:C3:A7:27:FE:85:AA:7D:62:CA:90:65:13:6C:47 X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:60:31:91:b0:e4:c0:f6:f7:81:e5:70:aa:2c:b8:e5:07:4f: e5:1c:14:6b:ba:c1:70:9f:03:c0:74:a3:90:ec:15:59:4f:99: c1:2a:8d:94:79:2b:a1:73:68:3d:e8:2e:6b:0a:4a:ef:1e:dd: 8d:1d:a7:98:3b:e8:b7:a8:a0:f5:5f:36:83:c0:c3:c6:b7:7c: ed:ae:96:2f:d4:a8:b9:3c:58:e1:ee:72:24:60:c6:f0:ed:4f: 91:13:bb:51:53:f2:a8:e0:1c:b4:82:86:38:b0:7b:29:1d:9b: 5e:de:73:95:49:22:c3:73:b9:41:0e:9b:5e:b8:30:17:32:8a: ef:73:5b:e4:ad:ab:83:ff:88:ae:79:2a:1a:29:e3:20:54:b5: 68:0e:6d:69:fe:dc:99:c9:f0:34:f7:e2:86:0d:71:49:96:fd: 42:11:93:59:06:75:08:80:a8:7a:e2:e3:47:80:e7:c2:3d:be: e3:74:e2:d8:c0:fc:c4:5f:02:24:47:72:c6:32:ea:d4:7d:69: a9:da:4c:ca:a7:d2:0a:cf:f6:4d:a7:97:35:17:c5:43:00:4b: 94:19:70:fe:9e:8e:00:6d:08:20:41:45:46:70:c5:b7:b4:15: 77:13:c8:5e:47:40:5c:1e:db:8a:a3:ca:68:ad:3d:43:84:ca: fa:48:b2:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjUwNDI1MDMyMTMyWhcNMjUwNTAyMDMyMTMyWjAYMRYwFAYD VQQDEw02ODBhZmZiYy1kMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM4t1Jnyb/c/Bgs0o869+f1+jnbkjhUQnOJpeAnuwnTI2kuVaGA8xn1dEuH9 WqdC81U8NhKpKXl6xtXjR5S7li03EH3wQnu7MqW4j/2p+7Bgt7Pay2ouVHshuUON RXTy+FkJciAgJCVEjT5o/6z0VUVeJIEh36s8RuV4IcNDfHN8hL8VJdlOrGYkS9Ug DntEkDggY7nwXgj6NradYMHL+5Ifvt+A+5GeE3C7scWWM5x6doNtlvTs1/4PtvXv oI+j5gf0ffbyBBYwLEeN74f1M0ZwGhq/20503M9tmi8d46d86H2wiNza9ijPSQzX rgmSOJnOIGSLYM9SQ8pY1en3gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbQCBKh K8OnJ/6Fqn1iypBlE2xHMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdYDGRsOTA9veB5XCqLLjlB0/lHBRrusFwnwPAdKOQ7BVZT5nBKo2U eSuhc2g96C5rCkrvHt2NHaeYO+i3qKD1XzaDwMPGt3ztrpYv1Ki5PFjh7nIkYMbw 7U+RE7tRU/Ko4By0goY4sHspHZte3nOVSSLDc7lBDpteuDAXMorvc1vkrauD/4iu eSoaKeMgVLVoDm1p/tyZyfA09+KGDXFJlv1CEZNZBnUIgKh64uNHgOfCPb7jdOLY wPzEXwIkR3LGMurUfWmp2kzKp9IKz/ZNp5c1F8VDAEuUGXD+no4AbQggQUVGcMW3 tBV3E8heR0BcHtuKo8porT1DhMr6SLIi -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:14 2025 by rpki-client