$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft File: lbEEDPO_7AXOhB2vqalQi3CZfxw.mft (raw, json) Hash identifier: TU/fjr3+VN99D+c/T2zKtPsUSFhaxoMjY8lAU+v5hDk= Subject key identifier: FD:4C:31:F5:79:1F:70:8B:D0:6A:62:0A:11:3D:3B:F3:E5:3E:DF:67 Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C Certificate issuer: /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft Manifest number: 0B Signing time: Fri 25 Apr 2025 07:06:50 +0000 Manifest this update: Fri 25 Apr 2025 07:06:49 +0000 Manifest next update: Fri 02 May 2025 07:06:49 +0000 Files and hashes: 1: lbEEDPO_7AXOhB2vqalQi3CZfxw.crl (hash: doo5Vb8qIdt8DNSJnemoQlGfkDg7z1ZHbb89eahS/R0=) 2: 9EDE26C813A211F095A2D46DC4F9AE02.roa (hash: 9+x+gO7VZZ27bFoPVKXDoWm28PjRwAiv38lgAILmn1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C Validity Not Before: Apr 25 07:06:49 2025 GMT Not After : May 2 07:06:49 2025 GMT Subject: CN=680b3489-b246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:3f:05:c5:65:a4:74:0d:36:05:92:04:f1: de:ec:b2:0c:00:9b:ec:4e:13:23:6f:0c:5a:b3:b0: f8:1c:66:97:83:73:13:7a:35:4b:74:0c:a7:99:fc: 3b:73:a0:c3:2d:cc:7a:7a:f0:7c:7c:0e:1e:34:e7: da:54:95:09:c8:34:8c:10:ce:16:60:9f:f6:98:87: 10:37:ba:14:ab:2d:54:ed:2f:11:14:76:06:27:7f: 45:72:dc:6c:7d:e0:3b:0a:88:5d:15:fb:5a:22:f7: 1a:9e:24:5d:55:4a:f5:dd:02:16:b8:db:af:88:d5: c5:67:d5:fb:5b:19:dc:c8:98:e2:d8:f0:72:fa:2b: 6f:b1:ce:4d:88:5d:b6:a2:fd:4a:2f:b3:75:89:38: ef:e4:d7:99:32:b4:ff:4d:03:7e:b8:c1:8c:77:cf: 43:a2:a6:4b:7f:d3:75:59:ff:a1:07:ce:f6:34:13: 28:c7:d2:ed:13:20:e3:c6:29:a7:d9:79:9f:f4:0d: 18:93:15:49:79:eb:cc:20:db:ca:ef:b9:c0:17:e4: 6f:83:cc:df:40:a0:45:1f:f4:fa:b6:7d:aa:d9:2f: 6b:73:fc:af:31:e7:87:69:32:5b:8c:eb:70:ef:a1: 5e:7a:5d:d3:d0:a9:6b:e6:fb:5a:5d:96:a4:e1:14: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4C:31:F5:79:1F:70:8B:D0:6A:62:0A:11:3D:3B:F3:E5:3E:DF:67 X509v3 Authority Key Identifier: keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:63:71:24:7c:43:b0:39:2d:5f:c8:37:b5:ed:ed:a9:43: be:29:5a:3f:9a:8c:a1:fe:a9:64:e5:77:3f:43:85:78:f4:e9: af:a9:0d:47:7c:76:ef:a3:7e:98:b1:59:9b:96:11:05:0c:d2: 51:35:a5:4f:8b:b8:08:1b:ee:4d:b5:63:19:d8:05:13:a4:cd: fb:26:6b:a5:9c:1a:13:8c:e9:7e:9e:f2:c4:54:72:61:ae:b8: d4:f2:f3:04:97:84:ca:2e:52:9b:e7:e2:af:d1:3b:56:39:da: 80:d0:24:12:4f:5a:b0:0d:8f:57:65:92:98:f5:c0:53:75:37: 25:23:64:a3:94:37:88:98:ee:1f:4f:54:4d:1b:11:55:0f:37: 2a:84:bf:d3:8b:ee:44:25:c1:0d:b1:6a:dd:83:89:44:e6:73: 82:c8:e8:a5:7f:0e:a8:fc:8c:ec:76:0c:41:12:13:6b:a7:7b: 15:68:32:2e:23:26:30:01:b9:dd:04:c6:03:2f:65:0a:e7:90: 39:b4:50:2a:53:9e:6b:83:aa:a1:56:02:7b:49:25:db:30:77: 74:29:52:c0:28:76:36:e4:51:48:76:0d:9e:63:70:88:7d:26: 8a:37:6d:68:ed:ec:94:d3:fd:39:64:80:1c:b8:e1:68:32:3b: 2c:3f:b4:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qjk2QzExMC8GA1UEBRMoOTVCMTA0MENGM0JGRUMwNUNFODQxREFGQTlBOTUwOEI3 MDk5N0YxQzAeFw0yNTA0MjUwNzA2NDlaFw0yNTA1MDIwNzA2NDlaMBgxFjAUBgNV BAMTDTY4MGIzNDg5LWIyNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeST8FxWWkdA02BZIE8d7ssgwAm+xOEyNvDFqzsPgcZpeDcxN6NUt0DKeZ/Dtz oMMtzHp68Hx8Dh4059pUlQnINIwQzhZgn/aYhxA3uhSrLVTtLxEUdgYnf0Vy3Gx9 4DsKiF0V+1oi9xqeJF1VSvXdAha426+I1cVn1ftbGdzImOLY8HL6K2+xzk2IXbai /Uovs3WJOO/k15kytP9NA364wYx3z0Oipkt/03VZ/6EHzvY0EyjH0u0TIOPGKafZ eZ/0DRiTFUl568wg28rvucAX5G+DzN9AoEUf9Pq2farZL2tz/K8x54dpMluM63Dv oV56XdPQqWvm+1pdlqThFH5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Uwx9Xkf cIvQamIKET078+U+32cwHwYDVR0jBBgwFoAUlbEEDPO/7AXOhB2vqalQi3CZfxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCOTZDLzREMkJBOEEwMTNB MjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGJFRURQT183QVhPaEIydnFhbFFpM0NaZnh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC OTZDLzREMkJBOEEwMTNBMjExRjA5MUVCNjM2REM0RjlBRTAyL2xiRUVEUE9fN0FY T2hCMnZxYWxRaTNDWmZ4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwIY3EkfEOwOS1fyDe17e2pQ74pWj+ajKH+qWTldz9DhXj06a+pDUd8 du+jfpixWZuWEQUM0lE1pU+LuAgb7k21YxnYBROkzfsma6WcGhOM6X6e8sRUcmGu uNTy8wSXhMouUpvn4q/RO1Y52oDQJBJPWrANj1dlkpj1wFN1NyUjZKOUN4iY7h9P VE0bEVUPNyqEv9OL7kQlwQ2xat2DiUTmc4LI6KV/Dqj8jOx2DEESE2unexVoMi4j JjABud0ExgMvZQrnkDm0UCpTnmuDqqFWAntJJdswd3QpUsAodjbkUUh2DZ5jcIh9 Joo3bWjt7JTT/TlkgBy44WgyOyw/tNo= -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:59 2025 by rpki-client