$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: 6KS7mUfOzTLfy32HrS8HncwLbVF9WRSTW/h7AR7aLcQ= Subject key identifier: FA:30:23:2B:89:37:92:12:34:A1:46:F9:E9:B9:A9:04:D5:A7:26:C8 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B03 Signing time: Thu 24 Apr 2025 19:12:38 +0000 Manifest this update: Thu 24 Apr 2025 19:12:38 +0000 Manifest next update: Thu 01 May 2025 19:12:38 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: Zm/Z8QXQRlyGbkEXA4HE7Rxsk0RXJywkx9t0Vrfq3Dg=) 2: 6D20C69805F811F0833EAC2FC4F9AE02.roa (hash: mqegBy9CQXgjEaVSay/tvLxEyahjajLb/MPs8C1oBxs=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: So3/8BRv6CbiRlGyY4wETM3bbMNzF/0bzt2kH2rX5YA=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: eHhYDx0TTrbl06qNq4Uwz8JzG4h29k3aeCeTeHUoPnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Apr 24 19:12:38 2025 GMT Not After : May 1 19:12:38 2025 GMT Subject: CN=680a8d26-434f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:d6:d8:3e:88:bd:75:34:c9:b4:9c:4f:3b: b2:51:c9:11:e2:84:02:83:6a:34:ba:c8:cf:19:64: ab:ea:e2:4a:83:d8:a5:a2:8e:26:ef:2f:a6:2b:a9: b4:05:5c:ca:c9:30:09:bb:77:25:5f:16:76:f6:c2: f0:24:c7:ca:80:87:06:3d:c0:5f:bd:bc:b5:c5:8b: 8d:e1:5c:11:18:4c:04:42:f9:f1:c1:a0:09:36:42: 00:65:66:e9:20:dc:eb:3a:2f:48:de:87:50:a8:a1: f1:e1:28:94:fd:dc:9f:73:2b:1b:c7:cd:c4:7e:56: 7f:02:cf:b5:8f:af:6d:10:f4:14:93:fa:e2:de:ff: b5:fe:42:ab:81:04:b7:54:27:0e:02:05:80:45:8b: 53:c6:eb:4b:12:c5:d5:62:38:c7:dd:ee:3f:94:9e: 31:b8:7a:dc:5c:ad:9d:0a:31:b4:98:b7:66:c7:11: 5f:50:92:c7:d0:34:ac:5d:c1:2f:44:6e:a4:0f:34: cc:87:f9:db:1d:9a:99:78:8b:e8:6b:67:83:e3:72: de:8f:66:f2:4f:f5:61:19:37:5b:90:0c:62:1a:0a: b3:44:ac:89:a3:8d:df:5f:1f:fd:17:da:42:4a:17: ae:35:b0:02:2c:79:69:00:4d:74:a7:3f:7c:c8:ee: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:30:23:2B:89:37:92:12:34:A1:46:F9:E9:B9:A9:04:D5:A7:26:C8 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:42:1a:15:25:7f:c4:03:22:ad:85:7c:cb:80:69:c0:de:dd: df:d6:e5:e9:56:a6:e5:ef:13:16:fa:e6:0e:8a:8f:e5:34:c3: 5c:75:8b:40:4f:c3:ea:0d:c9:81:c7:fb:1c:ee:22:d2:53:b7: 7c:16:d7:54:8c:7b:12:a6:02:db:3d:bf:21:51:59:61:eb:35: 66:3f:62:ef:fc:d6:b1:d2:30:ff:6f:e8:28:00:31:f1:fd:d5: 8b:60:f1:48:65:7d:87:48:c9:76:2b:a7:f8:b7:a9:dc:59:12: e3:77:9a:37:c9:6a:6b:40:0e:25:53:22:8e:66:1b:d7:21:19: 79:66:2d:09:6d:82:6b:c3:3e:03:1a:b3:94:b7:39:4d:a3:86: 77:31:4e:d0:e6:62:7c:e9:f8:43:8d:2c:cf:7e:46:b9:a8:7f: 3d:00:df:28:fe:a8:aa:af:59:df:69:be:f1:28:62:e1:75:21: 12:e6:0f:ae:8f:cd:5e:f6:d0:71:31:45:6d:8e:52:f1:57:f8: 62:44:e9:3d:34:0f:e8:9e:97:3a:25:20:75:8d:fb:15:e5:a6: 38:ee:e6:4a:c7:4e:e4:29:9b:50:c6:72:2e:d0:1d:ae:5f:e5: ed:cc:21:42:0b:c2:76:b1:c0:3a:35:b8:d2:6b:51:77:d8:14: a9:d2:2e:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwNDI0MTkxMjM4WhcNMjUwNTAxMTkxMjM4WjAYMRYwFAYD VQQDEw02ODBhOGQyNi00MzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53PW2D6IvXU0ybScTzuyUckR4oQCg2o0usjPGWSr6uJKg9iloo4m7y+mK6m0 BVzKyTAJu3clXxZ29sLwJMfKgIcGPcBfvby1xYuN4VwRGEwEQvnxwaAJNkIAZWbp INzrOi9I3odQqKHx4SiU/dyfcysbx83EflZ/As+1j69tEPQUk/ri3v+1/kKrgQS3 VCcOAgWARYtTxutLEsXVYjjH3e4/lJ4xuHrcXK2dCjG0mLdmxxFfUJLH0DSsXcEv RG6kDzTMh/nbHZqZeIvoa2eD43Lej2byT/VhGTdbkAxiGgqzRKyJo43fXx/9F9pC SheuNbACLHlpAE10pz98yO69YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPowIyuJ N5ISNKFG+em5qQTVpybIMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQhoVJX/EAyKthXzLgGnA3t3f1uXpVqbl7xMW+uYOio/lNMNcdYtA T8PqDcmBx/sc7iLSU7d8FtdUjHsSpgLbPb8hUVlh6zVmP2Lv/Nax0jD/b+goADHx /dWLYPFIZX2HSMl2K6f4t6ncWRLjd5o3yWprQA4lUyKOZhvXIRl5Zi0JbYJrwz4D GrOUtzlNo4Z3MU7Q5mJ86fhDjSzPfka5qH89AN8o/qiqr1nfab7xKGLhdSES5g+u j81e9tBxMUVtjlLxV/hiROk9NA/onpc6JSB1jfsV5aY47uZKx07kKZtQxnIu0B2u X+XtzCFCC8J2scA6NbjSa1F32BSp0i5r -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:37 2025 by rpki-client