$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json) Hash identifier: HofmrDfezibn/ofgHSRqxis+gq5/8ocFgCqxthX2tXg= Subject key identifier: 43:36:E5:B0:6F:F4:55:D9:03:96:76:63:BD:9C:74:53:39:8D:75:B0 Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft Manifest number: 0C1D Signing time: Thu 24 Apr 2025 18:30:39 +0000 Manifest this update: Thu 24 Apr 2025 18:30:39 +0000 Manifest next update: Thu 01 May 2025 18:30:39 +0000 Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: OdtWVXBW77Y18l+vHOYu12FcrBDx3mIx1bUAJHmdzvo=) 2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Apr 24 18:30:39 2025 GMT Not After : May 1 18:30:39 2025 GMT Subject: CN=680a834f-17a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:b6:06:0d:f7:13:b3:d0:be:ed:d6:00:6f: ff:05:76:6d:0b:ca:9d:9b:16:91:fd:8c:75:65:69: df:3b:d4:ee:cf:a6:78:2d:de:43:23:f5:11:b4:7d: 5d:ff:af:c9:e7:16:5d:3a:4e:f0:a4:a8:0d:ea:b9: 71:03:d0:44:cd:7c:1b:41:c8:43:8f:56:76:d5:91: 13:27:de:e4:92:c2:ca:e4:f8:03:09:d2:60:79:fb: e5:3e:32:4f:c0:6e:c3:be:9c:19:19:11:a8:70:15: 96:a2:86:ba:b8:3b:7e:ee:e5:68:43:3b:ef:74:a6: f5:4d:bd:35:47:08:ff:d7:88:94:d5:55:8b:cb:56: a9:b6:8d:dc:e2:26:b9:1e:b8:0b:94:d1:b4:9e:a7: fc:28:b4:af:09:ec:02:d8:b3:bf:0d:48:5e:35:dd: 33:6f:e2:cc:7f:75:96:e1:ba:f2:22:bf:70:eb:87: 99:e2:1e:6f:bb:60:79:5f:97:59:ac:79:f6:e9:81: 12:04:a4:c6:1a:d3:9c:73:a1:9f:08:a8:dd:4e:1b: 15:74:8a:42:76:3b:63:35:d9:fa:11:6b:8b:fc:f3: f5:77:50:44:96:be:e6:c7:47:da:c6:bd:c2:57:32: 1f:02:ae:b7:f1:18:51:0d:4c:bc:e0:ae:62:e6:3b: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:E5:B0:6F:F4:55:D9:03:96:76:63:BD:9C:74:53:39:8D:75:B0 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:41:72:13:b6:df:c2:ea:ba:ef:87:f0:90:af:1c:d9:50:f9: 9e:aa:5e:e7:87:98:48:4b:40:14:aa:92:ef:a7:ca:08:b4:8d: d1:61:22:bf:9d:82:f7:0f:4c:e9:69:85:14:ef:d8:bf:70:dd: f0:df:a1:1d:92:91:09:55:9f:35:75:ec:ec:72:6c:09:8d:64: d8:d3:e5:1a:19:d0:8f:4d:e3:83:4f:6b:d4:83:1b:d1:b5:9b: 2d:e3:85:14:7b:4b:f0:65:48:7d:62:6d:76:2a:15:2a:fb:ce: 72:f6:61:f6:48:0a:03:5b:88:d2:cd:65:d5:80:2c:5d:03:e5: a3:f9:2c:f8:e8:4a:95:37:b7:60:cc:68:ae:ef:b1:a7:6a:d9: 45:c9:75:5b:50:1f:b5:33:13:8b:5d:72:75:d2:c1:bb:e7:9a: 4b:00:ae:8b:3f:24:bd:a3:29:22:5b:a7:c6:71:20:99:b7:83: 65:91:61:1a:2d:84:6d:6c:6a:82:50:89:f9:f0:6f:7a:50:76: 17:fd:60:c6:40:23:de:99:38:00:e6:65:50:40:95:c6:11:64: 28:e3:a8:fc:bc:c0:a4:89:a6:98:1a:27:45:22:f6:1c:a5:89: f9:bd:d1:26:1d:b2:6e:44:f4:7e:ad:81:d8:7d:a2:57:62:6e: 2d:00:94:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjUwNDI0MTgzMDM5WhcNMjUwNTAxMTgzMDM5WjAYMRYwFAYD VQQDEw02ODBhODM0Zi0xN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8q2Bg33E7PQvu3WAG//BXZtC8qdmxaR/Yx1ZWnfO9Tuz6Z4Ld5DI/URtH1d /6/J5xZdOk7wpKgN6rlxA9BEzXwbQchDj1Z21ZETJ97kksLK5PgDCdJgefvlPjJP wG7DvpwZGRGocBWWooa6uDt+7uVoQzvvdKb1Tb01Rwj/14iU1VWLy1apto3c4ia5 HrgLlNG0nqf8KLSvCewC2LO/DUheNd0zb+LMf3WW4bryIr9w64eZ4h5vu2B5X5dZ rHn26YESBKTGGtOcc6GfCKjdThsVdIpCdjtjNdn6EWuL/PP1d1BElr7mx0faxr3C VzIfAq638RhRDUy84K5i5juv4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM25bBv 9FXZA5Z2Y72cdFM5jXWwMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTZFOC83QkNBRkYwMjA5MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlk V1pHU2pWbWsyMlZCR3BhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUQXITtt/C6rrvh/CQrxzZUPmeql7nh5hIS0AUqpLvp8oItI3RYSK/ nYL3D0zpaYUU79i/cN3w36EdkpEJVZ81dezscmwJjWTY0+UaGdCPTeODT2vUgxvR tZst44UUe0vwZUh9Ym12KhUq+85y9mH2SAoDW4jSzWXVgCxdA+Wj+Sz46EqVN7dg zGiu77GnatlFyXVbUB+1MxOLXXJ10sG755pLAK6LPyS9oykiW6fGcSCZt4NlkWEa LYRtbGqCUIn58G96UHYX/WDGQCPemTgA5mVQQJXGEWQo46j8vMCkiaaYGidFIvYc pYn5vdEmHbJuRPR+rYHYfaJXYm4tAJSK -----END CERTIFICATE-----Generated at Sat Apr 26 14:20:55 2025 by rpki-client