$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: ViHSubS1X/aIqFUOX17oGqlmO3mavlIt1Lsmui7OFP4= Subject key identifier: 3F:B6:80:BD:7F:69:4F:F5:CE:03:22:0A:5E:06:2D:D1:40:68:D8:13 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 139B Signing time: Thu 24 Apr 2025 18:51:23 +0000 Manifest this update: Thu 24 Apr 2025 18:51:23 +0000 Manifest next update: Thu 01 May 2025 18:51:23 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: xkDXDYFwoq7q65G0lNLA16w7X80xtwqpzTDjzjaLQaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Apr 24 18:51:23 2025 GMT Not After : May 1 18:51:23 2025 GMT Subject: CN=680a882b-b0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:fa:bc:b6:48:9a:3f:d1:a6:90:dd:f9:d6: b1:fe:b6:ed:3f:86:26:93:47:93:d8:fa:ca:c4:cc: f5:a6:b4:d1:41:2b:f7:90:83:9c:94:89:ef:2d:f2: a2:06:bb:cb:f4:7e:e7:9d:6b:f5:c6:6c:62:d7:6b: 3d:c7:70:b2:2f:13:c1:4a:17:c3:fa:ac:fd:58:24: 19:49:ec:a6:a7:05:a6:ab:19:1f:07:88:ff:e6:6a: e2:3a:37:49:34:ab:b2:dc:b9:fd:06:22:1d:4c:ec: c9:e1:f3:1d:b6:f8:0d:0d:5a:aa:19:6a:9b:0d:d9: 91:c2:db:f2:f5:13:80:0e:a2:82:3d:2f:47:52:4e: e9:d7:78:4a:99:ac:5a:c5:33:6f:da:0e:63:08:33: ea:8d:19:25:a1:d1:df:51:13:a3:04:33:98:60:3b: 61:c7:82:da:87:c0:93:31:9c:b9:0f:4b:47:f2:3e: 51:88:7e:1c:42:ea:0c:a9:78:1f:4a:f4:b7:d8:dd: ed:a5:53:d9:7e:2f:bf:be:97:9d:96:33:3b:b9:cf: 72:90:3a:54:7b:28:3f:60:f8:b3:6a:03:1d:2d:22: 42:bc:67:4c:36:e0:44:aa:1f:d5:2f:8f:24:af:8d: be:15:f9:3e:01:2c:00:59:46:27:4d:26:20:f0:ef: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B6:80:BD:7F:69:4F:F5:CE:03:22:0A:5E:06:2D:D1:40:68:D8:13 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:14:be:01:6b:03:56:da:90:93:9b:2d:61:75:bf:87:50:a8: 64:91:7b:22:e3:da:6d:f1:de:47:30:04:20:4a:a3:03:5c:46: a3:2a:74:7a:80:19:74:c9:fd:7d:68:b1:c8:27:50:92:4f:be: c4:70:0e:23:d0:d8:15:88:49:bb:c3:e2:74:8b:af:53:c4:6b: 07:f8:d2:d9:ec:0e:32:af:9c:24:01:4e:fe:0a:e4:20:7e:bb: 53:4a:bf:a3:7c:6b:2f:f4:0c:3d:83:1e:f8:b4:fc:b0:e5:15: 11:1c:63:bd:74:4b:55:b5:ae:99:87:52:4f:a6:62:d4:7e:eb: 94:9f:9f:dd:80:5a:6c:cb:5f:63:cd:4e:41:ac:ae:46:8d:ce: 19:fc:4b:42:3a:03:35:3f:1a:64:08:bd:6b:2e:14:69:0e:13: 67:8d:90:d9:35:af:2f:61:82:ed:af:05:66:04:8e:ce:88:9b: 40:fb:79:ec:89:d3:3a:72:40:d8:0b:a0:36:ea:31:95:b9:e5: ba:43:58:7c:1c:e1:32:cd:52:ed:0e:0a:9e:35:71:19:bf:35: 28:a7:e2:c9:8d:da:07:61:85:36:5e:b3:8b:69:44:2e:35:9e: 7f:92:53:3f:08:42:93:1c:34:76:60:1a:e5:d1:a2:1e:9b:93: 37:83:a2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUwNDI0MTg1MTIzWhcNMjUwNTAxMTg1MTIzWjAYMRYwFAYD VQQDEw02ODBhODgyYi1iMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2/6vLZImj/RppDd+dax/rbtP4Ymk0eT2PrKxMz1prTRQSv3kIOclInvLfKi BrvL9H7nnWv1xmxi12s9x3CyLxPBShfD+qz9WCQZSeympwWmqxkfB4j/5mriOjdJ NKuy3Ln9BiIdTOzJ4fMdtvgNDVqqGWqbDdmRwtvy9ROADqKCPS9HUk7p13hKmaxa xTNv2g5jCDPqjRklodHfUROjBDOYYDthx4Lah8CTMZy5D0tH8j5RiH4cQuoMqXgf SvS32N3tpVPZfi+/vpedljM7uc9ykDpUeyg/YPizagMdLSJCvGdMNuBEqh/VL48k r42+Ffk+ASwAWUYnTSYg8O8ZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+2gL1/ aU/1zgMiCl4GLdFAaNgTMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFL4BawNW2pCTmy1hdb+HUKhkkXsi49pt8d5HMAQgSqMDXEajKnR6 gBl0yf19aLHIJ1CST77EcA4j0NgViEm7w+J0i69TxGsH+NLZ7A4yr5wkAU7+CuQg frtTSr+jfGsv9Aw9gx74tPyw5RURHGO9dEtVta6Zh1JPpmLUfuuUn5/dgFpsy19j zU5BrK5Gjc4Z/EtCOgM1PxpkCL1rLhRpDhNnjZDZNa8vYYLtrwVmBI7OiJtA+3ns idM6ckDYC6A26jGVueW6Q1h8HOEyzVLtDgqeNXEZvzUop+LJjdoHYYU2XrOLaUQu NZ5/klM/CEKTHDR2YBrl0aIem5M3g6K/ -----END CERTIFICATE-----Generated at Sat Apr 26 08:29:59 2025 by rpki-client