$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft File: LnNx4gZThK0R1DN9DS7NH2bSGco.mft (raw, json) Hash identifier: YHRoMShblF8YJ3GbL9DmYCA0t8xr0jQDNxQlUhYI030= Subject key identifier: 75:6F:72:AC:27:98:CD:F2:77:B5:AA:5D:C4:40:59:EE:4A:5E:28:F5 Authority key identifier: 2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA Certificate issuer: /CN=A91F5753/serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft Manifest number: 0242 Signing time: Fri 25 Apr 2025 01:39:15 +0000 Manifest this update: Fri 25 Apr 2025 01:39:15 +0000 Manifest next update: Fri 02 May 2025 01:39:15 +0000 Files and hashes: 1: LnNx4gZThK0R1DN9DS7NH2bSGco.crl (hash: m66aXhUJdq5W7ivICuKL/VZ5QqyOL7cyGxGG33QcKXA=) 2: 68C425FC1BBF11ED9F87C083C4F9AE02.roa (hash: Zxoh9Ofh0OWLZ5oXPc2RuTae5hFatyn/nJ6RPctUa3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5753, serialNumber=2E7371E2065384AD11D4337D0D2ECD1F66D219CA Validity Not Before: Apr 25 01:39:15 2025 GMT Not After : May 2 01:39:15 2025 GMT Subject: CN=680ae7c3-2516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:10:d8:eb:93:72:1b:c3:59:95:d4:0a:bc:bf: 7d:51:ee:3f:40:f8:60:dc:56:61:1c:ae:0a:1c:51: 11:1c:2c:bc:5f:0b:d1:61:44:29:d4:01:6d:f0:f0: e7:20:6b:fe:d8:1b:d1:3b:9a:e6:33:8a:29:8b:40: 33:24:67:21:fb:d7:86:65:29:7e:a2:56:a4:ed:52: d9:40:bc:b7:6b:97:e7:04:a9:96:1d:dd:fe:57:2b: 92:c9:76:3d:38:91:19:6a:13:92:55:86:d1:78:73: 50:f6:5f:5c:2b:0a:86:b7:f4:d6:b4:cf:a5:17:18: 6d:02:af:8b:6e:79:b1:4d:74:3b:f1:ba:c5:37:d7: 27:30:bb:0a:28:0e:e7:cd:46:4c:d9:01:e5:07:15: af:01:e8:2e:b6:d3:58:d1:65:aa:06:2f:91:23:3e: a4:6c:cd:24:b0:14:72:ef:08:fb:0a:c1:b8:69:8a: 8d:ce:02:c0:72:af:04:e1:72:86:f5:19:be:29:1f: 7c:b7:df:ae:85:d6:0b:67:44:14:80:18:bd:e9:58: 79:29:18:33:bd:11:81:79:d3:b1:d1:77:78:3e:62: 50:50:09:67:db:20:52:7b:52:de:e5:fa:dc:62:03: 4b:f8:cd:3c:3e:62:c8:f4:d9:79:aa:c0:ea:2f:46: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:72:AC:27:98:CD:F2:77:B5:AA:5D:C4:40:59:EE:4A:5E:28:F5 X509v3 Authority Key Identifier: keyid:2E:73:71:E2:06:53:84:AD:11:D4:33:7D:0D:2E:CD:1F:66:D2:19:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNx4gZThK0R1DN9DS7NH2bSGco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5753/7B5624441BBB11EDA87F6E67C4F9AE02/LnNx4gZThK0R1DN9DS7NH2bSGco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:7f:4f:2f:40:93:8a:b6:6b:24:d3:bf:74:91:a5:db:0a: f7:1a:60:89:22:aa:20:c0:60:81:2a:28:fa:5b:b4:a3:6b:81: c5:9f:96:32:79:f3:ec:6b:58:30:ae:8d:66:44:42:0c:38:b1: d3:ed:9f:b3:88:a9:1c:32:cc:5f:92:b2:d5:d2:2b:cb:49:a0: 2b:2f:c9:41:76:d9:d0:23:c8:9c:12:e2:48:9a:1f:17:6b:b2: a9:6d:92:65:2f:52:75:d5:44:2b:91:b1:1d:74:76:f3:a0:84: 55:2b:fd:7e:cb:e8:f9:3c:6d:54:06:29:cb:71:42:2f:c4:12: 9e:bf:13:ad:58:2d:c0:ea:82:49:43:99:93:8d:35:11:43:30: a7:fe:ff:a3:41:3c:ad:61:a3:55:7a:4b:bc:f0:66:5b:e3:90: 48:0d:b9:cc:3c:b6:1f:bc:44:4c:99:24:28:43:07:b0:45:91: d4:0b:ce:9f:c8:55:41:c7:a7:5d:33:a4:6f:3c:2e:6d:aa:38: 8d:dd:a9:d6:da:77:29:51:56:ed:bb:d8:1c:91:c9:34:a1:5c: bb:dc:e4:00:6b:f0:a6:1a:48:56:67:d2:5e:6b:dc:d4:47:02: 54:37:0f:31:fe:bf:c1:fd:80:8b:13:6f:54:85:e0:34:96:ac: 6e:f0:3d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTMxMTAvBgNVBAUTKDJFNzM3MUUyMDY1Mzg0QUQxMUQ0MzM3RDBEMkVDRDFG NjZEMjE5Q0EwHhcNMjUwNDI1MDEzOTE1WhcNMjUwNTAyMDEzOTE1WjAYMRYwFAYD VQQDEw02ODBhZTdjMy0yNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hDY65NyG8NZldQKvL99Ue4/QPhg3FZhHK4KHFERHCy8XwvRYUQp1AFt8PDn IGv+2BvRO5rmM4opi0AzJGch+9eGZSl+olak7VLZQLy3a5fnBKmWHd3+VyuSyXY9 OJEZahOSVYbReHNQ9l9cKwqGt/TWtM+lFxhtAq+LbnmxTXQ78brFN9cnMLsKKA7n zUZM2QHlBxWvAeguttNY0WWqBi+RIz6kbM0ksBRy7wj7CsG4aYqNzgLAcq8E4XKG 9Rm+KR98t9+uhdYLZ0QUgBi96Vh5KRgzvRGBedOx0Xd4PmJQUAln2yBSe1Le5frc YgNL+M08PmLI9Nl5qsDqL0an2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVvcqwn mM3yd7WqXcRAWe5KXij1MB8GA1UdIwQYMBaAFC5zceIGU4StEdQzfQ0uzR9m0hnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1My83QjU2MjQ0NDFC QkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhLMFIxRE45RFM3TkgyYlNH Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTng0Z1pUaEswUjFETjlEUzdOSDJiU0djby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc1My83QjU2MjQ0NDFCQkIxMUVEQTg3RjZFNjdDNEY5QUUwMi9Mbk54NGdaVGhL MFIxRE45RFM3TkgyYlNHY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvHH9PL0CTirZrJNO/dJGl2wr3GmCJIqogwGCBKij6W7Sja4HFn5Yy efPsa1gwro1mREIMOLHT7Z+ziKkcMsxfkrLV0ivLSaArL8lBdtnQI8icEuJImh8X a7KpbZJlL1J11UQrkbEddHbzoIRVK/1+y+j5PG1UBinLcUIvxBKevxOtWC3A6oJJ Q5mTjTURQzCn/v+jQTytYaNVeku88GZb45BIDbnMPLYfvERMmSQoQwewRZHUC86f yFVBx6ddM6RvPC5tqjiN3anW2ncpUVbtu9gckck0oVy73OQAa/CmGkhWZ9Jea9zU RwJUNw8x/r/B/YCLE29UheA0lqxu8D2x -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:54 2025 by rpki-client