$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json) Hash identifier: BD3bBUCsuWJDXlLFMGFrCI3KKAaKIPry6WkYZOYXU1k= Subject key identifier: 1B:D8:EB:7F:F8:74:A7:CC:45:E9:CC:6F:1B:5E:01:72:40:4C:7B:BB Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft Manifest number: DF Signing time: Fri 25 Apr 2025 04:32:46 +0000 Manifest this update: Fri 25 Apr 2025 04:32:46 +0000 Manifest next update: Fri 02 May 2025 04:32:46 +0000 Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: e5zw66TAI+tzGovUw2w8B5oW1IJsj+wosqLg7Kw6GVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Validity Not Before: Apr 25 04:32:46 2025 GMT Not After : May 2 04:32:46 2025 GMT Subject: CN=680b106e-7b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:49:65:29:da:40:59:ef:1f:ea:a9:4c:f9: c1:6f:07:8d:5b:f9:47:d9:35:a2:76:ea:55:32:7b: ca:cf:be:94:9e:38:20:6c:ce:4a:94:f9:50:5f:e4: 20:83:1f:69:ef:aa:0c:d5:fb:a7:fc:25:0b:e6:5e: 93:4d:77:a1:4d:c6:26:e4:b6:51:90:16:06:b1:a3: ed:e3:1b:9c:7b:18:5e:44:fb:bd:cb:94:4c:0f:8f: 15:6a:12:7e:37:78:52:a3:99:a2:b8:48:1d:5a:d3: 80:9f:f7:87:64:7d:7f:bd:58:2b:22:4b:56:ea:eb: 61:6c:d1:d2:2a:fc:c0:d2:5c:ce:b7:7b:5d:29:ef: 88:76:dc:5b:36:58:58:c8:04:b4:be:71:ae:d3:72: b4:62:61:03:10:b2:dd:15:62:45:18:d7:ea:7a:2f: 0f:3a:e6:75:e5:0b:c1:2a:e0:0b:7a:18:8b:c1:e8: 6e:43:2d:5d:95:b9:32:94:87:83:0d:f4:e2:48:e3: db:45:9e:9c:43:38:f7:fc:10:12:10:8c:bf:f3:16: 1f:fd:45:6c:23:0d:9d:d7:d6:10:25:9e:3c:a8:23: 65:d5:35:7f:3a:b6:62:56:83:7a:0c:5b:6c:fd:68: db:56:2c:ca:53:1d:9c:e3:73:13:af:67:a2:eb:22: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:EB:7F:F8:74:A7:CC:45:E9:CC:6F:1B:5E:01:72:40:4C:7B:BB X509v3 Authority Key Identifier: keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:ff:8b:c1:a9:e1:de:29:81:bd:e3:eb:c6:fd:48:c8:6b: a4:7a:25:c8:27:1f:2c:1c:fe:8b:77:1b:18:d9:31:22:5d:0c: f4:0c:16:95:c1:e7:6f:ec:c3:00:cc:b6:9d:81:fa:bf:df:b0: b6:7b:2a:ad:af:18:97:15:00:ed:53:84:d2:a8:dc:ea:e6:07: c1:de:fd:b5:3a:12:e4:fd:42:28:46:14:91:68:a1:03:bf:dd: 88:0d:0f:77:f0:00:10:9b:8c:26:8f:a4:55:0f:68:d1:e0:68: fc:35:e6:01:66:3b:5c:e1:3f:9e:9d:3c:85:08:e3:c5:9c:d1: b3:da:21:4a:6f:6e:ed:27:91:4d:91:df:78:79:32:a8:a8:4d: 10:80:8e:58:c7:09:20:9f:f3:dd:e0:9e:6c:b1:df:b7:06:3d: 48:f8:43:3c:17:4a:89:99:97:79:99:80:2b:29:28:f7:7e:0a: e8:0c:b9:e6:cc:10:88:47:3b:64:e2:66:f8:2b:48:a4:f0:9a: ca:27:2a:84:49:72:8e:c7:a7:72:ad:f5:65:f9:75:fc:30:f0: ed:df:14:98:ee:a5:10:b4:5f:6c:41:93:24:82:6e:6a:d0:0e: 5c:d9:de:92:f5:51:b9:4b:0a:70:05:44:6e:d7:da:46:a3:96: 28:32:54:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC NUYwQjJFQTQwHhcNMjUwNDI1MDQzMjQ2WhcNMjUwNTAyMDQzMjQ2WjAYMRYwFAYD VQQDEw02ODBiMTA2ZS03YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wZJZSnaQFnvH+qpTPnBbweNW/lH2TWidupVMnvKz76UnjggbM5KlPlQX+Qg gx9p76oM1fun/CUL5l6TTXehTcYm5LZRkBYGsaPt4xucexheRPu9y5RMD48VahJ+ N3hSo5miuEgdWtOAn/eHZH1/vVgrIktW6uthbNHSKvzA0lzOt3tdKe+IdtxbNlhY yAS0vnGu03K0YmEDELLdFWJFGNfqei8POuZ15QvBKuALehiLwehuQy1dlbkylIeD DfTiSOPbRZ6cQzj3/BASEIy/8xYf/UVsIw2d19YQJZ48qCNl1TV/OrZiVoN6DFts /WjbVizKUx2c43MTr2ei6yL0/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvY63/4 dKfMRenMbxteAXJATHu7MB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe3/+Lwanh3imBvePrxv1IyGukeiXIJx8sHP6LdxsY2TEiXQz0DBaV wedv7MMAzLadgfq/37C2eyqtrxiXFQDtU4TSqNzq5gfB3v21OhLk/UIoRhSRaKED v92IDQ938AAQm4wmj6RVD2jR4Gj8NeYBZjtc4T+enTyFCOPFnNGz2iFKb27tJ5FN kd94eTKoqE0QgI5Yxwkgn/Pd4J5ssd+3Bj1I+EM8F0qJmZd5mYArKSj3fgroDLnm zBCIRztk4mb4K0ik8JrKJyqESXKOx6dyrfVl+XX8MPDt3xSY7qUQtF9sQZMkgm5q 0A5c2d6S9VG5SwpwBURu19pGo5YoMlSX -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:31 2025 by rpki-client