$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: auGMJfc2Cf/HKIG55ub9PqwJUvnWm3zGrJwzRt9p0nQ= Subject key identifier: 40:44:B2:34:7C:EB:AC:00:9D:D9:AD:4B:51:0A:0F:51:D9:0A:E0:8B Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 014E Signing time: Fri 25 Apr 2025 03:20:56 +0000 Manifest this update: Fri 25 Apr 2025 03:20:55 +0000 Manifest next update: Fri 02 May 2025 03:20:55 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: oV0IciuJTtQ9SXlBhqSA3pbGEApqYVBthbjVjBsg0eM=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Apr 25 03:20:55 2025 GMT Not After : May 2 03:20:55 2025 GMT Subject: CN=680aff98-bf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:7d:93:fb:be:86:6e:7c:7e:ca:94:af:60: 79:3c:6a:cf:dc:3d:7d:b4:71:0c:5d:f3:5d:7d:3c: 91:39:12:b6:09:32:47:5f:dc:b3:ff:a5:aa:67:72: bd:48:dd:43:cb:db:a6:12:94:f1:06:ef:bb:78:42: 85:9b:15:ed:4f:39:bb:30:ae:f6:26:d7:23:d7:eb: 65:61:b2:f0:87:dc:d5:c5:00:ad:95:29:e6:66:29: aa:f5:c5:05:f7:10:4c:71:53:71:a7:a5:a2:78:31: 68:80:4e:c6:8a:b0:1c:18:49:55:f3:8a:0a:e8:6a: f9:ef:98:e8:bc:58:0c:27:91:85:c8:d2:86:98:e7: 09:38:33:ae:d7:a9:68:c8:cd:71:92:e9:2a:a0:72: a6:0b:f0:be:e5:9c:b9:08:d9:ac:af:6d:5b:6e:37: b7:af:b4:93:3c:40:82:09:79:7d:d5:1f:c6:a7:5d: b0:13:ee:f3:f8:67:e7:6e:22:73:fe:55:68:05:04: 15:7b:69:22:22:54:77:cd:ae:7a:b4:72:df:24:5b: 66:1f:e1:3a:17:c3:67:84:81:b4:b3:e6:cf:9e:ff: e4:57:49:93:a8:01:6d:45:12:3d:2a:ee:fa:b5:01: 9f:42:07:b4:af:ce:a2:3e:84:9c:30:cb:29:1d:db: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:B2:34:7C:EB:AC:00:9D:D9:AD:4B:51:0A:0F:51:D9:0A:E0:8B X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c8:19:ea:2e:b7:16:9b:95:26:0c:4c:93:f1:8f:58:57:8c: 91:8f:10:db:8c:2c:ce:53:70:6c:e0:40:52:1d:fd:58:f9:d8: d1:25:0d:26:4f:ba:54:ac:04:37:67:fc:2b:27:5b:a0:79:8f: c3:3d:45:c2:9b:fd:e3:e8:e0:56:75:91:34:ed:a9:c2:64:c5: e5:1d:87:30:50:0f:7b:4a:aa:a7:7c:64:33:25:f3:d5:de:0d: 56:16:56:bd:bc:83:59:51:9d:81:1b:f1:95:d7:39:63:46:02: 17:bb:e5:00:d4:0c:83:e1:ad:3a:5e:61:da:0a:82:d4:87:20: 1a:7d:ba:4f:9e:c5:31:9a:fb:82:69:7d:d7:46:d0:32:19:a4: a1:e3:65:c3:5a:ca:b1:b2:60:b0:75:c1:cb:c5:0a:90:9a:d5: f4:a3:6c:58:a5:9e:f6:b2:a4:fe:70:7d:f0:85:e3:e6:cd:83: 99:09:b4:54:f8:a5:7d:ee:83:75:78:f4:0e:b7:12:21:40:00: 4c:97:dc:da:ec:f4:bf:ac:8b:88:41:0a:61:01:04:de:c3:7d: 60:eb:24:ba:b3:dd:e5:74:30:fd:13:a0:73:fb:e4:a6:af:e0: 3e:ad:23:3e:df:04:31:4b:51:a4:db:89:e5:51:29:f2:fa:1d: 62:2d:a2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNDI1MDMyMDU1WhcNMjUwNTAyMDMyMDU1WjAYMRYwFAYD VQQDEw02ODBhZmY5OC1iZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzep9k/u+hm58fsqUr2B5PGrP3D19tHEMXfNdfTyRORK2CTJHX9yz/6WqZ3K9 SN1Dy9umEpTxBu+7eEKFmxXtTzm7MK72Jtcj1+tlYbLwh9zVxQCtlSnmZimq9cUF 9xBMcVNxp6WieDFogE7GirAcGElV84oK6Gr575jovFgMJ5GFyNKGmOcJODOu16lo yM1xkukqoHKmC/C+5Zy5CNmsr21bbje3r7STPECCCXl91R/Gp12wE+7z+GfnbiJz /lVoBQQVe2kiIlR3za56tHLfJFtmH+E6F8NnhIG0s+bPnv/kV0mTqAFtRRI9Ku76 tQGfQge0r86iPoScMMspHduXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBEsjR8 66wAndmtS1EKD1HZCuCLMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqyBnqLrcWm5UmDEyT8Y9YV4yRjxDbjCzOU3Bs4EBSHf1Y+djRJQ0m T7pUrAQ3Z/wrJ1ugeY/DPUXCm/3j6OBWdZE07anCZMXlHYcwUA97SqqnfGQzJfPV 3g1WFla9vINZUZ2BG/GV1zljRgIXu+UA1AyD4a06XmHaCoLUhyAafbpPnsUxmvuC aX3XRtAyGaSh42XDWsqxsmCwdcHLxQqQmtX0o2xYpZ72sqT+cH3whePmzYOZCbRU +KV97oN1ePQOtxIhQABMl9za7PS/rIuIQQphAQTew31g6yS6s93ldDD9E6Bz++Sm r+A+rSM+3wQxS1Gk24nlUSny+h1iLaKH -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:05 2025 by rpki-client