$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: anOrtVv8JLW9CiGlTBF9077XnbVajckDwNnZR3+9wSk= Subject key identifier: 77:2F:DA:7C:66:B0:E3:CD:6A:DA:71:71:2F:88:FA:DE:EA:18:0C:19 Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: BE Signing time: Fri 25 Apr 2025 04:56:31 +0000 Manifest this update: Fri 25 Apr 2025 04:56:30 +0000 Manifest next update: Fri 02 May 2025 04:56:30 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: zfGJWSTtAqSHe+BbWzZzU9wD+kEwAa1QpWTwDTK+0qg=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 2Jk6NkRGMZVyLJ5lD/V9WaUiK9h9DfnBbBByEKgktvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Apr 25 04:56:30 2025 GMT Not After : May 2 04:56:30 2025 GMT Subject: CN=680b15ff-9205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:0d:5b:69:d3:e0:5f:75:03:9d:97:18:da: f7:66:70:52:58:7d:30:06:fb:c3:bf:c7:d6:d6:26: 6e:f4:e4:c1:14:35:1d:b5:08:fd:c7:3f:84:1e:5f: f5:59:32:c4:bc:dd:22:eb:80:47:f2:7e:4f:9e:6e: 8b:9b:f3:50:a5:3a:2e:b8:27:d4:c7:b4:26:9f:8d: e0:3c:1d:bc:fd:58:44:95:2e:94:0b:10:81:14:e6: 1e:32:ed:b4:9a:4e:7d:ea:7f:80:f3:46:c1:7b:ba: 39:7d:84:df:4d:a1:45:32:e7:e4:24:06:91:a0:ce: f8:e5:73:3a:da:86:dd:68:c7:cd:2a:7a:b0:3c:11: 9e:c4:97:8e:05:73:46:bb:9d:62:e3:d2:b3:12:25: 37:e0:09:42:4b:71:13:7f:69:8a:97:ac:ca:f6:cd: 75:6b:a8:ba:fc:f5:e7:52:f2:08:37:ca:f1:9c:18: e1:5a:23:59:84:59:61:f8:b0:04:d6:4c:39:a4:3b: d5:d4:2a:66:7f:8f:9e:1f:35:50:9d:0d:b8:4d:46: c3:a6:e2:c9:6a:a9:22:09:9b:08:f3:6d:ef:e2:b9: 8b:b8:da:42:42:02:d0:e2:dc:b6:eb:7c:3f:fb:31: e3:fa:cb:9b:89:ba:bd:db:f0:3e:9a:72:23:2b:7d: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:DA:7C:66:B0:E3:CD:6A:DA:71:71:2F:88:FA:DE:EA:18:0C:19 X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:13:49:36:c8:f6:e8:a2:d4:71:2c:08:08:8c:cc:cf:33:0c: 1d:bf:69:13:70:c7:11:6f:6e:81:26:c3:2a:f5:f7:f2:95:fc: 1d:7d:35:20:71:8b:e5:68:83:3f:df:ed:a4:eb:2f:78:98:94: 78:f5:0d:c3:36:96:fb:23:a7:d0:4a:56:5a:41:77:86:62:b8: 89:92:43:0b:94:ea:42:38:a8:02:4f:78:9d:15:f0:48:e3:ac: 96:35:5b:c8:ee:b6:98:bb:86:1f:49:f0:53:29:ac:f9:fc:79: 25:23:08:72:52:a2:4a:ae:ac:76:b9:1a:89:0f:06:02:6e:4d: a9:b4:40:59:b6:41:70:46:f8:98:82:e0:c8:c1:43:f9:6d:f9: 2a:c0:1e:2d:6d:f2:da:cb:9d:d2:e0:9f:0d:f7:39:15:81:c0: dd:e3:67:77:28:6d:80:e8:ae:89:ae:f5:19:f2:da:85:a7:22: a9:7b:48:ad:3f:de:e8:f6:8b:65:6e:aa:37:f4:e0:ef:80:65: 7c:a6:c5:9d:ef:b8:45:68:29:24:a9:d8:f6:33:67:aa:76:0a: b9:e5:b2:e3:ab:1b:9f:3b:b8:e5:fc:c6:8f:d1:0a:1d:17:99: 29:33:ec:7b:a1:9c:b2:b9:d9:4d:88:fa:4d:ce:02:5a:ee:02: 19:46:58:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUwNDI1MDQ1NjMwWhcNMjUwNTAyMDQ1NjMwWjAYMRYwFAYD VQQDEw02ODBiMTVmZi05MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wcNW2nT4F91A52XGNr3ZnBSWH0wBvvDv8fW1iZu9OTBFDUdtQj9xz+EHl/1 WTLEvN0i64BH8n5Pnm6Lm/NQpTouuCfUx7Qmn43gPB28/VhElS6UCxCBFOYeMu20 mk596n+A80bBe7o5fYTfTaFFMufkJAaRoM745XM62obdaMfNKnqwPBGexJeOBXNG u51i49KzEiU34AlCS3ETf2mKl6zK9s11a6i6/PXnUvIIN8rxnBjhWiNZhFlh+LAE 1kw5pDvV1Cpmf4+eHzVQnQ24TUbDpuLJaqkiCZsI823v4rmLuNpCQgLQ4ty263w/ +zHj+subibq92/A+mnIjK30XRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcv2nxm sOPNatpxcS+I+t7qGAwZMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhE0k2yPbootRxLAgIjMzPMwwdv2kTcMcRb26BJsMq9ffylfwdfTUg cYvlaIM/3+2k6y94mJR49Q3DNpb7I6fQSlZaQXeGYriJkkMLlOpCOKgCT3idFfBI 46yWNVvI7raYu4YfSfBTKaz5/HklIwhyUqJKrqx2uRqJDwYCbk2ptEBZtkFwRviY guDIwUP5bfkqwB4tbfLay53S4J8N9zkVgcDd42d3KG2A6K6JrvUZ8tqFpyKpe0it P97o9otlbqo39ODvgGV8psWd77hFaCkkqdj2M2eqdgq55bLjqxufO7jl/MaP0Qod F5kpM+x7oZyyudlNiPpNzgJa7gIZRlgF -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:40 2025 by rpki-client