$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: NXFE5wAMr6HGq1H3d+oc3fdVR3YC6IYKZRh7327l6lg= Subject key identifier: FB:DA:B7:5B:6E:9A:E9:7E:FA:AB:69:52:80:89:96:1B:C2:95:69:6D Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C2E Signing time: Thu 24 Apr 2025 18:24:42 +0000 Manifest this update: Thu 24 Apr 2025 18:24:41 +0000 Manifest next update: Thu 01 May 2025 18:24:41 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: MV8UFDvBhQzY7FSxBzlUblfrsmWbRTTOezZCNK6SDfA=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Apr 24 18:24:41 2025 GMT Not After : May 1 18:24:41 2025 GMT Subject: CN=680a81ea-01ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:15:ce:3b:de:5c:49:a1:b2:d5:04:b4:68: 24:08:1a:7c:ff:99:d6:3b:71:53:6c:8a:78:c7:c8: bd:04:1f:11:09:02:4f:fd:83:1d:0c:2f:c1:99:a2: 43:c0:9d:12:f7:90:60:82:33:e2:1d:5c:91:1a:28: 6c:cf:c0:01:65:1c:2a:15:59:d5:13:fb:17:ee:a2: 57:2a:5d:ac:cd:5d:6a:03:be:93:db:58:9c:13:2d: 3c:a6:04:62:c0:f0:51:59:59:db:50:bb:37:6e:70: fe:a2:a9:31:9f:a6:c0:fa:a1:88:45:84:47:c3:46: 65:d3:96:40:e7:7c:75:4f:b1:29:10:ae:40:02:3d: a2:69:b7:a5:6b:f5:de:c4:fd:b7:20:7e:71:39:aa: 10:6a:2b:4a:e0:d7:08:94:5f:03:f3:f3:3d:da:c7: 4d:8d:27:5b:d6:7b:ac:fd:7c:a2:4a:af:e9:ad:a8: 59:1a:d6:19:69:08:73:0f:e1:a0:7c:d2:54:ed:0d: 7f:dd:69:6d:b9:aa:b9:2f:ff:3e:cd:e6:8c:20:4d: c9:2d:e7:9f:ae:7f:22:81:e2:2e:5c:3a:77:bb:57: fe:1d:33:a6:06:51:6b:50:bd:e3:aa:49:94:16:bb: 2d:35:d5:42:81:58:c5:4c:45:ce:55:0a:56:a7:c0: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DA:B7:5B:6E:9A:E9:7E:FA:AB:69:52:80:89:96:1B:C2:95:69:6D X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e7:ba:2a:4e:85:71:9c:9f:c3:2e:e7:b1:7f:4d:d7:a9:02: b3:1e:53:60:c1:59:90:12:e5:62:2b:8e:3f:d8:f0:8f:7e:e2: ed:d9:fb:39:da:1b:d2:ad:c8:6b:2e:cc:12:8e:e1:f4:17:dc: 0e:71:f7:95:4b:a8:9f:ae:42:92:ea:99:2a:0d:d8:cf:c1:19: 59:6f:e1:67:d9:5e:0c:73:6e:12:cb:a9:27:6f:8e:29:22:61: 91:18:6a:d0:9f:48:eb:34:41:4f:cc:84:4d:2b:35:8f:9c:ba: 39:aa:09:89:fc:ad:5c:f2:af:9e:85:df:40:35:e4:4a:f1:02: 95:88:3a:a4:3f:37:fd:6f:c0:57:43:14:5b:71:02:87:79:06: ab:04:ff:df:03:9a:2c:75:ac:31:67:e7:6f:75:4f:5b:9c:ad: 3d:f9:e3:61:e6:2c:b4:e0:2c:32:ce:2c:04:bb:82:43:e9:6a: 26:36:c8:7d:e1:c5:e1:5a:47:e9:6a:72:e9:3c:83:39:2a:37: fe:8f:b3:7a:fa:ad:8a:aa:fc:6d:c3:d4:a9:87:44:a4:d9:e8: 1e:91:61:c7:fd:5a:c5:8b:ae:c5:02:fc:4b:0f:95:36:51:f7: 6d:1c:86:84:4c:00:4d:ea:28:a8:b6:bb:33:58:a5:34:61:36: 79:be:51:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwNDI0MTgyNDQxWhcNMjUwNTAxMTgyNDQxWjAYMRYwFAYD VQQDEw02ODBhODFlYS0wMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x8VzjveXEmhstUEtGgkCBp8/5nWO3FTbIp4x8i9BB8RCQJP/YMdDC/BmaJD wJ0S95BggjPiHVyRGihsz8ABZRwqFVnVE/sX7qJXKl2szV1qA76T21icEy08pgRi wPBRWVnbULs3bnD+oqkxn6bA+qGIRYRHw0Zl05ZA53x1T7EpEK5AAj2iabela/Xe xP23IH5xOaoQaitK4NcIlF8D8/M92sdNjSdb1nus/XyiSq/prahZGtYZaQhzD+Gg fNJU7Q1/3Wltuaq5L/8+zeaMIE3JLeefrn8igeIuXDp3u1f+HTOmBlFrUL3jqkmU FrstNdVCgVjFTEXOVQpWp8D+gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvat1tu mul++qtpUoCJlhvClWltMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr57oqToVxnJ/DLuexf03XqQKzHlNgwVmQEuViK44/2PCPfuLt2fs5 2hvSrchrLswSjuH0F9wOcfeVS6ifrkKS6pkqDdjPwRlZb+Fn2V4Mc24Sy6knb44p ImGRGGrQn0jrNEFPzIRNKzWPnLo5qgmJ/K1c8q+ehd9ANeRK8QKViDqkPzf9b8BX QxRbcQKHeQarBP/fA5osdawxZ+dvdU9bnK09+eNh5iy04CwyziwEu4JD6WomNsh9 4cXhWkfpanLpPIM5Kjf+j7N6+q2Kqvxtw9Sph0Sk2egekWHH/VrFi67FAvxLD5U2 UfdtHIaETABN6iiotrszWKU0YTZ5vlGq -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:36 2025 by rpki-client