$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: UBQpWDD1pj82cikLM5JghNNIiZa6vjUo5+nHQ/tsmlM= Subject key identifier: 96:A3:C1:02:F0:F4:9B:F5:CB:CE:D4:25:30:CD:D5:78:BC:6E:21:50 Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: F6 Signing time: Fri 25 Apr 2025 04:16:57 +0000 Manifest this update: Fri 25 Apr 2025 04:16:57 +0000 Manifest next update: Fri 02 May 2025 04:16:57 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: NqUKbjDT5zOhTgTGfpUaTrWqjvSRIUTgn6yNFXT91+Q=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: IVgKl4KyXf9Nb8T2afhwLi7rAVCfzpH4M9e8hvVHXhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Apr 25 04:16:57 2025 GMT Not After : May 2 04:16:57 2025 GMT Subject: CN=680b0cb9-680f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:3e:37:e4:48:87:15:5e:f5:52:0f:20:a6: 4a:00:38:5e:ee:3d:03:a4:29:01:28:90:1c:cc:d9: 60:c0:0e:37:91:f8:f3:a8:5f:2b:fb:f7:ec:4d:80: bd:43:ee:d9:ab:72:37:40:54:b6:4b:87:2b:9a:02: 1c:d0:d3:53:1c:9e:9b:c2:66:11:2f:4a:a8:80:a6: 91:56:6f:2e:92:84:4c:fe:6d:f5:b8:9d:90:e0:e4: 59:8d:90:75:0f:3f:ba:3d:7e:09:ab:4d:52:31:d3: ff:c2:79:74:78:6d:bf:fd:a1:7c:eb:6b:47:e1:49: fc:27:96:19:cb:10:03:0a:cc:4c:00:c9:f1:0b:76: 38:b4:cb:fe:fc:14:da:aa:01:ec:d1:6a:be:b0:c7: e0:64:4a:1d:c6:f2:61:1d:9a:fc:14:58:0e:df:35: 07:e8:d6:50:f9:e6:3a:db:80:3f:5e:4b:32:8c:c1: 9c:04:1c:e6:0a:96:ff:dd:47:e6:12:86:b9:85:0c: 77:f1:a8:58:e2:93:b0:92:e4:cd:f3:07:c0:32:95: 25:bc:0e:9f:75:13:15:de:9e:25:b4:07:a9:20:5c: 40:5d:bb:b0:34:db:87:85:d0:63:ed:36:1c:33:85: e3:ca:ce:13:7f:3b:14:7f:4a:ac:b3:b0:c4:71:66: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A3:C1:02:F0:F4:9B:F5:CB:CE:D4:25:30:CD:D5:78:BC:6E:21:50 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9e:8c:cf:60:00:78:a0:bd:aa:a8:31:37:25:cb:37:ec:c1: ae:87:ab:ce:f7:c4:b2:5c:72:4e:11:3c:05:e9:06:0f:2f:f5: b6:69:fd:8a:2f:86:20:6e:d9:c9:bd:89:de:24:eb:69:69:d2: f8:39:c4:16:f4:b3:e9:86:46:a4:68:dd:bc:86:6c:7b:af:26: bc:54:15:13:26:0b:ad:59:f3:ae:4d:ff:83:1d:eb:89:f4:b8: 4b:c4:d6:3f:23:17:49:53:57:99:13:9a:4c:cc:2d:fe:75:01: 13:a2:a5:d5:1e:c0:75:5a:ff:46:2e:d0:bd:6d:51:48:3d:f1: 08:72:82:f4:8d:cb:d0:77:eb:d4:1f:93:5f:51:19:f4:0e:a3: 22:fc:af:bf:85:2b:1e:77:3a:62:99:c1:0c:eb:37:ec:b5:49: c6:bc:4f:fd:60:29:18:fe:d2:73:f8:56:ca:d2:5a:02:8b:c4: 0e:a2:5b:f7:12:02:ca:4c:37:64:e7:79:4b:6f:2c:e2:84:77: 2c:cd:9d:cc:65:b0:fd:5b:85:88:88:a1:af:1c:08:27:8d:25: 61:5e:40:b2:11:bb:28:cd:ad:88:1e:cc:4a:14:11:bf:e4:2a: a8:36:dd:9e:e9:0a:23:cb:21:3d:71:dc:d8:bd:87:33:e4:e5: bf:2a:f1:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUwNDI1MDQxNjU3WhcNMjUwNTAyMDQxNjU3WjAYMRYwFAYD VQQDEw02ODBiMGNiOS02ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNM+N+RIhxVe9VIPIKZKADhe7j0DpCkBKJAczNlgwA43kfjzqF8r+/fsTYC9 Q+7Zq3I3QFS2S4crmgIc0NNTHJ6bwmYRL0qogKaRVm8ukoRM/m31uJ2Q4ORZjZB1 Dz+6PX4Jq01SMdP/wnl0eG2//aF862tH4Un8J5YZyxADCsxMAMnxC3Y4tMv+/BTa qgHs0Wq+sMfgZEodxvJhHZr8FFgO3zUH6NZQ+eY624A/XksyjMGcBBzmCpb/3Ufm Eoa5hQx38ahY4pOwkuTN8wfAMpUlvA6fdRMV3p4ltAepIFxAXbuwNNuHhdBj7TYc M4Xjys4TfzsUf0qss7DEcWarqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJajwQLw 9Jv1y87UJTDN1Xi8biFQMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnozPYAB4oL2qqDE3Jcs37MGuh6vO98SyXHJOETwF6QYPL/W2af2K L4YgbtnJvYneJOtpadL4OcQW9LPphkakaN28hmx7rya8VBUTJgutWfOuTf+DHeuJ 9LhLxNY/IxdJU1eZE5pMzC3+dQEToqXVHsB1Wv9GLtC9bVFIPfEIcoL0jcvQd+vU H5NfURn0DqMi/K+/hSsedzpimcEM6zfstUnGvE/9YCkY/tJz+FbK0loCi8QOolv3 EgLKTDdk53lLbyzihHcszZ3MZbD9W4WIiKGvHAgnjSVhXkCyEbsoza2IHsxKFBG/ 5CqoNt2e6QojyyE9cdzYvYcz5OW/KvFq -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:41 2025 by rpki-client