$ rpki-client -vvf rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft File: LLjB-eoMe1qANok4hADMb9iwSdI.mft (raw, json) Hash identifier: BZBax8tdB0FgDX6aOzh+tAjnWG3MCKjEDjeKLKR3VZw= Subject key identifier: E8:1D:46:FC:9D:C3:F1:63:CB:14:0A:43:D5:B5:FC:D1:1C:67:B3:A6 Authority key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 Certificate issuer: /CN=A911015D/serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft Manifest number: 0149 Signing time: Sun 11 May 2025 03:07:20 +0000 Manifest this update: Sun 11 May 2025 03:07:19 +0000 Manifest next update: Sun 18 May 2025 03:07:19 +0000 Files and hashes: 1: LLjB-eoMe1qANok4hADMb9iwSdI.crl (hash: pFZf5URRvqtR/+uD9PW3KTNWwkB/v8QszuKQOzC9L90=) 2: E199AC0C34F211EEB22E7C6FC4F9AE02.roa (hash: gD+ebhjmYYOlYSwLXx9jf438Mm1bZMxXcWfFLXPYnt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Validity Not Before: May 11 03:07:19 2025 GMT Not After : May 18 03:07:19 2025 GMT Subject: CN=68201467-d446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:12:74:d7:ec:4f:0b:55:6d:15:b6:91:5d: 0c:12:d3:d7:ab:ae:7e:c6:ce:4b:9c:fb:db:d3:41: 86:59:8a:e9:32:52:19:d3:4c:83:7e:55:18:2d:a6: 9b:0c:8d:c3:0f:77:32:f7:ef:50:15:c4:a0:0b:e9: 03:4f:cc:a9:b4:aa:f6:12:84:4b:d8:2d:10:08:11: 22:df:d5:24:a1:b9:fa:e3:fa:dc:30:50:84:e9:ce: 60:2e:0d:29:b1:37:92:5d:fb:c0:ab:01:ca:de:82: ac:f5:75:ff:af:b7:02:cb:a1:23:96:58:15:57:d6: 9e:16:95:3d:3e:41:ad:71:18:b6:68:e8:5a:17:25: 0e:c9:4d:27:76:a4:95:6a:25:5d:53:dd:43:1b:1c: b5:7d:37:0e:4d:7c:9d:0d:6c:d7:6d:c9:60:ad:66: 8e:7f:84:a5:e5:c5:dc:87:03:c2:56:a3:f8:43:34: e2:34:e5:39:bd:ea:8a:b1:60:0a:1d:a4:af:5e:31: 34:32:0a:e9:8d:a5:8f:94:c5:2f:20:ef:d9:12:04: 83:b7:68:10:3d:91:0a:b4:28:e0:55:d6:d2:df:6f: ca:b3:a9:9f:d5:5c:7b:53:46:27:aa:a2:e2:bc:d1: 1e:a9:46:0e:8f:5f:b5:68:42:43:2a:1d:ef:7c:94: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1D:46:FC:9D:C3:F1:63:CB:14:0A:43:D5:B5:FC:D1:1C:67:B3:A6 X509v3 Authority Key Identifier: keyid:2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:92:ad:6c:e7:f8:f4:1e:fb:e6:6f:a7:67:d2:ac:c5:ee:ea: 94:66:12:bc:95:b7:d8:56:cd:5e:50:7a:7a:43:5b:ac:fc:2a: 10:da:b5:8d:83:79:4a:eb:74:c4:d1:a2:4e:14:20:a4:a3:ff: 09:56:b2:ae:99:0f:31:39:fe:bf:1f:78:32:92:e0:7d:6b:d9: 56:f8:c1:e6:1b:40:c2:d0:8c:6d:87:8a:50:2c:54:52:04:7d: 20:5f:81:07:61:16:e1:ec:79:e8:44:d6:7b:0c:8d:a9:7c:7d: d2:4a:36:83:a7:13:0f:ad:95:c0:7d:06:b2:f1:02:fc:d3:f1: cd:86:9d:8a:6d:9c:1a:a8:21:59:4d:86:c1:ee:83:13:1f:be: e0:96:38:c1:df:d4:b0:f8:87:50:ab:bf:16:5f:19:4f:f3:49: 47:e1:ea:75:b8:d7:24:db:cd:64:a0:2f:bc:ef:64:03:19:9c: 59:b4:92:db:10:22:cd:20:1a:09:be:11:94:29:ab:bf:99:7b: 37:d5:a2:75:47:1d:89:fa:c2:61:da:68:dc:ac:f6:5d:77:7d: 61:b0:ba:96:85:13:f4:7d:37:56:14:93:79:4e:b8:34:a0:fa: 75:d1:74:22:74:da:3b:3f:55:69:c3:6d:aa:89:88:16:c3:3c: 21:2b:92:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkzODg0MDBDQzZG RDhCMDQ5RDIwHhcNMjUwNTExMDMwNzE5WhcNMjUwNTE4MDMwNzE5WjAYMRYwFAYD VQQDEw02ODIwMTQ2Ny1kNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSESdNfsTwtVbRW2kV0MEtPXq65+xs5LnPvb00GGWYrpMlIZ00yDflUYLaab DI3DD3cy9+9QFcSgC+kDT8yptKr2EoRL2C0QCBEi39Ukobn64/rcMFCE6c5gLg0p sTeSXfvAqwHK3oKs9XX/r7cCy6EjllgVV9aeFpU9PkGtcRi2aOhaFyUOyU0ndqSV aiVdU91DGxy1fTcOTXydDWzXbclgrWaOf4Sl5cXchwPCVqP4QzTiNOU5veqKsWAK HaSvXjE0MgrpjaWPlMUvIO/ZEgSDt2gQPZEKtCjgVdbS32/Ks6mf1Vx7U0YnqqLi vNEeqUYOj1+1aEJDKh3vfJSvDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgdRvyd w/FjyxQKQ9W1/NEcZ7OmMB8GA1UdIwQYMBaAFCy4wfnqDHtagDaJOIQAzG/YsEnS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDE1RC80MTRBRUQ2QTM0 RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUxcUFOb2s0aEFETWI5aXdT ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xMakItZW9NZTFxQU5vazRoQURNYjlpd1NkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVvTWUx cUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEkq1s5/j0Hvvmb6dn0qzF7uqUZhK8lbfYVs1eUHp6Q1us/CoQ2rWN g3lK63TE0aJOFCCko/8JVrKumQ8xOf6/H3gykuB9a9lW+MHmG0DC0Ixth4pQLFRS BH0gX4EHYRbh7HnoRNZ7DI2pfH3SSjaDpxMPrZXAfQay8QL80/HNhp2KbZwaqCFZ TYbB7oMTH77gljjB39Sw+IdQq78WXxlP80lH4ep1uNck281koC+872QDGZxZtJLb ECLNIBoJvhGUKau/mXs31aJ1Rx2J+sJh2mjcrPZdd31hsLqWhRP0fTdWFJN5Trg0 oPp10XQidNo7P1Vpw22qiYgWwzwhK5Kq -----END CERTIFICATE-----Generated at Mon May 12 17:21:52 2025 by rpki-client