$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: x53NQG1HLIuJ8wz75JouogXhokzheI7mnCN2WGmyiDk= Subject key identifier: 1E:B3:99:97:07:8A:26:BA:85:6F:14:BE:78:D9:86:8C:71:D1:7E:1D Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 23 Signing time: Sun 11 May 2025 06:41:36 +0000 Manifest this update: Sun 11 May 2025 06:41:35 +0000 Manifest next update: Sun 18 May 2025 06:41:35 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: P5ZTHBc7QeVeBmPvlMpyGBugvsNlUIHCBRjEzAVloI4=) 2: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 3: D87376860A1511F09D97420DC4F9AE02.roa (hash: lSMVl0dtBor2vIuchkye7ISSmPTtUsBuhCBwH/5seS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: May 11 06:41:35 2025 GMT Not After : May 18 06:41:35 2025 GMT Subject: CN=6820469f-b0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:5b:a1:52:c8:b7:03:7d:f0:ab:27:5b:e4: f3:65:42:fd:2f:5f:0f:25:f4:44:3c:e3:00:95:a8: a8:77:52:cf:aa:3f:b5:22:f3:56:23:2b:a9:b8:83: 3f:2c:17:d3:be:a1:3e:fa:9e:5a:aa:7c:c7:eb:b9: a9:64:bc:9f:32:d3:bd:2d:35:fd:99:bb:ea:e0:3e: c3:77:fc:89:d6:22:0f:1a:f1:85:e6:7c:54:4d:74: de:a6:d4:b0:8b:6a:de:6c:9e:59:6f:a3:1d:8a:af: a2:8c:a9:5b:57:b6:65:52:9d:88:c6:10:e9:56:2e: 9b:a8:e3:91:61:b0:eb:8f:26:90:3f:18:5c:e3:69: 00:f7:a4:43:e4:a4:f4:74:34:1c:75:24:13:9d:b0: e3:41:96:cb:22:6c:94:56:0a:19:9e:ba:c1:01:be: 01:11:23:59:29:0b:00:0e:a4:4d:e8:f9:c3:f6:69: 4a:39:84:55:e4:48:2c:48:c5:b4:5e:59:1b:07:e0: 70:07:74:2d:af:0c:68:3d:f9:98:97:6b:a6:16:1c: 20:75:45:cd:ce:4c:dc:76:8f:f1:5e:39:e8:7a:5f: 3f:ed:6f:e2:8f:27:b4:f1:e0:13:4f:ea:4c:f8:4f: 59:26:c8:dc:8b:29:13:fa:1a:95:f3:84:7b:a1:45: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:99:97:07:8A:26:BA:85:6F:14:BE:78:D9:86:8C:71:D1:7E:1D X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d5:38:8d:a3:f0:07:6e:ea:73:50:c9:5e:45:a7:54:92:58: f4:df:ab:bc:6b:cd:52:20:da:09:70:ce:aa:8f:3e:9d:6d:eb: ba:2b:e6:16:41:ec:f8:15:b9:53:fe:0b:d6:e0:6b:2d:54:0b: 87:94:1c:6d:da:08:aa:8c:e4:bf:aa:e3:8a:6a:33:38:dd:23: eb:cc:ff:cf:0a:e5:18:fc:c7:01:51:ad:44:a2:9d:fb:95:0a: c8:02:b5:0a:ad:f5:18:93:7b:33:f3:0d:e8:69:6b:38:b5:ee: f2:60:d9:eb:a5:73:af:d6:1f:19:20:73:12:a0:c0:ac:4c:a9: 46:f9:47:50:c1:ee:38:cc:16:13:a4:0e:b5:68:2e:88:f5:6d: 4d:03:82:7c:ca:1a:10:a4:e5:43:03:e1:0a:26:bf:2d:f1:40: c5:cf:45:e3:f7:fc:2d:4d:a5:59:ab:1f:fc:68:c8:ff:9c:2d: a9:65:80:3a:e6:96:63:01:b7:ae:c5:6a:bb:98:60:e5:03:13: 9b:e3:5a:c9:ae:ab:1d:d0:a6:b5:c9:64:09:66:1d:b6:13:08: 14:8e:49:88:c2:d6:e4:f6:ab:0d:11:8c:03:57:29:f5:bd:30: c8:47:92:91:02:dc:69:63:65:9b:17:0c:9e:59:17:af:25:e3: b7:93:e5:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA1MTEwNjQxMzVaFw0yNTA1MTgwNjQxMzVaMBgxFjAUBgNV BAMTDTY4MjA0NjlmLWIwYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQLluhUsi3A33wqydb5PNlQv0vXw8l9EQ84wCVqKh3Us+qP7Ui81YjK6m4gz8s F9O+oT76nlqqfMfrualkvJ8y070tNf2Zu+rgPsN3/InWIg8a8YXmfFRNdN6m1LCL at5snllvox2Kr6KMqVtXtmVSnYjGEOlWLpuo45FhsOuPJpA/GFzjaQD3pEPkpPR0 NBx1JBOdsONBlssibJRWChmeusEBvgERI1kpCwAOpE3o+cP2aUo5hFXkSCxIxbRe WRsH4HAHdC2vDGg9+ZiXa6YWHCB1Rc3OTNx2j/FeOeh6Xz/tb+KPJ7Tx4BNP6kz4 T1kmyNyLKRP6GpXzhHuhRbojAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHrOZlweK JrqFbxS+eNmGjHHRfh0wHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjVOI2j8Adu6nNQyV5Fp1SSWPTfq7xrzVIg2glwzqqPPp1t67or5hZB 7PgVuVP+C9bgay1UC4eUHG3aCKqM5L+q44pqMzjdI+vM/88K5Rj8xwFRrUSinfuV CsgCtQqt9RiTezPzDehpazi17vJg2eulc6/WHxkgcxKgwKxMqUb5R1DB7jjMFhOk DrVoLoj1bU0DgnzKGhCk5UMD4Qomvy3xQMXPReP3/C1NpVmrH/xoyP+cLallgDrm lmMBt67FaruYYOUDE5vjWsmuqx3QprXJZAlmHbYTCBSOSYjC1uT2qw0RjANXKfW9 MMhHkpEC3GljZZsXDJ5ZF68l47eT5cI= -----END CERTIFICATE-----Generated at Mon May 12 10:17:51 2025 by rpki-client