$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json) Hash identifier: F26ySkkr3y8TvW8Yc/B+WBcLYsPZi2ANNXHO0B9+Ju0= Subject key identifier: 29:26:9D:9E:B8:8D:68:32:B8:F0:49:12:45:20:29:8E:EC:68:23:8E Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft Manifest number: 05AB Signing time: Mon 12 May 2025 22:57:32 +0000 Manifest this update: Mon 12 May 2025 22:57:32 +0000 Manifest next update: Mon 19 May 2025 22:57:32 +0000 Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: dLCFuNIx0/OxSaClkcUuuNVifdIYw61NzbPJ0qJwrR8=) 2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: pbtxZL2670Vbm5T4UtC+5fCmSHFSsbOrgHoM6Opfzec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: May 12 22:57:32 2025 GMT Not After : May 19 22:57:32 2025 GMT Subject: CN=68227cdc-9e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:37:97:13:25:f5:13:d3:36:5a:09:11:54: 1e:07:7c:26:36:88:b3:b4:44:72:fe:f1:58:57:85: c1:d2:c7:3c:69:02:00:64:41:52:d2:91:b7:01:88: 66:cf:c4:6e:c9:1b:e2:e2:93:99:2e:21:05:a3:9f: 70:cc:d7:1a:9e:3e:be:20:d9:cb:64:d2:89:0a:c5: 12:5f:5a:0a:42:33:8a:0e:2a:77:67:53:25:a0:27: 07:7e:53:2c:bf:8c:93:74:4e:54:6f:dd:ef:d6:a4: b1:db:92:95:c9:f7:83:81:71:b9:6f:d3:e0:10:df: 73:a5:75:0e:2d:3d:2e:1b:ae:64:98:d8:de:98:bf: 3e:e9:09:87:47:87:b1:56:66:81:4c:48:a1:05:32: 6d:c1:22:97:94:5e:66:ea:a1:b7:30:bc:54:e2:00: 32:da:e0:42:0b:44:48:6d:05:5f:3c:be:2f:c0:2e: d8:a3:87:98:f4:f0:7d:e2:87:ca:78:3f:f2:ee:04: c1:c5:a3:97:2b:6f:94:30:88:d5:38:80:78:51:4c: b4:2b:18:57:30:78:0b:db:08:d5:ed:66:4f:22:1d: ee:01:3b:40:fb:3f:50:c0:39:2f:98:7b:6e:a7:19: 06:15:b9:2d:43:65:58:3d:3d:13:ac:e7:ea:9f:e6: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:9D:9E:B8:8D:68:32:B8:F0:49:12:45:20:29:8E:EC:68:23:8E X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:33:c5:d5:a6:fd:17:cc:e0:13:95:34:a4:36:20:fa:7e:26: 28:da:75:b3:e5:8f:97:15:60:0b:2c:f9:47:b3:d5:58:f6:5a: 4e:9c:de:3b:77:6f:cc:e9:88:a2:da:92:b2:0b:a9:02:ff:23: 64:5b:44:31:0c:17:dc:05:b3:34:6d:05:52:a8:2c:9e:67:cf: 23:84:d1:0a:46:59:27:50:85:26:ce:b2:f2:45:a3:a8:48:4b: 77:63:61:af:df:95:b6:2f:fa:d2:0b:80:9a:5e:ab:93:b0:d9: a8:12:bd:6c:59:10:de:64:e9:1b:ac:ba:b9:eb:3b:20:ae:aa: e8:b2:08:df:e1:2e:30:3f:4f:8d:c2:1b:06:3a:22:3f:53:ce: 24:7b:ee:0a:23:5f:0c:c1:6d:18:45:5d:ba:fa:e5:b7:9e:ce: 7c:4e:bb:9e:94:48:3e:01:33:23:16:ab:76:28:d1:29:6d:a2: f7:69:20:ca:81:76:09:f4:62:1a:b7:39:e4:6c:e8:d7:85:cb: 76:79:c1:35:29:38:db:b2:16:ba:7e:a9:55:89:84:aa:74:35: 21:e8:9e:79:a2:58:28:91:c1:5a:03:1b:4f:93:93:0d:6e:69: 71:ba:6c:cd:57:e1:ea:17:44:71:ce:ca:dd:a1:42:42:0e:22: fc:ba:50:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjUwNTEyMjI1NzMyWhcNMjUwNTE5MjI1NzMyWjAYMRYwFAYD VQQDEw02ODIyN2NkYy05ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2M3lxMl9RPTNloJEVQeB3wmNoiztERy/vFYV4XB0sc8aQIAZEFS0pG3AYhm z8RuyRvi4pOZLiEFo59wzNcanj6+INnLZNKJCsUSX1oKQjOKDip3Z1MloCcHflMs v4yTdE5Ub93v1qSx25KVyfeDgXG5b9PgEN9zpXUOLT0uG65kmNjemL8+6QmHR4ex VmaBTEihBTJtwSKXlF5m6qG3MLxU4gAy2uBCC0RIbQVfPL4vwC7Yo4eY9PB94ofK eD/y7gTBxaOXK2+UMIjVOIB4UUy0KxhXMHgL2wjV7WZPIh3uATtA+z9QwDkvmHtu pxkGFbktQ2VYPT0TrOfqn+Yk/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkmnZ64 jWgyuPBJEkUgKY7saCOOMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNM8XVpv0XzOATlTSkNiD6fiYo2nWz5Y+XFWALLPlHs9VY9lpOnN47 d2/M6Yii2pKyC6kC/yNkW0QxDBfcBbM0bQVSqCyeZ88jhNEKRlknUIUmzrLyRaOo SEt3Y2Gv35W2L/rSC4CaXquTsNmoEr1sWRDeZOkbrLq56zsgrqrosgjf4S4wP0+N whsGOiI/U84ke+4KI18MwW0YRV26+uW3ns58TruelEg+ATMjFqt2KNEpbaL3aSDK gXYJ9GIatznkbOjXhct2ecE1KTjbsha6fqlViYSqdDUh6J55olgokcFaAxtPk5MN bmlxumzNV+HqF0RxzsrdoUJCDiL8ulA8 -----END CERTIFICATE-----Generated at Tue May 13 14:14:01 2025 by rpki-client