$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: ZervGRRaTOmdreENsSU7K0V3Krgb0Hqy5zIR0ZTSV84= Subject key identifier: 17:FF:67:FA:8E:05:1A:F6:52:D4:B1:CA:D4:6D:52:28:8A:F4:2B:49 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 78 Signing time: Thu 15 May 2025 06:08:25 +0000 Manifest this update: Thu 15 May 2025 06:08:24 +0000 Manifest next update: Thu 22 May 2025 06:08:24 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: jwzm5yY3XFK7x/689I7iVIAsuL8amr381BHq52LzQGs=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: May 15 06:08:24 2025 GMT Not After : May 22 06:08:24 2025 GMT Subject: CN=682584d8-9a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:2c:8f:2b:9d:c0:f5:49:22:94:6a:01:13: 0e:26:50:d2:1d:10:cf:23:d4:f9:1a:d3:88:d1:be: 3a:5f:95:df:af:93:e5:53:dd:7d:4a:f9:0e:26:77: 53:a6:6e:e6:8d:84:0d:b3:47:b6:ed:cd:1e:3a:1f: fc:7b:58:97:df:70:eb:c0:a9:88:cd:50:34:d1:58: 38:0e:c7:bf:48:2d:ce:7c:b4:1b:af:1f:a3:bd:ef: e3:1f:6a:5a:df:5e:0d:60:81:d7:e1:77:73:82:1a: 19:98:13:7f:d9:28:a1:a1:02:f7:93:fe:ad:e7:d2: 5d:fe:7a:bb:0b:9c:ad:ff:0d:84:1a:c9:3f:a5:35: be:3c:38:85:3d:39:2c:77:ef:f2:43:7e:ee:92:9d: 90:58:f2:39:15:c5:6e:df:c7:9e:09:a9:83:3c:58: f7:1b:3a:00:48:a8:03:3c:e1:99:b9:67:c1:94:fb: 6f:2b:a4:6b:b4:68:bc:13:12:f3:f8:8f:23:a4:ed: 43:b3:9a:c8:6b:bc:8d:2c:1f:b0:b4:4c:5d:0e:9e: 39:48:bc:f1:fa:29:ba:10:bc:be:f9:ad:5c:4b:f2: 7e:24:f2:f3:5a:2b:7a:07:9d:32:8c:38:6a:05:13: c8:d3:be:94:74:c4:32:0f:47:4c:13:6c:92:e6:72: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:67:FA:8E:05:1A:F6:52:D4:B1:CA:D4:6D:52:28:8A:F4:2B:49 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:a9:64:03:78:3a:79:88:96:aa:12:5a:51:e6:7e:95:dd: ee:c3:47:8e:a3:4b:e5:c9:87:15:ed:49:6c:34:83:6f:f0:4f: 7a:da:cb:16:07:02:7a:de:52:d1:1e:9d:0e:ec:7b:27:82:64: eb:bb:2c:c1:e0:90:5c:3d:19:4d:95:00:5a:c1:dc:96:67:5c: 51:3a:d2:3a:aa:ef:6b:d7:17:d0:c8:44:1c:d4:3a:5e:fe:80: 80:0d:0f:a6:cd:e9:53:97:d8:c9:f8:1d:3d:af:0f:69:b7:5a: 75:30:83:ca:fa:bd:ce:1b:50:d1:64:47:1e:2d:51:65:30:c0: 9b:92:32:e6:ab:42:13:09:71:c0:88:0d:df:60:e5:68:41:a9: 6f:1e:6a:db:f9:23:be:19:36:06:45:b5:0f:84:70:55:9e:fb: e1:55:9d:19:5b:81:fb:04:6f:17:f0:80:98:c6:c8:98:c8:47: 5f:4b:20:d8:1d:4c:92:70:74:26:43:1c:93:a9:00:e1:44:b9: 93:bf:ed:38:c4:b8:3e:69:5c:0a:18:ad:5f:34:f8:1a:0c:13: ce:88:21:03:87:54:4e:90:97:f9:a6:46:23:e5:ab:2c:f6:75: 8d:cb:e5:90:12:d9:70:fb:5d:cb:58:51:a1:e0:0f:bc:ec:a5: 4c:85:16:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQ4MTExMC8GA1UEBRMoMkRFOEYyMTZEQ0QyQkVDNkQzOEZFQkYwMUUwNkQ4QTk5 MDI3MEVCRjAeFw0yNTA1MTUwNjA4MjRaFw0yNTA1MjIwNjA4MjRaMBgxFjAUBgNV BAMTDTY4MjU4NGQ4LTlhNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgfyyPK53A9UkilGoBEw4mUNIdEM8j1Pka04jRvjpfld+vk+VT3X1K+Q4md1Om buaNhA2zR7btzR46H/x7WJffcOvAqYjNUDTRWDgOx79ILc58tBuvH6O97+Mfalrf Xg1ggdfhd3OCGhmYE3/ZKKGhAveT/q3n0l3+ersLnK3/DYQayT+lNb48OIU9OSx3 7/JDfu6SnZBY8jkVxW7fx54JqYM8WPcbOgBIqAM84Zm5Z8GU+28rpGu0aLwTEvP4 jyOk7UOzmshrvI0sH7C0TF0OnjlIvPH6KboQvL75rVxL8n4k8vNaK3oHnTKMOGoF E8jTvpR0xDIPR0wTbJLmcj5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF/9n+o4F GvZS1LHK1G1SKIr0K0kwHwYDVR0jBBgwFoAULejyFtzSvsbTj+vwHgbYqZAnDr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDgxLzg3RDM1MjBBODlF MTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGVqeUZ0elN2c2JUai12d0hnYllxWkFuRHI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDgxLzg3RDM1MjBBODlFMTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNi VGotdndIZ2JZcVpBbkRyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGX7qWQDeDp5iJaqElpR5n6V3e7DR46jS+XJhxXtSWw0g2/wT3rayxYH AnreUtEenQ7seyeCZOu7LMHgkFw9GU2VAFrB3JZnXFE60jqq72vXF9DIRBzUOl7+ gIAND6bN6VOX2Mn4HT2vD2m3WnUwg8r6vc4bUNFkRx4tUWUwwJuSMuarQhMJccCI Dd9g5WhBqW8eatv5I74ZNgZFtQ+EcFWe++FVnRlbgfsEbxfwgJjGyJjIR19LINgd TJJwdCZDHJOpAOFEuZO/7TjEuD5pXAoYrV80+BoME86IIQOHVE6Ql/mmRiPlqyz2 dY3L5ZAS2XD7XctYUaHgD7zspUyFFgI= -----END CERTIFICATE-----Generated at Fri May 16 18:07:57 2025 by rpki-client