$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json) Hash identifier: uMdNeoE5f+Jg5Lufmf7hK6k5fxQ4rIRcyukt6nPHgXs= Subject key identifier: 73:A4:72:49:B3:C1:DB:68:8F:E1:91:CD:21:B8:3E:80:98:B1:DD:6B Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Certificate serial: 1188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft Manifest number: 117B Signing time: Mon 12 May 2025 17:10:29 +0000 Manifest this update: Mon 12 May 2025 17:10:29 +0000 Manifest next update: Mon 19 May 2025 17:10:29 +0000 Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: sLddSCbah0RNOIyxkm52M5n0nLpuEst5OmLcnB0BcPw=) 2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: 33z1F9RZ3yx55dZ5+rGpqQ7gwX1OExcujk8Oepxi/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4488 (0x1188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Validity Not Before: May 12 17:10:29 2025 GMT Not After : May 19 17:10:29 2025 GMT Subject: CN=68222b85-dad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:41:0e:a1:45:d2:c5:9f:08:b3:85:a7:37: 2b:6f:b3:0c:a3:08:33:ff:d3:db:80:4c:c6:65:a8: ad:e5:51:cf:a7:8a:c9:4b:71:69:0a:5c:09:0d:2b: 9e:c9:a9:ed:57:d8:2c:01:fa:22:c7:3d:b2:d9:28: 1b:8c:9d:4d:d8:76:c1:1a:99:56:a9:cc:98:5a:b1: cf:df:37:7e:b5:75:b3:c5:c4:8e:5b:2c:1e:e5:c6: 66:fc:5b:65:51:f4:6d:42:cc:00:e2:a9:e2:60:43: 39:21:0e:f3:8a:a4:18:d3:ae:4a:eb:99:46:c4:54: 32:4a:77:d0:8c:63:dd:85:2b:a4:f4:07:2a:71:75: b8:62:8c:6b:6b:cf:87:25:28:8b:c8:90:4d:f4:1b: 59:23:1e:e1:69:be:88:15:e2:8d:84:13:70:b4:d3: f3:0c:1d:fa:2d:38:c6:af:09:57:51:de:33:40:c3: 4c:44:cb:1a:93:c1:6b:ac:f1:be:13:78:df:1b:7a: 03:2f:e7:89:a2:6c:80:72:13:57:c5:c6:5a:d3:12: f0:37:ff:ae:d1:25:13:dc:a0:37:80:46:82:ff:b9: 36:85:97:b9:39:87:b9:ba:41:f0:22:e1:3e:a7:19: 6c:86:06:46:5f:bd:ad:f5:a9:49:38:80:f4:74:b5: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:72:49:B3:C1:DB:68:8F:E1:91:CD:21:B8:3E:80:98:B1:DD:6B X509v3 Authority Key Identifier: keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bf:67:32:2c:6c:b9:7d:8d:f2:e2:2f:35:6d:c3:e8:0c:d6: 19:12:00:55:14:1e:66:8a:34:dc:a3:31:e1:b3:10:39:ea:ed: 07:d6:ee:22:a8:34:19:4e:15:6b:25:46:b9:1b:81:29:80:30: c8:fd:63:ec:ce:c2:2e:d6:b7:95:84:a0:35:61:17:21:be:cd: c7:c2:c7:03:71:2b:14:27:74:aa:12:c1:13:19:ad:d9:9a:db: e9:ad:27:8b:f7:d6:3b:b9:4e:33:24:7e:27:0b:ea:81:b4:21: e0:30:db:5e:71:7f:b3:95:ae:8b:65:9c:a6:2e:9c:e0:72:de: b3:4f:4c:c4:26:66:7c:f2:04:ba:9a:bd:fc:f4:70:bc:0b:e7: bc:69:d2:ff:ed:c2:5e:d4:7e:49:1e:2c:2c:a4:be:67:50:8f: 5e:b4:b6:8a:4e:21:b6:ef:5d:dc:f1:e3:92:6f:33:08:26:89: b8:e2:a1:e6:c9:52:91:e2:41:77:5c:92:ea:60:47:f0:4b:4b: d4:23:d2:ac:79:c4:d3:5e:29:59:0b:a0:94:cf:b4:7a:e0:e4: 09:10:5e:bc:dc:2f:e4:2a:64:92:33:83:4a:69:f0:2e:71:c6: 3f:9a:85:4d:c1:1e:8e:1e:a9:ac:47:f1:b8:56:59:f5:23:3a: f3:1b:91:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNEIxMTAvBgNVBAUTKDk2QTc5OUEyRjRCMzA4QjIyNTIyQkNFNDVFMzE4RDZB NzAyNjI5MkIwHhcNMjUwNTEyMTcxMDI5WhcNMjUwNTE5MTcxMDI5WjAYMRYwFAYD VQQDEw02ODIyMmI4NS1kYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3VBDqFF0sWfCLOFpzcrb7MMowgz/9PbgEzGZait5VHPp4rJS3FpClwJDSue yantV9gsAfoixz2y2SgbjJ1N2HbBGplWqcyYWrHP3zd+tXWzxcSOWywe5cZm/Ftl UfRtQswA4qniYEM5IQ7ziqQY065K65lGxFQySnfQjGPdhSuk9AcqcXW4Yoxra8+H JSiLyJBN9BtZIx7hab6IFeKNhBNwtNPzDB36LTjGrwlXUd4zQMNMRMsak8FrrPG+ E3jfG3oDL+eJomyAchNXxcZa0xLwN/+u0SUT3KA3gEaC/7k2hZe5OYe5ukHwIuE+ pxlshgZGX72t9alJOID0dLW7UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOkckmz wdtoj+GRzSG4PoCYsd1rMB8GA1UdIwQYMBaAFJanmaL0swiyJSK85F4xjWpwJikr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE0Qi9FMzc3RkQ3QUZF QTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNMSWxJcnprWGpHTmFuQW1L U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxZVpvdlN6Q0xJbElyemtYakdOYW5BbUtTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE0Qi9FMzc3RkQ3QUZFQTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNM SWxJcnprWGpHTmFuQW1LU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8v2cyLGy5fY3y4i81bcPoDNYZEgBVFB5mijTcozHhsxA56u0H1u4i qDQZThVrJUa5G4EpgDDI/WPszsIu1reVhKA1YRchvs3HwscDcSsUJ3SqEsETGa3Z mtvprSeL99Y7uU4zJH4nC+qBtCHgMNtecX+zla6LZZymLpzgct6zT0zEJmZ88gS6 mr389HC8C+e8adL/7cJe1H5JHiwspL5nUI9etLaKTiG2713c8eOSbzMIJom44qHm yVKR4kF3XJLqYEfwS0vUI9KsecTTXilZC6CUz7R64OQJEF683C/kKmSSM4NKafAu ccY/moVNwR6OHqmsR/G4Vln1IzrzG5F8 -----END CERTIFICATE-----Generated at Tue May 13 02:16:23 2025 by rpki-client