$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: cKk+Obh9QSKJzpTCumRBHhZHdecx9xlkhddW5+iG/ec= Subject key identifier: E3:14:88:CD:9D:BA:08:BC:CE:C2:48:4E:CA:34:55:0A:FF:84:5C:6F Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 0140 Signing time: Tue 13 May 2025 03:32:53 +0000 Manifest this update: Tue 13 May 2025 03:32:52 +0000 Manifest next update: Tue 20 May 2025 03:32:52 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: gYuMMDLJmQppbICgVvqHDz8+4+dCUHyG2CsbRM7uIMY=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Validity Not Before: May 13 03:32:52 2025 GMT Not After : May 20 03:32:52 2025 GMT Subject: CN=6822bd65-1de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:c4:2a:61:c3:9f:87:53:1d:dd:8b:4e:48: 92:20:b5:41:e2:ff:3d:68:6c:e4:ff:de:38:5d:a6: 02:94:c0:fd:16:d0:42:22:b5:9e:31:09:72:c8:7e: c9:c3:51:f5:7d:46:14:e5:b5:26:2e:a0:e6:f9:2c: 9c:1e:33:7c:fd:5b:a9:96:2a:8c:a2:66:3a:40:6d: eb:46:41:44:ec:f0:17:a9:a8:67:70:d8:7b:e5:71: e5:56:78:42:2a:60:71:59:be:2e:43:12:d9:b1:e4: 2f:c2:73:ca:1b:35:90:ba:bf:47:e5:ec:ab:20:dc: 1e:c3:67:57:0a:4f:12:bc:c1:6d:44:49:55:d6:0f: 2a:2b:46:d6:43:d6:25:25:6e:ab:62:ff:1a:0d:c7: ea:d4:f9:66:43:6d:f1:1d:fc:1b:47:34:70:58:39: b0:12:b0:ab:32:b6:ea:af:87:3e:d7:5c:88:2c:9e: b3:fb:7c:34:03:da:e8:d3:5d:67:fc:89:ba:1f:25: 91:c5:2f:26:50:fe:ec:00:17:75:16:32:ea:6f:7d: 04:3e:43:6a:c1:9e:4f:41:0d:66:5e:a6:a6:0b:57: cb:e3:b4:a7:a6:9f:c1:25:92:20:ab:78:34:a7:8a: c7:8b:d0:ed:69:48:8a:5b:1c:d9:b5:19:b3:8a:0b: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:88:CD:9D:BA:08:BC:CE:C2:48:4E:CA:34:55:0A:FF:84:5C:6F X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:2c:4f:f2:ca:6b:fb:6e:d6:d3:da:89:b3:00:1d:fb:0a: 45:9b:7f:27:28:93:2d:f6:ed:85:ec:bf:d2:d0:11:52:05:b3: cf:33:d0:01:39:5e:7f:72:24:82:1f:a2:a6:13:ef:cb:3c:f7: 89:2f:d8:f3:75:54:f2:4c:18:21:6e:eb:b0:e0:29:2d:2a:53: 50:9c:dc:9e:4e:6f:65:63:38:ef:97:9a:a2:48:e3:7a:d0:2c: e5:44:a5:1d:90:19:2e:e3:3a:51:be:4f:17:57:14:63:43:3d: 1e:11:69:f2:0b:86:ea:55:45:be:30:3d:9d:da:17:b8:13:0e: 79:a5:4c:7c:ed:c9:d8:04:b9:2d:b8:d0:26:7c:8b:3d:5b:3d: 27:c1:99:a3:88:c2:ee:bf:d4:40:d7:ad:13:b3:a4:f4:d9:77: a6:50:1d:72:49:45:74:6d:b3:76:bf:54:8e:05:16:9e:3b:6d: 0e:85:57:79:13:64:e1:cf:33:df:4c:cc:a9:2d:15:24:97:47: 58:da:e8:33:7d:3f:e4:20:d2:d7:51:4a:b2:40:b3:21:6f:2d: 1b:7b:f1:3c:de:78:6d:44:64:da:d8:24:3b:72:6d:95:7c:4d: 48:a0:6b:f6:5f:9b:db:35:4f:a4:7e:b7:8b:9d:52:76:8a:ce: 0d:c6:6a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNTEzMDMzMjUyWhcNMjUwNTIwMDMzMjUyWjAYMRYwFAYD VQQDEw02ODIyYmQ2NS0xZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLHEKmHDn4dTHd2LTkiSILVB4v89aGzk/944XaYClMD9FtBCIrWeMQlyyH7J w1H1fUYU5bUmLqDm+SycHjN8/VupliqMomY6QG3rRkFE7PAXqahncNh75XHlVnhC KmBxWb4uQxLZseQvwnPKGzWQur9H5eyrINwew2dXCk8SvMFtRElV1g8qK0bWQ9Yl JW6rYv8aDcfq1PlmQ23xHfwbRzRwWDmwErCrMrbqr4c+11yILJ6z+3w0A9ro011n /Im6HyWRxS8mUP7sABd1FjLqb30EPkNqwZ5PQQ1mXqamC1fL47Snpp/BJZIgq3g0 p4rHi9DtaUiKWxzZtRmziguTNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMUiM2d ugi8zsJITso0VQr/hFxvMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd7ixP8spr+27W09qJswAd+wpFm38nKJMt9u2F7L/S0BFSBbPPM9AB OV5/ciSCH6KmE+/LPPeJL9jzdVTyTBghbuuw4CktKlNQnNyeTm9lYzjvl5qiSON6 0CzlRKUdkBku4zpRvk8XVxRjQz0eEWnyC4bqVUW+MD2d2he4Ew55pUx87cnYBLkt uNAmfIs9Wz0nwZmjiMLuv9RA160Ts6T02XemUB1ySUV0bbN2v1SOBRaeO20OhVd5 E2ThzzPfTMypLRUkl0dY2ugzfT/kINLXUUqyQLMhby0be/E83nhtRGTa2CQ7cm2V fE1IoGv2X5vbNU+kfreLnVJ2is4NxmqA -----END CERTIFICATE-----Generated at Tue May 13 23:02:29 2025 by rpki-client