$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: QGfqB9C5wJzzZ9N+vn7rPWFcn+UU9dUi87LbzJJVPlk= Subject key identifier: 41:39:28:44:D2:60:77:3C:D7:DB:33:A9:AB:14:81:BD:58:2C:D1:44 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01C8 Signing time: Sun 11 May 2025 02:00:55 +0000 Manifest this update: Sun 11 May 2025 02:00:54 +0000 Manifest next update: Sun 18 May 2025 02:00:54 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: BHNL5KtojwrRf4gu7iLgBLdm6suv/jjVagmbn3M6nIM=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: May 11 02:00:54 2025 GMT Not After : May 18 02:00:54 2025 GMT Subject: CN=682004d7-d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:b3:fe:2d:14:05:ff:ad:8d:35:82:c3:91: 7e:6b:13:0c:b7:d7:16:7e:96:62:1e:b5:a9:5e:fa: 1f:23:ea:22:2f:b8:ea:29:7a:52:18:88:c4:e0:ac: 84:0b:c8:a7:04:a8:80:cc:76:4e:18:ab:09:c7:ee: e6:de:4e:7f:ec:c2:ac:d4:8d:32:3a:21:ed:e4:4d: 5b:e6:2d:f3:7b:27:6a:fa:15:3b:fe:4b:42:b4:02: 52:58:01:fb:11:11:89:93:9d:09:d8:3f:29:10:e9: 56:7c:1f:b8:46:ec:f6:c0:f7:9e:93:dd:00:4b:1c: 4d:81:7a:1e:f7:65:22:84:dc:69:5a:e7:e7:bb:20: d5:5f:0b:af:da:e1:f5:41:0f:c9:5d:ae:64:57:5b: 09:cd:e8:ed:75:c4:d8:35:e8:25:3c:30:4e:35:de: 41:fd:72:b0:71:a6:18:68:1f:0c:b1:0d:83:fa:a7: 6a:91:68:d6:11:f9:26:d1:d6:7f:be:c9:be:f4:7f: 21:1c:1e:dc:01:a1:9e:86:8d:bc:e4:b0:c5:ac:5f: fc:e5:28:a8:ac:d7:5a:eb:72:84:21:22:76:3d:d0: f4:83:1b:45:e6:ee:58:0a:15:64:3e:b6:c0:db:3b: 95:b2:4f:10:1e:97:c4:c2:12:f4:3f:d2:43:a5:1e: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:28:44:D2:60:77:3C:D7:DB:33:A9:AB:14:81:BD:58:2C:D1:44 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:7e:d7:f9:39:21:0c:de:64:7a:22:9d:59:7a:0d:d9:be: 7d:0b:e8:38:68:9a:36:01:f8:4e:66:d6:c1:76:5f:e5:b7:b1: df:b7:16:45:59:4c:93:53:35:32:6c:95:19:9c:34:5c:cb:66: 79:90:0c:80:65:d0:55:8a:b2:45:59:2a:48:bc:ab:11:81:b0: 36:05:c3:aa:09:fc:5d:59:a5:43:f4:47:ea:7c:0b:b9:56:de: e2:1e:9a:6f:d3:c6:c2:11:e4:21:43:e7:33:c7:5b:0a:3b:22: bd:a7:b0:36:2b:85:fc:8b:84:b8:58:b9:95:ac:4c:9a:ce:10: 85:75:5f:58:b2:80:36:77:07:23:4c:6b:b2:82:0c:31:d5:43: ae:45:24:a7:38:6e:97:89:b0:e2:f3:5a:87:ce:9e:04:e4:cd: 05:f3:0c:5c:f7:8b:ea:ec:93:4c:27:67:a9:97:78:ab:31:e8: 60:44:92:7d:18:d4:b8:f0:c5:9b:d0:2c:0d:d1:8a:2d:0e:ec: d2:da:e6:b0:3d:27:e1:0c:0c:0f:82:c9:40:ed:cb:73:32:ec: 62:4b:22:9d:b6:cb:11:14:3f:8c:bf:b3:ab:fb:b9:d7:1e:24: f4:e8:cb:5e:c9:b5:2d:ed:58:0f:5a:31:31:16:3e:42:02:0d: b1:db:d8:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNTExMDIwMDU0WhcNMjUwNTE4MDIwMDU0WjAYMRYwFAYD VQQDEw02ODIwMDRkNy1kOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TCz/i0UBf+tjTWCw5F+axMMt9cWfpZiHrWpXvofI+oiL7jqKXpSGIjE4KyE C8inBKiAzHZOGKsJx+7m3k5/7MKs1I0yOiHt5E1b5i3zeydq+hU7/ktCtAJSWAH7 ERGJk50J2D8pEOlWfB+4Ruz2wPeek90ASxxNgXoe92UihNxpWufnuyDVXwuv2uH1 QQ/JXa5kV1sJzejtdcTYNeglPDBONd5B/XKwcaYYaB8MsQ2D+qdqkWjWEfkm0dZ/ vsm+9H8hHB7cAaGeho285LDFrF/85SiorNda63KEISJ2PdD0gxtF5u5YChVkPrbA 2zuVsk8QHpfEwhL0P9JDpR7WtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE5KETS YHc819szqasUgb1YLNFEMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvEX7X+TkhDN5keiKdWXoN2b59C+g4aJo2AfhOZtbBdl/lt7HftxZF WUyTUzUybJUZnDRcy2Z5kAyAZdBVirJFWSpIvKsRgbA2BcOqCfxdWaVD9EfqfAu5 Vt7iHppv08bCEeQhQ+czx1sKOyK9p7A2K4X8i4S4WLmVrEyazhCFdV9YsoA2dwcj TGuyggwx1UOuRSSnOG6XibDi81qHzp4E5M0F8wxc94vq7JNMJ2epl3irMehgRJJ9 GNS48MWb0CwN0YotDuzS2uawPSfhDAwPgslA7ctzMuxiSyKdtssRFD+Mv7Or+7nX HiT06MteybUt7VgPWjExFj5CAg2x29in -----END CERTIFICATE-----Generated at Mon May 12 16:53:01 2025 by rpki-client