$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: /MK9AC6k9UC8APvIjzpgcfZ1fnwrdc4CYCMoYxjHw0Q= Subject key identifier: DD:CA:47:09:92:98:CD:63:05:5E:43:9E:1B:E4:1D:40:74:F4:B4:63 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01C6 Signing time: Sun 11 May 2025 02:02:44 +0000 Manifest this update: Sun 11 May 2025 02:02:43 +0000 Manifest next update: Sun 18 May 2025 02:02:43 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: v2VH7sEtHP1NgnCyYrdpVI1tz4DMPeANmUkjnXTyp+A=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: May 11 02:02:43 2025 GMT Not After : May 18 02:02:43 2025 GMT Subject: CN=68200544-b654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:1a:19:1b:80:aa:54:3f:a0:1a:5a:88:69: 83:a4:ca:29:c0:c0:0c:4d:80:a0:9c:e7:c7:0e:7f: c7:e6:df:fa:e1:31:a7:b5:e1:84:0c:e0:6d:1f:dd: ab:1b:7d:1c:65:e6:33:57:4d:25:a4:04:a5:01:c2: 7e:b9:9d:ed:eb:ff:f1:cd:ac:0f:11:5c:3f:de:c3: 33:01:ec:81:90:be:2d:a6:b4:f2:e5:2e:7c:8c:92: 16:70:3d:63:f1:4e:12:b8:85:f9:64:9c:d2:1b:f6: c8:7a:60:76:4b:29:78:9f:ba:b5:95:85:bf:e7:f0: 31:07:78:0d:4f:c9:f5:fb:d7:7a:19:3e:aa:f2:53: 6f:4c:3c:88:06:e1:c9:94:62:06:95:bd:ae:ea:30: ca:69:56:2b:1a:e4:28:1a:ed:fa:3f:51:e3:19:6e: 05:4d:86:88:22:15:e2:cf:f3:85:b1:ac:4e:2a:c4: c3:04:8f:61:86:23:8f:bc:27:16:33:2c:c8:90:97: e1:6f:ed:ef:04:93:c6:d3:89:0d:9d:d8:1c:0d:b3: 28:bb:6e:f3:53:82:c5:54:24:e8:a4:23:c0:98:a2: 62:c0:42:67:d8:68:9d:df:76:df:1c:d7:2c:cc:af: b3:0b:e0:ef:b4:e1:90:45:ef:09:df:1f:01:98:01: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:47:09:92:98:CD:63:05:5E:43:9E:1B:E4:1D:40:74:F4:B4:63 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:6b:ce:60:49:57:f3:fb:13:b8:0a:38:6f:1e:70:a5:79: 89:c5:b3:60:47:4a:33:99:64:7b:60:76:40:61:0e:d4:5b:4a: 02:58:34:50:4a:e3:8f:6c:c6:be:08:45:db:20:d0:d6:ed:21: 72:b4:26:96:e2:c0:4d:7b:79:6a:5b:67:d6:cb:d9:7e:36:56: f9:c4:d4:c7:89:d9:11:0b:ef:bd:0c:90:11:f5:0b:bb:3b:30: b9:cc:45:e6:84:dc:11:93:5c:1a:19:f4:0f:91:7a:32:77:d5: 74:62:f4:6a:2b:67:f3:a8:ab:01:2b:6d:47:34:3e:0d:92:06: 09:af:90:8e:0a:26:96:78:fa:71:ef:37:b0:e5:f2:45:8b:85: 15:6c:46:0b:25:43:c4:ce:1d:be:4f:19:d5:81:69:88:f8:be: df:f5:f3:29:50:29:ab:33:69:bf:7f:6d:6d:ea:49:3e:82:bc: f4:58:a3:2f:eb:64:30:10:42:d7:2f:a5:d3:6a:f8:8e:4b:ae: 29:e6:ce:d6:fd:4b:34:a2:39:18:ef:e4:75:8e:f2:25:4e:ac: f4:0f:d2:c5:39:eb:ab:44:a1:3d:ad:39:d5:e4:f5:42:b1:42: 4f:07:2a:8a:00:5e:ef:74:44:ed:58:d5:b6:36:13:e4:5d:9a: 33:a4:e0:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNTExMDIwMjQzWhcNMjUwNTE4MDIwMjQzWjAYMRYwFAYD VQQDEw02ODIwMDU0NC1iNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMIaGRuAqlQ/oBpaiGmDpMopwMAMTYCgnOfHDn/H5t/64TGnteGEDOBtH92r G30cZeYzV00lpASlAcJ+uZ3t6//xzawPEVw/3sMzAeyBkL4tprTy5S58jJIWcD1j 8U4SuIX5ZJzSG/bIemB2Syl4n7q1lYW/5/AxB3gNT8n1+9d6GT6q8lNvTDyIBuHJ lGIGlb2u6jDKaVYrGuQoGu36P1HjGW4FTYaIIhXiz/OFsaxOKsTDBI9hhiOPvCcW MyzIkJfhb+3vBJPG04kNndgcDbMou27zU4LFVCTopCPAmKJiwEJn2Gid33bfHNcs zK+zC+DvtOGQRe8J3x8BmAFwQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3KRwmS mM1jBV5DnhvkHUB09LRjMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIrmvOYElX8/sTuAo4bx5wpXmJxbNgR0ozmWR7YHZAYQ7UW0oCWDRQ SuOPbMa+CEXbINDW7SFytCaW4sBNe3lqW2fWy9l+Nlb5xNTHidkRC++9DJAR9Qu7 OzC5zEXmhNwRk1waGfQPkXoyd9V0YvRqK2fzqKsBK21HND4NkgYJr5COCiaWePpx 7zew5fJFi4UVbEYLJUPEzh2+TxnVgWmI+L7f9fMpUCmrM2m/f21t6kk+grz0WKMv 62QwEELXL6XTaviOS64p5s7W/Us0ojkY7+R1jvIlTqz0D9LFOeurRKE9rTnV5PVC sUJPByqKAF7vdETtWNW2NhPkXZozpOAb -----END CERTIFICATE-----Generated at Sun May 11 18:32:09 2025 by rpki-client