$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: 9pOsrGrbGaXgd0lsQqF00VPdpkZgFsyxgB0z/hmwuT4= Subject key identifier: E8:1B:53:0B:50:5E:8A:FA:6C:63:FE:90:81:B0:B5:28:35:2B:A0:D4 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 0673 Signing time: Mon 12 May 2025 22:18:16 +0000 Manifest this update: Mon 12 May 2025 22:18:16 +0000 Manifest next update: Mon 19 May 2025 22:18:16 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: FNvsTT4nGFdWcZO0BdIys62hdTD8TOUFFzdJPAaVPM8=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: iHNv1D4CuKh0MplUtgE1k/nBfju2p94sD6YSJueQYIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4, serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Validity Not Before: May 12 22:18:16 2025 GMT Not After : May 19 22:18:16 2025 GMT Subject: CN=682273a8-1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:ac:fb:b9:b8:1e:e8:13:45:c9:f1:69:c7: 23:93:e4:b8:62:ff:5a:4b:0c:3c:26:fe:ff:9a:75: 66:15:61:ac:5b:d6:50:66:18:d1:47:d5:ce:2d:f6: 09:49:86:5c:68:89:82:0c:a8:65:1b:33:0b:50:7a: 2c:48:43:b0:b9:77:41:52:ba:4b:93:17:47:b2:f0: cf:88:90:62:e6:50:89:e5:9b:6e:a8:ef:99:3a:bb: 9e:e8:f2:86:75:bc:ef:e9:15:53:b5:1c:2d:2a:da: ce:e5:9e:73:13:a8:68:6f:4f:56:f3:0c:01:87:ac: 0b:15:99:d6:e1:2f:f0:cf:d6:23:48:13:54:77:b4: f3:a7:46:54:4e:f9:82:6a:de:08:b3:b1:f7:5c:46: 8e:ca:e1:e9:b7:0e:21:36:49:57:a2:86:5d:f8:03: 07:ff:3c:8f:dd:fa:72:da:ba:79:11:5c:81:38:2b: c7:e7:07:c6:96:6d:10:22:26:78:a5:f8:d7:ea:6e: 4f:23:5a:9f:71:f3:68:5a:32:af:5a:44:1c:fe:4e: 1d:75:58:71:b1:73:17:9f:5b:12:38:58:b0:0a:b6: 60:a3:00:98:63:fc:cd:af:94:0c:e4:24:e4:8d:0c: 4e:63:66:ea:e2:8c:8b:28:d4:31:d6:40:bb:42:3e: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1B:53:0B:50:5E:8A:FA:6C:63:FE:90:81:B0:B5:28:35:2B:A0:D4 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ba:d3:73:ec:bc:b0:87:eb:94:56:9a:96:51:ff:f9:52:77: e0:be:3c:c1:d9:0e:f0:99:e9:b3:5c:7a:bf:e2:47:35:d5:dd: d7:e4:02:ec:9f:dd:ec:2a:d9:d4:54:ba:73:51:1b:0c:dc:e1: 00:8f:82:ac:ed:70:07:17:bd:37:29:2d:dd:59:11:7c:b4:68: be:db:1d:19:24:67:34:ff:a2:ef:0b:b1:81:bf:3a:5c:20:fa: 05:b0:dd:a9:50:40:9a:37:7f:d2:88:f9:27:90:87:79:ff:50: 62:56:a2:84:81:e7:52:97:5d:71:bd:2a:a3:82:aa:d3:06:60: 03:63:7e:53:78:99:e6:3c:cd:27:ab:a9:b3:e5:5e:c1:5d:56: cd:8d:71:7b:3d:c2:95:12:ab:01:c1:e1:59:a0:80:6b:aa:0f: d7:9e:2b:6f:2a:04:29:52:f4:c1:a3:e3:18:3c:3d:30:8c:b4: c7:12:c5:1f:73:5e:10:92:b1:9f:dd:00:2c:09:74:4e:cf:ce: c3:22:ad:3c:25:f0:0e:36:55:dc:e0:bd:ca:6e:26:86:26:41: b3:06:44:5b:1c:ef:b0:e4:0d:32:c6:23:03:2d:4b:c9:9e:a7: 17:69:3c:a7:61:3b:64:76:7a:63:1f:4a:69:32:e7:99:7c:88: 70:bd:e1:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUwNTEyMjIxODE2WhcNMjUwNTE5MjIxODE2WjAYMRYwFAYD VQQDEw02ODIyNzNhOC0xZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12Ks+7m4HugTRcnxaccjk+S4Yv9aSww8Jv7/mnVmFWGsW9ZQZhjRR9XOLfYJ SYZcaImCDKhlGzMLUHosSEOwuXdBUrpLkxdHsvDPiJBi5lCJ5ZtuqO+ZOrue6PKG dbzv6RVTtRwtKtrO5Z5zE6hob09W8wwBh6wLFZnW4S/wz9YjSBNUd7Tzp0ZUTvmC at4Is7H3XEaOyuHptw4hNklXooZd+AMH/zyP3fpy2rp5EVyBOCvH5wfGlm0QIiZ4 pfjX6m5PI1qfcfNoWjKvWkQc/k4ddVhxsXMXn1sSOFiwCrZgowCYY/zNr5QM5CTk jQxOY2bq4oyLKNQx1kC7Qj5R2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgbUwtQ Xor6bGP+kIGwtSg1K6DUMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4utNz7Lywh+uUVpqWUf/5UnfgvjzB2Q7wmemzXHq/4kc11d3X5ALs n93sKtnUVLpzURsM3OEAj4Ks7XAHF703KS3dWRF8tGi+2x0ZJGc0/6LvC7GBvzpc IPoFsN2pUECaN3/SiPknkId5/1BiVqKEgedSl11xvSqjgqrTBmADY35TeJnmPM0n q6mz5V7BXVbNjXF7PcKVEqsBweFZoIBrqg/XnitvKgQpUvTBo+MYPD0wjLTHEsUf c14QkrGf3QAsCXROz87DIq08JfAONlXc4L3KbiaGJkGzBkRbHO+w5A0yxiMDLUvJ nqcXaTynYTtkdnpjH0ppMueZfIhwveGg -----END CERTIFICATE-----Generated at Tue May 13 01:33:55 2025 by rpki-client