$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: HKt3mrYTrSrsYXglv2MD1PPfVpbMCuL/FAuC3wmcIbc= Subject key identifier: 60:EF:7D:A5:9D:DD:34:63:47:C8:BF:CA:8F:94:4E:B1:10:E8:D4:D5 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 0587 Signing time: Mon 12 May 2025 23:07:55 +0000 Manifest this update: Mon 12 May 2025 23:07:54 +0000 Manifest next update: Mon 19 May 2025 23:07:54 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: tUHimmyBJ3KpoPhFK56llrS1g8/apq0MPbP/o4haY2I=) 2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k=) 3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 12 23:07:54 2025 GMT Not After : May 19 23:07:54 2025 GMT Subject: CN=68227f4a-fa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:86:dc:f8:f1:88:e9:16:49:4a:08:1f:de: d1:17:d9:68:44:ba:ff:c7:94:65:23:a9:7c:2b:f5: 9b:88:f8:c8:89:6e:12:24:da:02:52:51:40:92:de: 2e:ec:39:0f:b8:be:a2:42:60:36:2a:a4:a8:73:0b: d4:50:95:be:3d:64:b1:5c:b3:43:0c:cf:ab:80:7a: f9:ae:6f:89:17:55:8e:61:05:06:8d:85:49:f1:22: 59:29:41:2f:d7:48:7b:16:ca:01:e7:15:42:84:83: 5d:32:1a:2b:62:61:f1:57:c0:2e:78:02:2e:5e:1a: af:3c:42:6e:05:4e:15:d0:ee:19:83:a0:5e:f0:32: 4c:b5:a7:8f:db:77:9a:d4:c3:07:cf:8e:f0:87:68: 07:42:2e:b7:11:b6:92:ce:d0:73:e6:a8:33:6b:38: 94:26:2c:fd:de:f9:36:a5:06:97:07:2e:78:78:ba: 31:f1:46:5e:76:b4:56:38:87:e8:a3:fe:31:80:fb: 47:d8:8b:a4:b8:0a:bf:2d:f8:1d:4c:4c:de:c6:3b: 41:77:d7:11:c4:1e:4e:c2:f9:e7:62:3f:42:ba:06: c3:d4:3b:d0:7f:c0:98:dc:de:9f:60:36:47:53:d9: 0e:cd:a5:6a:90:e7:d3:1f:12:d2:9e:25:22:b8:06: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EF:7D:A5:9D:DD:34:63:47:C8:BF:CA:8F:94:4E:B1:10:E8:D4:D5 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cc:a7:92:a1:55:8d:92:58:b1:4e:47:a6:66:be:29:78:85: 0e:7f:3a:e0:54:14:c3:7c:1d:48:9f:79:74:ec:a2:74:be:e8: ae:c9:9e:e8:1d:ac:f9:dd:9b:4a:8e:10:de:2a:a0:ac:dc:4a: 12:5b:d0:8e:e2:46:a0:c8:22:17:07:c5:f2:c6:49:4e:64:d1: e6:2f:9b:00:68:34:94:8a:89:e0:98:c5:43:25:ca:93:7f:15: 74:84:e6:ec:6a:92:21:0f:57:f2:12:fe:e7:51:86:8e:ae:25: 4a:ef:fb:1e:aa:41:8f:fd:0f:ee:43:9d:d7:4b:76:62:70:54: ec:4c:ad:57:a5:85:2e:69:c8:c3:23:1b:e1:8b:a4:f2:0c:f0: 26:40:43:50:7b:71:9b:11:61:99:88:7e:b6:a3:39:db:df:3d: 34:26:ae:d5:00:4a:f6:e0:27:c8:75:9b:60:8e:24:63:bc:54: 52:fa:2b:97:c0:c4:8f:3a:15:c2:2a:5f:b4:c5:11:1c:8e:f0: 80:75:b3:73:17:50:20:10:9f:ac:80:a6:7a:5d:02:7f:dd:87: 7e:98:21:d1:cf:55:71:6f:07:33:5c:f8:66:8c:a5:44:ad:ff: 47:ea:37:16:54:f2:d1:6a:c5:5a:3e:6b:e5:0c:75:33:a4:f1: 2d:fb:30:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwNTEyMjMwNzU0WhcNMjUwNTE5MjMwNzU0WjAYMRYwFAYD VQQDEw02ODIyN2Y0YS1mYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhaG3PjxiOkWSUoIH97RF9loRLr/x5RlI6l8K/WbiPjIiW4SJNoCUlFAkt4u 7DkPuL6iQmA2KqSocwvUUJW+PWSxXLNDDM+rgHr5rm+JF1WOYQUGjYVJ8SJZKUEv 10h7FsoB5xVChINdMhorYmHxV8AueAIuXhqvPEJuBU4V0O4Zg6Be8DJMtaeP23ea 1MMHz47wh2gHQi63EbaSztBz5qgzaziUJiz93vk2pQaXBy54eLox8UZedrRWOIfo o/4xgPtH2IukuAq/LfgdTEzexjtBd9cRxB5OwvnnYj9CugbD1DvQf8CY3N6fYDZH U9kOzaVqkOfTHxLSniUiuAbMwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDvfaWd 3TRjR8i/yo+UTrEQ6NTVMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/zKeSoVWNklixTkemZr4peIUOfzrgVBTDfB1In3l07KJ0vuiuyZ7o Haz53ZtKjhDeKqCs3EoSW9CO4kagyCIXB8XyxklOZNHmL5sAaDSUiongmMVDJcqT fxV0hObsapIhD1fyEv7nUYaOriVK7/seqkGP/Q/uQ53XS3ZicFTsTK1XpYUuacjD Ixvhi6TyDPAmQENQe3GbEWGZiH62oznb3z00Jq7VAEr24CfIdZtgjiRjvFRS+iuX wMSPOhXCKl+0xREcjvCAdbNzF1AgEJ+sgKZ6XQJ/3Yd+mCHRz1VxbwczXPhmjKVE rf9H6jcWVPLRasVaPmvlDHUzpPEt+zBP -----END CERTIFICATE-----Generated at Tue May 13 19:26:41 2025 by rpki-client