$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: oGongl2ftGKQsIvlRv9ZjikIGUu4AhbrCXDVxJl554A= Subject key identifier: B3:6E:FB:DA:B3:A6:C8:49:80:79:8A:10:A2:04:DA:E6:90:5C:DB:05 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01A5 Signing time: Thu 15 May 2025 02:43:14 +0000 Manifest this update: Thu 15 May 2025 02:43:13 +0000 Manifest next update: Thu 22 May 2025 02:43:13 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: J62z6Z1XnyfukBCxVZr/cemP4tEMm4L2F9e4RoGwKRY=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: May 15 02:43:13 2025 GMT Not After : May 22 02:43:13 2025 GMT Subject: CN=682554c2-43c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:fa:3c:8c:37:80:ff:cf:17:73:8b:2e:fd: 86:8c:0a:6c:a2:87:36:9a:99:84:9a:29:9e:78:97: 1e:a2:65:33:50:1e:77:9a:5b:df:bb:0e:5c:6a:81: 18:51:9c:1e:39:e5:7d:32:2d:2e:42:b3:bc:d6:e1: 97:fc:17:5b:16:ec:63:be:2b:b6:7f:26:b2:4a:0c: a2:03:e5:17:b0:d1:c0:1b:c9:9f:e8:bd:8d:6c:49: 03:f0:71:cc:65:31:5a:23:ff:62:b6:3b:59:c2:38: 26:77:7b:d9:75:b3:b5:88:ef:f7:61:11:0f:d5:07: d6:aa:23:86:6c:b3:83:c7:d6:71:11:17:dd:e9:51: bc:0a:6f:6a:55:01:10:70:8e:b8:2f:8b:2a:b0:4c: 99:a9:48:ec:7f:26:50:35:d9:2e:ef:fa:d6:f3:2c: 3a:2e:5c:b2:02:76:72:c1:30:a3:02:8c:46:06:07: c2:8e:7b:75:03:ba:f5:30:85:ad:85:3d:ac:83:bc: 8d:e3:93:e0:b1:29:4a:4e:bc:38:5c:c0:99:1a:71: 59:5d:72:d2:c4:35:c5:e9:3e:2d:3a:5f:19:5d:2a: 01:8f:3c:35:20:24:8a:fa:3a:c4:9c:b7:f8:c3:01: be:9f:16:47:bf:1e:d2:85:d8:7d:d7:f1:58:95:1e: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:FB:DA:B3:A6:C8:49:80:79:8A:10:A2:04:DA:E6:90:5C:DB:05 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4b:4c:71:59:ad:00:fe:e3:8d:9c:0b:83:cc:8d:fb:30:18: 90:d0:83:9f:96:76:98:fc:73:8c:d0:99:ee:6e:c6:10:7f:47: 29:89:d3:65:11:75:79:82:5d:ac:47:b2:c5:ae:d1:99:28:ef: 1f:86:c9:40:9a:03:05:58:f3:4d:b3:bd:0c:0e:00:03:68:f5: 33:e0:60:3d:65:2c:f7:d1:c2:45:eb:39:0b:15:d5:e6:fa:fb: 2a:5a:40:76:0b:8a:36:c0:19:f5:37:23:94:69:d6:d1:ca:52: 9c:4e:82:75:44:83:f0:b5:44:c8:a4:9f:14:2e:7a:35:07:7e: 40:37:21:74:6d:7e:c1:2b:a4:bc:1e:1c:4f:95:6b:93:6b:3c: a0:7b:2a:76:6b:f3:07:e1:53:58:f5:0e:9c:56:5f:e0:1f:0f: f9:e8:d7:90:45:2e:48:70:6a:04:75:02:70:6f:57:99:75:16: 19:35:eb:4c:fc:be:a2:71:8b:c5:02:52:b2:ac:c7:c4:3a:84: 6d:e9:18:c8:1f:ba:bb:33:4e:2d:52:1f:88:06:78:a7:60:55: 45:6a:d2:2f:c3:17:e2:71:77:a3:f7:52:2e:e1:aa:0c:3b:d9: b0:b4:f0:63:c1:47:31:cb:16:24:cd:3d:f0:d1:c0:d3:2b:3d: 6d:ec:bb:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNTE1MDI0MzEzWhcNMjUwNTIyMDI0MzEzWjAYMRYwFAYD VQQDEw02ODI1NTRjMi00M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIb6PIw3gP/PF3OLLv2GjApsooc2mpmEmimeeJceomUzUB53mlvfuw5caoEY UZweOeV9Mi0uQrO81uGX/BdbFuxjviu2fyaySgyiA+UXsNHAG8mf6L2NbEkD8HHM ZTFaI/9itjtZwjgmd3vZdbO1iO/3YREP1QfWqiOGbLODx9ZxERfd6VG8Cm9qVQEQ cI64L4sqsEyZqUjsfyZQNdku7/rW8yw6LlyyAnZywTCjAoxGBgfCjnt1A7r1MIWt hT2sg7yN45PgsSlKTrw4XMCZGnFZXXLSxDXF6T4tOl8ZXSoBjzw1ICSK+jrEnLf4 wwG+nxZHvx7Shdh91/FYlR6AEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNu+9qz pshJgHmKEKIE2uaQXNsFMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiS0xxWa0A/uONnAuDzI37MBiQ0IOflnaY/HOM0JnubsYQf0cpidNl EXV5gl2sR7LFrtGZKO8fhslAmgMFWPNNs70MDgADaPUz4GA9ZSz30cJF6zkLFdXm +vsqWkB2C4o2wBn1NyOUadbRylKcToJ1RIPwtUTIpJ8ULno1B35ANyF0bX7BK6S8 HhxPlWuTazygeyp2a/MH4VNY9Q6cVl/gHw/56NeQRS5IcGoEdQJwb1eZdRYZNetM /L6icYvFAlKyrMfEOoRt6RjIH7q7M04tUh+IBninYFVFatIvwxficXej91Iu4aoM O9mwtPBjwUcxyxYkzT3w0cDTKz1t7LsR -----END CERTIFICATE-----Generated at Fri May 16 15:33:36 2025 by rpki-client