$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: oAyTzDGSrrKA5z5325H2CQ1wQDH2ctglp4S8Kv++pwk= Subject key identifier: 1F:DC:B1:B6:A7:F1:87:A8:41:AF:FD:2C:AB:4A:7F:A0:B9:ED:16:8B Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 0E Signing time: Thu 15 May 2025 07:23:07 +0000 Manifest this update: Thu 15 May 2025 07:23:07 +0000 Manifest next update: Thu 22 May 2025 07:23:07 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: AqlW9sRiYxHtvSXBHjwam7D3zAdcK7asS/0VzSrmW14=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: May 15 07:23:07 2025 GMT Not After : May 22 07:23:07 2025 GMT Subject: CN=6825965b-8014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:32:64:81:8c:a3:7d:b5:39:b9:07:de:5e: a9:6b:f1:f4:01:4f:3a:96:be:2f:43:d0:da:76:e6: 6c:7e:0d:5a:b0:20:d5:4e:18:bf:02:e0:08:8c:55: 8e:c9:00:e3:39:70:83:5d:60:34:28:45:c3:96:45: 45:79:10:1e:f7:4f:5a:43:96:88:f0:53:de:32:8c: 2a:3e:11:65:3f:1f:65:73:5c:f0:89:51:16:a5:dd: 3f:6c:53:4c:5f:91:01:36:19:85:8f:ef:5d:d5:09: ba:4a:22:e1:57:7e:97:2f:90:52:03:53:58:cc:d3: 75:9f:0b:bf:d0:19:90:1b:e0:b7:ef:b4:c0:ea:0a: ab:06:c7:90:ad:34:7a:f2:04:aa:37:e7:6d:21:8f: a2:f3:ed:cd:8a:fa:23:ca:a5:91:49:2b:d7:a6:87: cd:fe:59:25:4f:15:e0:57:7f:6d:88:a6:a8:f8:3a: 71:f4:37:f5:30:97:fb:b4:27:61:ba:1c:c2:fe:43: f2:f1:f8:3b:6c:be:1d:55:34:a9:88:e0:58:10:1f: 40:c2:d5:71:9e:ba:83:28:5f:c8:f7:21:ce:cc:71: 45:69:69:c0:6e:1b:06:1e:ab:d4:94:88:38:6b:00: 65:86:38:2c:80:90:fd:90:79:1e:c8:b4:6c:93:d0: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DC:B1:B6:A7:F1:87:A8:41:AF:FD:2C:AB:4A:7F:A0:B9:ED:16:8B X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:2d:83:e2:a3:09:b7:c2:5d:cd:f5:81:8c:a4:7b:1c:a1: 51:ff:d4:f4:b0:df:72:b6:f9:d8:c4:71:a0:cc:4a:47:21:83: e7:a5:c5:40:73:20:d2:0f:b4:ec:92:dd:59:29:5c:c3:24:ab: 6e:46:81:26:55:47:95:96:22:2d:fd:3e:bd:1f:10:50:d6:2f: d6:c3:a0:01:47:48:ff:66:80:4b:a8:d6:5f:17:1a:75:9f:6d: 7a:73:b1:0a:26:a0:71:15:13:ae:66:e9:61:c4:ed:fc:e9:09: e6:9e:f6:fb:e6:8b:a5:c6:b9:c9:4a:c5:ae:6c:ea:a2:e0:5f: 89:8a:8a:17:56:6a:82:bf:05:02:c8:d9:f4:30:94:d7:04:d2: 4b:e3:43:1e:e4:f4:17:a2:ea:7a:e6:f3:51:96:aa:58:b1:e4: 66:c2:dd:50:0a:fa:10:89:62:e3:f4:7a:9f:22:ce:7f:33:d1: d4:aa:7b:dd:fe:dc:e7:f4:c0:19:09:97:52:e1:bc:32:2b:e5: 52:90:5f:3b:de:c8:82:89:c7:58:40:1b:87:d0:36:9f:97:d6: f0:fd:2c:82:97:c0:95:39:8a:e6:4b:11:fb:1e:91:c5:b4:ae: 60:76:66:8b:fc:aa:1a:3f:1e:c0:19:22:2e:76:fa:31:5b:3b: 03:65:82:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA1MTUwNzIzMDdaFw0yNTA1MjIwNzIzMDdaMBgxFjAUBgNV BAMTDTY4MjU5NjViLTgwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDrTJkgYyjfbU5uQfeXqlr8fQBTzqWvi9D0Np25mx+DVqwINVOGL8C4AiMVY7J AOM5cINdYDQoRcOWRUV5EB73T1pDlojwU94yjCo+EWU/H2VzXPCJURal3T9sU0xf kQE2GYWP713VCbpKIuFXfpcvkFIDU1jM03WfC7/QGZAb4LfvtMDqCqsGx5CtNHry BKo3520hj6Lz7c2K+iPKpZFJK9emh83+WSVPFeBXf22Ipqj4OnH0N/Uwl/u0J2G6 HML+Q/Lx+Dtsvh1VNKmI4FgQH0DC1XGeuoMoX8j3Ic7McUVpacBuGwYeq9SUiDhr AGWGOCyAkP2QeR7ItGyT0L9RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH9yxtqfx h6hBr/0sq0p/oLntFoswHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEN4LYPiowm3wl3N9YGMpHscoVH/1PSw33K2+djEcaDMSkchg+elxUBz INIPtOyS3VkpXMMkq25GgSZVR5WWIi39Pr0fEFDWL9bDoAFHSP9mgEuo1l8XGnWf bXpzsQomoHEVE65m6WHE7fzpCeae9vvmi6XGuclKxa5s6qLgX4mKihdWaoK/BQLI 2fQwlNcE0kvjQx7k9Bei6nrm81GWqlix5GbC3VAK+hCJYuP0ep8izn8z0dSqe93+ 3Of0wBkJl1LhvDIr5VKQXzveyIKJx1hAG4fQNp+X1vD9LIKXwJU5iuZLEfsekcW0 rmB2Zov8qho/HsAZIi52+jFbOwNlgu8= -----END CERTIFICATE-----Generated at Fri May 16 19:39:48 2025 by rpki-client