$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: vA3hN08RjEIs2/IjgM2LgJRfTiZB0VSG9k4zbVR4eS0= Subject key identifier: 79:16:8D:A5:E5:2A:D0:2C:9B:EB:DF:B4:45:40:3D:4E:7D:F6:65:85 Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 08D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 08CC Signing time: Mon 12 May 2025 20:18:14 +0000 Manifest this update: Mon 12 May 2025 20:18:14 +0000 Manifest next update: Mon 19 May 2025 20:18:14 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: 9SX4dBrcuG+oto39zySjdIO4lLwCZezFNTV8SwaIqkI=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: /AfMDdlUI8cvlyQqr8rioborDgBP3t18ByLX0Pcso10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4, serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Validity Not Before: May 12 20:18:14 2025 GMT Not After : May 19 20:18:14 2025 GMT Subject: CN=68225786-2b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:31:fd:cd:0c:89:54:d7:bd:87:7f:d1:0d: 72:01:78:4b:f6:c8:08:81:d2:6b:f5:8d:3a:9e:8a: e3:8d:df:8c:ef:7d:2a:a4:8c:eb:f9:d1:dc:bf:0b: 9a:11:10:3a:c6:5e:20:77:7b:66:19:9b:ce:53:9b: 4d:cd:1e:5f:e1:f3:dd:7d:35:56:31:d5:92:25:4c: 3a:4b:00:39:9c:b5:0d:68:f1:19:cf:0b:c1:7f:b7: 08:f8:34:13:6d:c7:d7:2a:57:72:3f:b7:a5:ed:47: 33:76:9e:80:03:79:8e:86:8d:15:79:76:92:1f:9f: a9:05:70:52:65:3d:95:f7:de:4c:66:a7:66:1a:3a: 82:a0:f2:f1:05:c0:22:67:87:2e:01:2d:b6:8b:23: e1:da:8f:4f:15:24:fc:14:72:b8:35:16:43:07:01: 2f:3c:3f:ae:01:49:4e:2f:9c:a2:27:5e:e3:12:5f: 65:00:d6:98:37:b9:74:b6:9c:c5:c8:c9:96:55:58: f0:50:bf:a7:24:29:a4:a8:b1:0d:73:2e:39:43:d7: 4e:e8:09:ee:02:f0:3d:17:a5:88:a0:3a:65:5b:18: fb:42:4d:e5:cc:77:09:3b:ec:87:6f:be:3d:8e:59: 5f:c2:91:da:35:de:2f:08:39:28:4d:5e:c2:f7:1c: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:8D:A5:E5:2A:D0:2C:9B:EB:DF:B4:45:40:3D:4E:7D:F6:65:85 X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:da:a8:91:54:7c:34:6b:95:21:c8:2b:e7:03:2a:80:52: db:34:c4:b2:75:f2:84:0b:ad:e6:7f:46:d0:bb:a6:7c:78:d7: 2e:b5:57:de:11:24:36:e2:38:10:a3:98:09:15:cb:30:8c:13: 09:c7:64:6d:8e:69:a7:23:f5:01:54:4f:5e:1b:5f:9c:4b:e5: 8d:a9:9c:de:af:c6:1d:2f:6c:6d:ee:bb:2b:32:4a:78:87:a6: 83:8e:bd:a7:04:7c:a5:75:c8:fa:23:c0:cf:00:c8:05:c0:fe: c7:2b:5e:d4:7a:aa:48:13:77:a6:da:e9:06:d3:cf:0f:27:0c: a0:ec:0c:9b:c0:1c:2e:64:c1:d4:44:85:d6:cd:a0:ca:cc:df: e4:98:80:21:c2:50:1b:85:f5:f6:c2:00:3a:df:bf:cd:b6:4c: 52:3a:b7:71:01:a0:41:db:81:3a:37:bb:2a:a7:c2:91:e8:b7: ae:7a:6e:e6:31:d5:30:67:29:b8:97:36:fc:38:87:9b:c3:a0: 45:29:c8:b1:17:27:9d:85:48:65:5d:26:ba:89:b8:c0:9f:71: 91:53:a4:45:66:7b:bd:83:58:4b:00:82:af:df:77:1f:fa:2f: df:be:da:b2:ae:dc:55:af:e8:e9:63:ad:7f:5c:08:81:ba:a7: 7d:e8:4c:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwNTEyMjAxODE0WhcNMjUwNTE5MjAxODE0WjAYMRYwFAYD VQQDEw02ODIyNTc4Ni0yYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Ux/c0MiVTXvYd/0Q1yAXhL9sgIgdJr9Y06norjjd+M730qpIzr+dHcvwua ERA6xl4gd3tmGZvOU5tNzR5f4fPdfTVWMdWSJUw6SwA5nLUNaPEZzwvBf7cI+DQT bcfXKldyP7el7Uczdp6AA3mOho0VeXaSH5+pBXBSZT2V995MZqdmGjqCoPLxBcAi Z4cuAS22iyPh2o9PFST8FHK4NRZDBwEvPD+uAUlOL5yiJ17jEl9lANaYN7l0tpzF yMmWVVjwUL+nJCmkqLENcy45Q9dO6AnuAvA9F6WIoDplWxj7Qk3lzHcJO+yHb749 jllfwpHaNd4vCDkoTV7C9xxS1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkWjaXl KtAsm+vftEVAPU599mWFMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq5tqokVR8NGuVIcgr5wMqgFLbNMSydfKEC63mf0bQu6Z8eNcutVfe ESQ24jgQo5gJFcswjBMJx2RtjmmnI/UBVE9eG1+cS+WNqZzer8YdL2xt7rsrMkp4 h6aDjr2nBHyldcj6I8DPAMgFwP7HK17UeqpIE3em2ukG088PJwyg7AybwBwuZMHU RIXWzaDKzN/kmIAhwlAbhfX2wgA637/NtkxSOrdxAaBB24E6N7sqp8KR6Leuem7m MdUwZym4lzb8OIebw6BFKcixFyedhUhlXSa6ibjAn3GRU6RFZnu9g1hLAIKv33cf +i/fvtqyrtxVr+jpY61/XAiBuqd96Ewt -----END CERTIFICATE-----Generated at Wed May 14 19:48:52 2025 by rpki-client