$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: r8ySlU7Ky2SMaCQXxcPXNFFMd+Dc502f78YaDnlNzv0= Subject key identifier: C3:C2:9A:AF:93:17:A5:CA:26:1E:6A:D7:B4:2C:B3:7E:56:26:E9:A4 Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 0630 Signing time: Mon 12 May 2025 22:27:56 +0000 Manifest this update: Mon 12 May 2025 22:27:55 +0000 Manifest next update: Mon 19 May 2025 22:27:55 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: FzpTUsyr7lg5YhpcSE0EbRlqgRuIj5F9XmH5ercFWUg=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: c2XK07fkTtqrWcB4fZ5IJUYP88fXxA7EytLu8uCG7Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Validity Not Before: May 12 22:27:55 2025 GMT Not After : May 19 22:27:55 2025 GMT Subject: CN=682275ec-3e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1c:fa:49:4c:d8:56:5b:e2:31:30:31:76:0a: c4:b8:cc:b4:fb:30:ca:78:9e:36:04:0e:3a:3e:0c: 58:ca:d5:8e:38:6d:02:8a:08:c1:a3:0d:00:70:3e: c7:52:2d:8e:b7:0e:a9:e8:cc:6e:68:1e:38:67:b8: 0e:65:f6:62:33:12:ff:ff:bb:35:ba:8a:96:57:3e: e7:5c:f1:ff:51:f4:af:59:36:ba:02:97:ec:c3:82: 56:7d:c0:c0:ea:e9:1f:7a:2c:58:ea:86:6a:65:25: 1c:28:28:c9:ff:ec:32:cb:fb:9f:2a:cb:c7:82:cf: c7:26:d9:33:07:dc:3d:b7:3a:b9:be:22:19:bd:f8: 5b:3d:bb:2c:18:0e:4c:cc:ef:52:be:62:7f:41:1f: c8:87:26:f7:51:3a:5c:7b:b6:b5:7c:4b:03:b3:66: 1b:6e:fb:a7:0a:10:3d:7f:e0:d6:ef:6c:84:ba:43: fe:ff:91:44:b6:31:df:95:80:4b:10:e2:37:28:54: 57:02:c5:8e:95:ee:23:a1:e9:ce:a2:81:e2:86:48: 95:ad:f0:8c:7d:b4:ad:00:39:0a:47:3c:ca:82:14: 8b:79:59:e2:86:7d:40:89:04:10:03:97:96:99:28: d8:7b:e5:e4:a7:ba:04:7a:78:9d:27:ba:aa:b3:58: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C2:9A:AF:93:17:A5:CA:26:1E:6A:D7:B4:2C:B3:7E:56:26:E9:A4 X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:91:7d:4f:d5:37:be:e0:49:8e:54:6a:86:09:71:3c:e2: fd:09:56:88:a1:16:db:8f:6d:c4:85:97:95:12:27:4b:95:76: 01:00:55:fd:bc:4e:67:6a:3c:19:14:57:c7:7e:4a:ab:37:2a: 84:3b:7e:d9:40:9f:9a:0d:bf:f8:68:55:90:9a:91:c9:56:3e: 4b:c6:a4:0c:0c:5c:4a:5b:9b:b9:10:e7:c0:87:e5:6f:6b:a0: 61:2f:5b:86:8f:45:7d:f5:b5:2a:ed:2a:99:15:30:4d:97:78: b8:c0:21:54:02:63:87:1f:4c:8a:8c:14:b0:a4:f4:c8:29:e7: ec:f2:7b:df:91:44:f8:ba:da:f7:fa:56:40:14:fa:84:c0:8f: ad:55:44:35:e5:92:02:78:19:2f:fe:3f:68:45:8c:f0:0b:8a: 80:9f:3f:b1:e6:25:9e:bb:ee:64:1d:bd:f5:db:cd:3e:11:25: 92:53:17:f7:d9:b7:7a:e2:d8:9f:c3:25:54:08:ab:85:35:a7: 11:0c:b9:69:a2:80:ff:35:70:b2:34:99:2f:59:5f:07:27:de: 6b:2e:9d:e8:61:56:6d:ef:79:9c:62:a6:3d:ef:f3:b3:d6:90: 62:70:57:61:74:c8:70:a3:ae:6a:4e:7d:e0:ff:e6:20:3b:b3: cb:28:7a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUwNTEyMjIyNzU1WhcNMjUwNTE5MjIyNzU1WjAYMRYwFAYD VQQDEw02ODIyNzVlYy0zZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Rz6SUzYVlviMTAxdgrEuMy0+zDKeJ42BA46PgxYytWOOG0CigjBow0AcD7H Ui2Otw6p6MxuaB44Z7gOZfZiMxL//7s1uoqWVz7nXPH/UfSvWTa6Apfsw4JWfcDA 6ukfeixY6oZqZSUcKCjJ/+wyy/ufKsvHgs/HJtkzB9w9tzq5viIZvfhbPbssGA5M zO9SvmJ/QR/Ihyb3UTpce7a1fEsDs2YbbvunChA9f+DW72yEukP+/5FEtjHflYBL EOI3KFRXAsWOle4joenOooHihkiVrfCMfbStADkKRzzKghSLeVnihn1AiQQQA5eW mSjYe+Xkp7oEenidJ7qqs1iHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPCmq+T F6XKJh5q17Qss35WJumkMB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpjJF9T9U3vuBJjlRqhglxPOL9CVaIoRbbj23EhZeVEidLlXYBAFX9 vE5najwZFFfHfkqrNyqEO37ZQJ+aDb/4aFWQmpHJVj5LxqQMDFxKW5u5EOfAh+Vv a6BhL1uGj0V99bUq7SqZFTBNl3i4wCFUAmOHH0yKjBSwpPTIKefs8nvfkUT4utr3 +lZAFPqEwI+tVUQ15ZICeBkv/j9oRYzwC4qAnz+x5iWeu+5kHb31280+ESWSUxf3 2bd64tifwyVUCKuFNacRDLlpooD/NXCyNJkvWV8HJ95rLp3oYVZt73mcYqY97/Oz 1pBicFdhdMhwo65qTn3g/+YgO7PLKHpK -----END CERTIFICATE-----Generated at Wed May 14 19:37:56 2025 by rpki-client