$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: W09XhhPjoFGAChrQUdkW4EYlaoqiGpCGkLSe6o24euU= Subject key identifier: EB:7F:B5:DE:FB:22:A7:90:08:D6:2F:07:32:25:E3:5F:E9:78:F9:9A Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 0415 Signing time: Tue 13 May 2025 00:14:13 +0000 Manifest this update: Tue 13 May 2025 00:14:13 +0000 Manifest next update: Tue 20 May 2025 00:14:13 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: wLut/L6gRWQzvpmBULh/e3aaj1SgLSSvmJyqKobrtkk=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: May 13 00:14:13 2025 GMT Not After : May 20 00:14:13 2025 GMT Subject: CN=68228ed5-e5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:f1:93:89:6f:07:4b:66:ec:c4:2b:a0:21: 19:0c:21:9e:0c:6f:65:88:12:e0:2a:04:6c:c2:25: 81:7c:0b:21:af:06:f7:70:14:6c:cb:6c:d9:4e:13: 3a:45:71:bf:00:11:92:ae:a8:5d:c4:9a:54:26:49: a8:02:5a:c2:6a:31:ad:d1:27:4f:82:6a:03:da:45: fe:36:f2:40:66:e4:12:c7:c6:4f:5a:66:cc:bb:c8: fd:3b:22:d6:44:df:f8:27:67:e3:df:89:4d:8e:22: ee:35:6f:a6:56:85:dc:68:30:12:05:df:13:f4:cd: e8:ff:3b:71:dd:cd:d9:2e:50:0e:1c:84:f8:7b:56: 5e:84:08:7b:26:34:45:3a:d2:db:18:2b:0e:8c:36: a8:b3:21:56:36:86:c1:29:d6:d7:95:e2:cc:11:b4: 3e:3d:af:76:89:43:0e:d5:7a:20:4e:64:2b:9e:95: d3:11:b5:a3:e2:ad:f6:52:70:c1:6d:75:9c:21:a7: 22:bd:af:47:1b:09:44:cd:f8:58:5c:ba:f0:6b:24: c0:46:93:1c:a6:a3:d4:cc:bd:41:78:7c:0d:08:8f: 54:95:d3:68:19:78:bf:79:9b:ba:ff:df:9b:87:2e: d2:f3:cd:42:9a:76:63:47:59:4e:ee:ac:8e:16:83: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:B5:DE:FB:22:A7:90:08:D6:2F:07:32:25:E3:5F:E9:78:F9:9A X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7b:a2:48:62:2c:8b:66:bc:db:bc:df:72:13:75:be:b2:3d: e2:84:d5:8f:65:b9:f2:58:d1:5a:13:a7:3c:31:56:32:03:7c: 14:18:9e:ae:f3:b5:af:ec:cb:df:44:ef:fd:dc:0e:70:2e:30: 33:7f:d8:64:d5:51:ba:be:1c:b8:01:a4:03:13:e7:9f:27:7e: 4c:f7:fd:14:f6:db:55:a9:94:a3:e7:d0:51:47:e0:f2:49:ca: db:a0:de:d7:07:ff:05:b4:43:20:60:33:05:dd:3b:9c:46:7b: a9:57:27:4d:91:87:a3:67:ce:a3:15:29:58:1b:81:2e:63:e7: c0:7b:10:9e:06:8c:e7:45:f1:13:7f:b4:94:93:e0:e3:a7:d0: bf:ae:fb:af:89:fe:bf:c3:4b:29:5f:bf:73:ed:f1:b7:1f:c7: 8c:7b:da:7f:73:c1:f4:36:3d:8a:bd:92:70:a3:cb:5a:38:5a: cd:c0:c7:13:3b:19:12:d4:39:e4:5d:1c:71:3b:78:11:1c:69: 29:d4:b1:5e:9e:38:1a:0a:80:e5:8c:b6:71:e0:21:db:34:9d: 36:2b:32:fd:e0:3d:b5:da:7d:05:00:a0:ff:84:3a:ed:b5:f7: 72:6e:5a:d3:e0:a8:f8:3a:e1:35:3f:ae:93:66:d1:16:36:89: 08:e7:59:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjUwNTEzMDAxNDEzWhcNMjUwNTIwMDAxNDEzWjAYMRYwFAYD VQQDEw02ODIyOGVkNS1lNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTbxk4lvB0tm7MQroCEZDCGeDG9liBLgKgRswiWBfAshrwb3cBRsy2zZThM6 RXG/ABGSrqhdxJpUJkmoAlrCajGt0SdPgmoD2kX+NvJAZuQSx8ZPWmbMu8j9OyLW RN/4J2fj34lNjiLuNW+mVoXcaDASBd8T9M3o/ztx3c3ZLlAOHIT4e1ZehAh7JjRF OtLbGCsOjDaosyFWNobBKdbXleLMEbQ+Pa92iUMO1XogTmQrnpXTEbWj4q32UnDB bXWcIaciva9HGwlEzfhYXLrwayTARpMcpqPUzL1BeHwNCI9UldNoGXi/eZu6/9+b hy7S881CmnZjR1lO7qyOFoMhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOt/td77 IqeQCNYvBzIl41/pePmaMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEe6JIYiyLZrzbvN9yE3W+sj3ihNWPZbnyWNFaE6c8MVYyA3wUGJ6u 87Wv7MvfRO/93A5wLjAzf9hk1VG6vhy4AaQDE+efJ35M9/0U9ttVqZSj59BRR+Dy ScrboN7XB/8FtEMgYDMF3TucRnupVydNkYejZ86jFSlYG4EuY+fAexCeBoznRfET f7SUk+Djp9C/rvuvif6/w0spX79z7fG3H8eMe9p/c8H0Nj2KvZJwo8taOFrNwMcT OxkS1DnkXRxxO3gRHGkp1LFenjgaCoDljLZx4CHbNJ02KzL94D212n0FAKD/hDrt tfdyblrT4Kj4OuE1P66TZtEWNokI51nV -----END CERTIFICATE-----Generated at Thu May 15 00:32:30 2025 by rpki-client