$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: 6JnFy+rorX/kYReFrjjH3OaQ/zTfbxmq6NUDZfzRpJA= Subject key identifier: EA:07:1F:6C:C2:73:8E:77:E1:53:67:42:73:E9:12:1F:83:EC:77:12 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: C1 Signing time: Tue 13 May 2025 05:04:24 +0000 Manifest this update: Tue 13 May 2025 05:04:24 +0000 Manifest next update: Tue 20 May 2025 05:04:24 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: l1Ab8owVMbU5Ekdivv0pKEZcAHdYOpxF9FUx+aD/vNI=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC, serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: May 13 05:04:24 2025 GMT Not After : May 20 05:04:24 2025 GMT Subject: CN=6822d2d8-f5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:d4:48:b6:92:3c:1f:0f:09:ba:92:3e:e6: 76:3a:5e:fe:9f:9a:e1:43:57:92:9d:82:0b:fc:b2: fd:cb:ed:b0:cb:28:f3:70:44:fe:74:05:fd:3e:e3: 05:d1:8b:2b:1f:b0:83:1d:77:dc:28:6f:31:67:40: ef:b8:1f:6c:17:cd:8c:9d:39:a6:43:ce:5b:27:59: 9f:0b:d0:28:ce:09:1c:c2:8f:84:0c:48:e2:08:3a: 7b:ac:c6:5a:aa:ec:4c:d0:06:ef:f4:c8:05:c2:ac: a4:65:6d:61:ec:e1:53:94:f7:33:3e:8a:66:98:ca: fe:9c:1c:01:89:3e:be:7d:7a:ed:b0:80:f2:24:6b: 3a:f4:57:d5:dc:d9:cf:4d:89:c8:ea:93:7f:7e:e1: 61:e0:50:c5:3e:c7:7c:4e:cf:e8:3a:56:93:7b:0f: 4a:e2:b0:35:31:e8:c7:b1:4a:80:66:3b:84:07:bb: 3f:7b:a4:e0:62:87:56:89:1e:e6:1e:13:2f:3c:8a: 6a:08:89:c4:f6:82:22:c4:a5:77:30:74:a3:0c:19: e0:15:d5:7e:35:c3:9e:75:37:8e:d3:60:e5:aa:11: 8b:9a:62:8d:1f:c9:a5:7e:97:c8:54:a8:bd:00:54: e5:c2:8e:9a:b4:18:44:b3:50:7e:59:3b:32:12:86: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:1F:6C:C2:73:8E:77:E1:53:67:42:73:E9:12:1F:83:EC:77:12 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e5:f6:9c:08:13:8a:a8:d2:41:ba:b9:a6:75:37:03:80:cc: 81:1d:a4:20:1b:c5:36:47:55:56:3b:84:97:53:c9:18:df:de: 9c:10:10:5b:b9:36:66:f6:ce:96:49:16:ef:16:f5:67:8d:0b: dd:e4:6d:5b:48:7b:28:64:3a:c5:58:83:e3:30:01:08:0b:c0: a9:66:5f:76:16:c7:ac:3e:f3:47:9f:50:1b:f1:41:24:1b:0b: a9:ed:fa:f6:43:93:75:bc:a6:bf:9b:2e:4b:13:58:88:9e:6a: a1:ce:50:22:bf:7d:6d:b3:8a:ce:7d:6a:59:56:a8:6d:5b:4d: 1d:e9:a4:ca:91:1d:f7:17:4b:fa:17:40:e9:ee:13:8e:84:35: 47:db:3d:73:2d:bf:26:5f:24:d9:9c:e7:7a:ac:15:fa:a0:db: 39:2a:c0:f0:bf:06:95:9e:2f:b4:fc:8f:73:84:dd:94:0c:08: bd:fa:69:3c:f4:30:85:82:27:97:a1:95:22:95:ff:55:2d:4f: 44:0d:92:2a:38:45:c4:a8:e6:dd:6a:f2:b6:5e:06:e8:64:67: 1f:8c:63:a9:de:e8:e7:40:9a:64:4d:33:18:d6:fd:5e:1c:e3: 00:09:cc:9a:1d:d6:5f:b2:9e:9a:7f:a9:b9:db:06:eb:36:94: 16:2f:f2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUwNTEzMDUwNDI0WhcNMjUwNTIwMDUwNDI0WjAYMRYwFAYD VQQDEw02ODIyZDJkOC1mNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyTUSLaSPB8PCbqSPuZ2Ol7+n5rhQ1eSnYIL/LL9y+2wyyjzcET+dAX9PuMF 0YsrH7CDHXfcKG8xZ0DvuB9sF82MnTmmQ85bJ1mfC9Aozgkcwo+EDEjiCDp7rMZa quxM0Abv9MgFwqykZW1h7OFTlPczPopmmMr+nBwBiT6+fXrtsIDyJGs69FfV3NnP TYnI6pN/fuFh4FDFPsd8Ts/oOlaTew9K4rA1MejHsUqAZjuEB7s/e6TgYodWiR7m HhMvPIpqCInE9oIixKV3MHSjDBngFdV+NcOedTeO02DlqhGLmmKNH8mlfpfIVKi9 AFTlwo6atBhEs1B+WTsyEoZAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoHH2zC c4534VNnQnPpEh+D7HcSMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC5facCBOKqNJBurmmdTcDgMyBHaQgG8U2R1VWO4SXU8kY396cEBBb uTZm9s6WSRbvFvVnjQvd5G1bSHsoZDrFWIPjMAEIC8CpZl92FsesPvNHn1Ab8UEk Gwup7fr2Q5N1vKa/my5LE1iInmqhzlAiv31ts4rOfWpZVqhtW00d6aTKkR33F0v6 F0Dp7hOOhDVH2z1zLb8mXyTZnOd6rBX6oNs5KsDwvwaVni+0/I9zhN2UDAi9+mk8 9DCFgieXoZUilf9VLU9EDZIqOEXEqObdavK2XgboZGcfjGOp3ujnQJpkTTMY1v1e HOMACcyaHdZfsp6af6m52wbrNpQWL/K3 -----END CERTIFICATE-----Generated at Wed May 14 20:42:32 2025 by rpki-client