$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: XE8OGZ+LVGHzYuWxKnbLRCngC5JgIADTEFMySs8yIHs= Subject key identifier: 65:B3:5C:1B:2D:D1:8C:A6:66:57:C8:D5:A4:AF:90:D0:72:1F:49:95 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 018B Signing time: Tue 13 May 2025 02:50:06 +0000 Manifest this update: Tue 13 May 2025 02:50:05 +0000 Manifest next update: Tue 20 May 2025 02:50:05 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: 3w1ly1sYiYXnmDbMQeqxPaJmswTWfJ7+nlzqZCOcqKk=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: 8k36pvGImmVckUyl9Af0a0wGsrxQEwJI0duKzhrmqDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: May 13 02:50:05 2025 GMT Not After : May 20 02:50:05 2025 GMT Subject: CN=6822b35d-752f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:96:5e:28:de:dc:b3:e2:60:a9:b6:14:64: d5:1d:d3:fa:58:2a:bb:32:62:05:a1:5d:1f:05:1c: 50:31:f2:a0:4b:ab:cd:f7:6b:5c:2e:1d:a9:a4:a7: c2:4e:b3:a6:d7:a6:98:b8:1a:79:72:0b:c9:c7:dd: b1:c8:1d:63:6e:2f:0f:79:0c:fb:b6:60:a8:62:e5: 0f:d4:d2:3f:39:2d:b9:47:4d:e2:8e:de:cc:e4:18: 17:60:68:f8:01:ee:3b:9d:32:c8:fe:eb:a4:16:37: fb:f4:48:ff:b5:d8:be:03:46:b7:92:4a:bd:1b:f0: 23:72:60:79:8d:ed:e2:8b:4e:46:2d:32:e2:6a:29: fa:54:e2:87:fc:6f:55:86:4e:c0:40:87:43:ad:28: 33:eb:a0:cd:c7:3b:67:39:be:b2:00:ec:a3:56:0e: cc:38:a6:9d:2b:45:a5:4d:49:f0:77:17:5b:4c:88: 7e:66:6c:56:cc:95:16:33:41:4e:7b:fb:59:1f:2e: be:8d:3a:40:c9:e5:7f:f6:aa:42:74:e1:11:a3:b9: 5e:c0:5d:3e:e2:bb:0b:af:72:2c:95:42:42:c2:27: a4:6d:ed:b1:07:3d:28:a5:ae:41:1f:bf:94:a2:0a: b0:8d:d9:ea:69:4d:76:a1:a8:9f:75:72:44:53:b1: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:5C:1B:2D:D1:8C:A6:66:57:C8:D5:A4:AF:90:D0:72:1F:49:95 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c5:54:c7:0c:61:20:b7:cb:78:7a:0e:98:59:48:2f:ef:fd: b8:e0:7d:4e:1c:6e:a5:d7:10:5c:6e:01:e1:d1:b4:90:a8:85: 6d:cd:59:70:b0:df:83:a4:57:16:a9:15:71:77:74:74:fb:d0: 27:54:a2:42:9f:bb:db:34:a4:f4:cd:f8:4c:e3:ad:38:0d:fa: e3:88:05:dd:00:ce:ed:c4:4a:57:68:ee:b2:9e:93:43:68:35: c8:65:b5:1f:2e:d6:aa:27:34:50:6f:a3:cc:e2:fb:99:38:5d: a7:51:9a:37:c5:2f:d5:b5:d5:6f:71:19:8e:36:32:c1:31:7f: fd:f9:39:80:ed:9b:80:02:c6:ff:70:79:0d:d0:81:be:15:20: d4:07:08:ae:45:01:72:2b:27:1f:d2:fa:10:cc:2b:98:98:4c: 16:57:36:3f:cd:15:63:d7:2a:bb:d2:d6:8b:c3:63:71:fb:d8: a6:6d:47:3b:16:dd:56:2c:98:5c:1d:98:53:76:a3:df:e9:f1: cb:f9:94:95:3c:dc:95:e3:64:d4:84:ca:67:8f:67:28:51:d9: 48:88:c1:e7:e3:bd:e5:ed:a4:9f:84:a0:26:55:1c:2c:f7:52: f7:8b:50:2a:1f:54:bb:b4:eb:c6:da:e8:6b:8a:1b:e8:d8:47: 67:19:5c:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjUwNTEzMDI1MDA1WhcNMjUwNTIwMDI1MDA1WjAYMRYwFAYD VQQDEw02ODIyYjM1ZC03NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxweWXije3LPiYKm2FGTVHdP6WCq7MmIFoV0fBRxQMfKgS6vN92tcLh2ppKfC TrOm16aYuBp5cgvJx92xyB1jbi8PeQz7tmCoYuUP1NI/OS25R03ijt7M5BgXYGj4 Ae47nTLI/uukFjf79Ej/tdi+A0a3kkq9G/AjcmB5je3ii05GLTLiain6VOKH/G9V hk7AQIdDrSgz66DNxztnOb6yAOyjVg7MOKadK0WlTUnwdxdbTIh+ZmxWzJUWM0FO e/tZHy6+jTpAyeV/9qpCdOERo7lewF0+4rsLr3IslUJCwiekbe2xBz0opa5BH7+U ogqwjdnqaU12oaifdXJEU7HjaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWzXBst 0YymZlfI1aSvkNByH0mVMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPxVTHDGEgt8t4eg6YWUgv7/244H1OHG6l1xBcbgHh0bSQqIVtzVlw sN+DpFcWqRVxd3R0+9AnVKJCn7vbNKT0zfhM4604DfrjiAXdAM7txEpXaO6ynpND aDXIZbUfLtaqJzRQb6PM4vuZOF2nUZo3xS/VtdVvcRmONjLBMX/9+TmA7ZuAAsb/ cHkN0IG+FSDUBwiuRQFyKycf0voQzCuYmEwWVzY/zRVj1yq70taLw2Nx+9imbUc7 Ft1WLJhcHZhTdqPf6fHL+ZSVPNyV42TUhMpnj2coUdlIiMHn473l7aSfhKAmVRws 91L3i1AqH1S7tOvG2uhrihvo2EdnGVxa -----END CERTIFICATE-----Generated at Wed May 14 08:32:59 2025 by rpki-client