$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: nzinklls5mDRr7CeMEN83zTu2ZFoh9V4i6wA9lpS41k= Subject key identifier: E1:00:51:38:16:1F:F7:27:6B:4C:79:28:74:76:09:AA:2A:42:18:4C Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 030A Signing time: Wed 07 May 2025 01:04:46 +0000 Manifest this update: Wed 07 May 2025 01:04:45 +0000 Manifest next update: Wed 14 May 2025 01:04:45 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: OnKT4zFtcMJ1bPSeRUm3pXKzEpHFzGGNFSbj+81x2IY=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: MW8b0lzbn7akooUbZ8tV+oRNYmXktBHymwJPvbPr0T4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: pmgvt39f/aMkunvyVMO6rfLmljyqEtakdw2Wz0MGd3o=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: Vk4lMkqK5ng6B+iZp/Sl6mPlRDRoZ3QpBy8plRdehn4=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: RV0bq4XHGKUuOS8T3WS7G4aUlSWl2to/4furDRifxYQ=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: 6/3DevyJRKnv1xx6SHWcr3LVBgvTH0u4H55ECTrHATk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: May 7 01:04:45 2025 GMT Not After : May 14 01:04:45 2025 GMT Subject: CN=681ab1ae-a3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:97:18:1d:34:d1:f2:97:b0:57:e6:cd:4d: b7:bf:52:1c:65:8d:90:46:13:07:0e:2c:2b:b6:54: c3:15:39:25:60:a9:a3:d0:c2:65:73:6f:c1:d6:0c: 41:d3:88:52:74:e3:9c:9a:8a:09:16:91:68:4b:85: d7:78:c0:8a:f0:fa:5b:3e:d5:7a:71:0b:63:5e:1b: e3:6a:ca:45:cc:9b:83:b7:64:ff:31:66:a5:c3:67: 6d:77:af:8a:85:29:de:ac:63:42:c4:c1:0d:9f:0c: c7:c3:54:35:98:f4:eb:b6:09:ab:3a:ea:a3:b8:bd: 6e:16:a2:ab:fe:45:9b:31:7f:87:09:33:e0:aa:be: 59:9c:79:ee:2e:99:94:c3:40:d2:57:9c:4c:ca:ee: 09:61:fa:21:fb:4e:cf:a2:b2:03:20:3f:6d:68:88: 48:9b:25:53:cc:fd:ab:fc:6d:a4:e7:9d:db:c8:de: ba:11:90:a9:43:d1:11:3c:fe:c7:13:a7:26:56:63: 18:61:50:49:13:8d:eb:77:9f:ac:03:6e:cb:5e:6b: 8f:bd:24:7b:df:66:ac:97:92:0b:4d:fa:79:94:35: e4:02:0a:ae:ad:14:7b:f5:ee:c3:00:52:09:d5:f1: 4f:83:f8:fa:7e:fa:72:47:9a:fb:c5:9a:b2:5c:15: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:51:38:16:1F:F7:27:6B:4C:79:28:74:76:09:AA:2A:42:18:4C X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:f6:45:97:4f:39:62:d6:96:0a:e4:80:be:cd:54:8d:09: a2:05:f0:14:2c:79:cf:87:70:cc:dc:1c:25:7d:82:5e:7e:75: 1d:1c:1e:29:89:4d:69:d0:0f:f6:08:da:14:79:dc:7f:c2:8a: 34:67:94:7c:0d:e6:58:c1:04:e7:1d:bf:c0:74:96:8e:3e:2e: 67:5a:f1:51:44:24:2e:81:b8:1e:e7:ab:7f:55:2b:32:40:3d: a5:2c:6f:e8:cb:96:b9:37:1d:69:dc:4b:ea:10:ad:0a:3e:61: b4:39:ed:63:8d:a8:26:06:9c:81:7b:4c:60:f4:3d:e4:89:5f: b1:be:5e:2d:25:7d:46:3f:93:8a:28:c4:59:37:1d:5e:49:66: 4d:69:aa:fa:0b:c7:08:fb:d7:b6:f7:13:5d:45:bb:72:f6:cd: 60:d9:c6:8f:65:b6:88:21:b3:a9:20:0b:19:87:7f:d5:76:2c: e0:12:b1:fb:8a:0e:52:94:ca:34:66:05:10:f0:8c:19:08:59: 53:18:b3:90:c1:46:a1:78:5d:41:74:67:a4:07:cb:c6:f5:a8: 9f:59:4e:1f:7b:ed:8e:5f:0d:54:e1:f7:b2:b0:ae:5a:3e:65: 9e:e0:c7:13:58:24:73:83:c2:a6:83:bc:05:b7:4f:3e:8d:d1: 61:0d:be:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUwNTA3MDEwNDQ1WhcNMjUwNTE0MDEwNDQ1WjAYMRYwFAYD VQQDEw02ODFhYjFhZS1hM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNaXGB000fKXsFfmzU23v1IcZY2QRhMHDiwrtlTDFTklYKmj0MJlc2/B1gxB 04hSdOOcmooJFpFoS4XXeMCK8PpbPtV6cQtjXhvjaspFzJuDt2T/MWalw2dtd6+K hSnerGNCxMENnwzHw1Q1mPTrtgmrOuqjuL1uFqKr/kWbMX+HCTPgqr5ZnHnuLpmU w0DSV5xMyu4JYfoh+07PorIDID9taIhImyVTzP2r/G2k553byN66EZCpQ9ERPP7H E6cmVmMYYVBJE43rd5+sA27LXmuPvSR732asl5ILTfp5lDXkAgqurRR79e7DAFIJ 1fFPg/j6fvpyR5r7xZqyXBWltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEAUTgW H/cna0x5KHR2CaoqQhhMMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMxPZFl085YtaWCuSAvs1UjQmiBfAULHnPh3DM3BwlfYJefnUdHB4p iU1p0A/2CNoUedx/woo0Z5R8DeZYwQTnHb/AdJaOPi5nWvFRRCQugbge56t/VSsy QD2lLG/oy5a5Nx1p3EvqEK0KPmG0Oe1jjagmBpyBe0xg9D3kiV+xvl4tJX1GP5OK KMRZNx1eSWZNaar6C8cI+9e29xNdRbty9s1g2caPZbaIIbOpIAsZh3/VdizgErH7 ig5SlMo0ZgUQ8IwZCFlTGLOQwUaheF1BdGekB8vG9aifWU4fe+2OXw1U4feysK5a PmWe4McTWCRzg8Kmg7wFt08+jdFhDb7P -----END CERTIFICATE-----Generated at Wed May 7 11:23:57 2025 by rpki-client