$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: UU5XTkd8ZEgILToCcddQCaNft1fY0kZGAMBAjB5Pttc= Subject key identifier: 49:04:49:B0:28:0B:99:F0:84:7A:57:A1:69:8C:39:20:33:DC:40:07 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 016A Signing time: Thu 15 May 2025 03:16:50 +0000 Manifest this update: Thu 15 May 2025 03:16:49 +0000 Manifest next update: Thu 22 May 2025 03:16:49 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: pI1XsDqN/ei1SAsJw1bs/Nc4U8F6mKwYcV9nD+Xdxqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: May 15 03:16:49 2025 GMT Not After : May 22 03:16:49 2025 GMT Subject: CN=68255ca2-fe33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:ae:b9:35:73:db:f3:5f:70:a9:8b:1e:2e: 5e:0c:b0:3e:dc:b0:a5:10:1d:ec:f2:87:38:f1:aa: 5e:a1:d3:22:2b:d1:48:b6:b6:86:08:d6:f4:a3:8e: 97:07:b4:c2:3b:44:c5:ed:55:68:52:a6:c6:3e:d1: 86:8a:69:41:f5:0f:3c:ab:7e:c1:f8:71:ff:81:33: 3e:e7:21:f7:8e:14:34:34:01:c9:98:29:f7:e7:7f: b0:db:e6:c5:90:c4:13:31:19:7c:55:cf:c8:33:4a: 74:5e:cd:79:b0:93:42:da:0b:d5:3b:05:b4:e2:5f: 3c:5d:78:99:4a:8b:97:e3:bf:8d:fb:bb:06:35:6e: e6:d9:cd:90:6c:5e:ab:df:0f:32:bf:c4:18:c4:26: 4d:6a:76:d7:1f:b4:fa:0f:11:df:c1:c3:bc:fb:d0: 38:a9:c0:57:a8:f2:8d:51:56:af:ac:a3:7c:65:f7: 71:62:52:68:b5:b1:b7:ea:38:e3:21:2d:01:7e:40: e1:05:66:56:c3:90:e0:fc:5c:2f:72:84:0c:be:04: 27:52:0e:38:59:bb:57:01:d0:56:17:30:7b:eb:09: dd:d4:73:05:bf:23:14:e1:b9:34:50:ec:2e:4c:60: cd:87:dc:ef:2e:3f:4b:0f:1d:52:36:28:d9:ed:6d: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:04:49:B0:28:0B:99:F0:84:7A:57:A1:69:8C:39:20:33:DC:40:07 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:73:79:26:2c:3a:36:4d:5f:c1:9a:e5:34:e3:20:82:d5:8e: 29:6c:39:88:cc:ac:38:3c:c5:e7:4a:a2:1a:36:25:d2:e5:21: f0:19:c0:75:13:8a:60:4a:85:f8:78:4f:ac:b5:1a:62:ca:ea: 9b:91:fd:33:19:a7:b8:9c:67:97:85:5b:03:8c:55:24:75:4f: bf:89:47:56:65:96:2a:7e:9b:3f:7c:9b:c0:d8:34:d0:f8:2b: 9e:ec:52:6e:6d:7d:c7:65:e4:a5:0a:34:91:53:f7:18:33:1d: d4:9c:5e:a4:bb:2d:73:7b:fe:c2:ed:32:e2:54:b5:b7:1e:ae: b1:eb:91:23:51:42:94:ac:1b:19:8e:a6:52:ab:1c:9b:c6:f5: d6:e1:bd:59:6c:87:a9:93:08:36:0a:a4:22:d0:37:eb:63:3c: 4d:d5:36:33:8c:33:1b:9e:ca:6a:9d:e9:a8:e2:50:8c:bd:4e: e4:e6:86:33:4b:ac:87:c3:29:48:0d:38:7a:b4:cc:b5:91:c8: c7:16:3a:d6:bd:d7:c0:7d:2f:77:fd:22:ca:f9:eb:97:fd:42: c3:8d:e5:9f:83:65:9c:69:1a:fb:d3:5e:b6:f4:d5:2b:e0:40: 42:13:ab:a8:60:89:d1:80:a1:4e:47:28:79:fb:d9:ee:4c:5b: 94:67:e3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwNTE1MDMxNjQ5WhcNMjUwNTIyMDMxNjQ5WjAYMRYwFAYD VQQDEw02ODI1NWNhMi1mZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwOuuTVz2/NfcKmLHi5eDLA+3LClEB3s8oc48apeodMiK9FItraGCNb0o46X B7TCO0TF7VVoUqbGPtGGimlB9Q88q37B+HH/gTM+5yH3jhQ0NAHJmCn353+w2+bF kMQTMRl8Vc/IM0p0Xs15sJNC2gvVOwW04l88XXiZSouX47+N+7sGNW7m2c2QbF6r 3w8yv8QYxCZNanbXH7T6DxHfwcO8+9A4qcBXqPKNUVavrKN8ZfdxYlJotbG36jjj IS0BfkDhBWZWw5Dg/FwvcoQMvgQnUg44WbtXAdBWFzB76wnd1HMFvyMU4bk0UOwu TGDNh9zvLj9LDx1SNijZ7W1m7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkESbAo C5nwhHpXoWmMOSAz3EAHMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrc3kmLDo2TV/BmuU04yCC1Y4pbDmIzKw4PMXnSqIaNiXS5SHwGcB1 E4pgSoX4eE+stRpiyuqbkf0zGae4nGeXhVsDjFUkdU+/iUdWZZYqfps/fJvA2DTQ +Cue7FJubX3HZeSlCjSRU/cYMx3UnF6kuy1ze/7C7TLiVLW3Hq6x65EjUUKUrBsZ jqZSqxybxvXW4b1ZbIepkwg2CqQi0DfrYzxN1TYzjDMbnspqnemo4lCMvU7k5oYz S6yHwylIDTh6tMy1kcjHFjrWvdfAfS93/SLK+euX/ULDjeWfg2WcaRr701629NUr 4EBCE6uoYInRgKFORyh5+9nuTFuUZ+M6 -----END CERTIFICATE-----Generated at Thu May 15 19:08:10 2025 by rpki-client