$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: gyKcrw47YxuyQ4DN9nkqIedmAbC5PdEUwQPAk+U/VW0= Subject key identifier: 8C:E6:04:F6:F8:17:EA:FF:14:A8:73:B8:9B:91:A6:15:A7:0F:FB:06 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 0401 Signing time: Sun 11 May 2025 00:02:23 +0000 Manifest this update: Sun 11 May 2025 00:02:22 +0000 Manifest next update: Sun 18 May 2025 00:02:22 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: zMprO3wMxxbav3EAlchcEZ0tdQiqnwwLtsvvwuCV1wM=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: May 11 00:02:22 2025 GMT Not After : May 18 00:02:22 2025 GMT Subject: CN=681fe90f-5a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:b5:06:25:b5:2f:e7:ea:f4:25:80:6a:82: d0:9b:0b:ce:0a:ea:72:8f:27:f9:46:4b:e5:b7:af: b3:a4:e6:36:8b:93:ed:57:76:7c:4b:52:24:b5:f2: b2:30:e6:36:08:68:1e:4c:c4:27:2c:4a:87:17:4c: ce:82:d4:f1:29:b7:07:dd:97:2c:9a:50:45:91:7d: df:6c:18:fb:87:84:ea:9e:c0:43:aa:ac:39:97:5d: dc:64:a7:33:fe:c1:74:60:c2:53:d0:a5:29:fb:5d: fc:f7:b5:de:0d:90:99:ca:00:21:a8:1d:93:22:1a: 2e:34:ab:01:77:92:b7:3f:54:b4:da:55:e1:cd:b7: 8a:82:fd:f7:ee:e3:ce:21:31:91:8f:e9:52:91:68: da:ae:8a:66:62:22:fd:7a:20:e2:79:bd:92:43:cc: 45:fb:3d:39:51:2f:15:6d:67:26:ec:bb:40:cf:3a: 34:90:80:70:a2:00:9d:1f:7f:66:2c:df:8c:ad:de: 07:a1:e6:33:14:9d:51:5c:02:d2:bb:ed:fe:2c:81: a9:5f:0f:e4:62:63:7b:e2:5d:d4:b9:55:0a:9c:e3: ae:d4:0b:81:02:07:e6:32:e9:f4:8f:b8:ba:db:e5: ab:f8:1b:33:86:cd:ab:7f:5c:70:5e:09:54:dc:38: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:04:F6:F8:17:EA:FF:14:A8:73:B8:9B:91:A6:15:A7:0F:FB:06 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a2:a4:c5:12:e5:63:83:a0:c7:f4:1a:da:ce:da:dd:a7:3c: ed:76:c3:3d:28:be:82:c7:83:54:ad:9d:bb:25:0e:05:c4:7c: 8f:2a:0b:eb:8b:1d:1c:84:8f:a1:ac:53:9c:6e:03:a3:46:01: 12:b7:90:69:7f:68:bc:8f:d8:13:59:7d:9c:ed:c8:36:bf:c1: f2:61:74:e5:6a:21:c5:75:d5:74:13:48:db:fa:88:36:e9:58: e4:17:3d:7c:5b:df:df:67:60:db:12:53:07:d8:62:4c:7b:f3: d3:06:8e:8c:74:77:da:fb:90:42:56:85:9a:4b:71:27:b6:81: 28:a9:04:0f:df:9b:34:d8:0c:79:b9:86:e6:e7:f6:38:60:92: ff:86:21:40:7a:a4:a4:0f:f2:77:d5:c6:78:7a:51:bc:a6:62: 33:b5:6b:38:4b:82:37:f9:49:5a:99:ee:62:6a:31:ae:dd:02: fa:90:f5:19:87:ec:4f:79:d0:dd:1c:45:28:68:7c:95:c9:0c: d4:87:cf:7b:0a:74:d0:47:d0:98:26:41:33:35:d3:c1:eb:da: 53:41:b4:42:07:42:0a:67:f6:ad:89:a3:bb:aa:16:20:bc:4f: 3a:62:61:41:77:76:28:ed:98:9b:d2:21:de:d9:57:57:9c:10: cd:8b:98:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwNTExMDAwMjIyWhcNMjUwNTE4MDAwMjIyWjAYMRYwFAYD VQQDEw02ODFmZTkwZi01YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Lm1BiW1L+fq9CWAaoLQmwvOCupyjyf5Rkvlt6+zpOY2i5PtV3Z8S1IktfKy MOY2CGgeTMQnLEqHF0zOgtTxKbcH3ZcsmlBFkX3fbBj7h4TqnsBDqqw5l13cZKcz /sF0YMJT0KUp+13897XeDZCZygAhqB2TIhouNKsBd5K3P1S02lXhzbeKgv337uPO ITGRj+lSkWjaropmYiL9eiDieb2SQ8xF+z05US8VbWcm7LtAzzo0kIBwogCdH39m LN+Mrd4HoeYzFJ1RXALSu+3+LIGpXw/kYmN74l3UuVUKnOOu1AuBAgfmMun0j7i6 2+Wr+Bszhs2rf1xwXglU3Dj5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzmBPb4 F+r/FKhzuJuRphWnD/sGMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAooqTFEuVjg6DH9BraztrdpzztdsM9KL6Cx4NUrZ27JQ4FxHyPKgvr ix0chI+hrFOcbgOjRgESt5Bpf2i8j9gTWX2c7cg2v8HyYXTlaiHFddV0E0jb+og2 6VjkFz18W9/fZ2DbElMH2GJMe/PTBo6MdHfa+5BCVoWaS3EntoEoqQQP35s02Ax5 uYbm5/Y4YJL/hiFAeqSkD/J31cZ4elG8pmIztWs4S4I3+Ulame5iajGu3QL6kPUZ h+xPedDdHEUoaHyVyQzUh897CnTQR9CYJkEzNdPB69pTQbRCB0IKZ/atiaO7qhYg vE86YmFBd3Yo7Zib0iHe2VdXnBDNi5h8 -----END CERTIFICATE-----Generated at Mon May 12 12:45:35 2025 by rpki-client