$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft File: LpwRxtKUXVL5XyTDndH0GHo0F-U.mft (raw, json) Hash identifier: S5jfTInvQYGPpDQ9G9jMtnrJ0l2J5yEU17kBDY7ksIQ= Subject key identifier: 28:F1:9C:75:9E:7B:83:1B:7E:73:6C:D3:B4:92:C9:27:65:D7:97:23 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft Manifest number: 0198 Signing time: Fri 09 May 2025 02:34:58 +0000 Manifest this update: Fri 09 May 2025 02:34:58 +0000 Manifest next update: Fri 16 May 2025 02:34:58 +0000 Files and hashes: 1: LpwRxtKUXVL5XyTDndH0GHo0F-U.crl (hash: NYzulRFvwefi18NoUgmhLKD3c9LVuAZyeVvZjpeOFgE=) 2: AA12544E5AAF11EF86AAA442C4F9AE02.roa (hash: 8ltsRSMx/O4P5xBIXkQL3DQXOAFh4xAYUfE8ZE3IXvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: May 9 02:34:58 2025 GMT Not After : May 16 02:34:58 2025 GMT Subject: CN=681d69d2-8ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:24:50:24:b6:f5:90:15:84:5f:15:e4:3d: 46:49:91:e5:e6:b1:b8:76:06:dd:b8:fa:42:03:13: 68:a1:4a:a5:ed:ff:bb:f0:db:4f:0b:4b:71:76:44: 81:f9:3f:09:a7:a0:b2:76:b5:03:0a:b7:23:60:49: 0e:0f:fa:ee:e5:94:f5:e1:92:dc:8c:ea:86:ec:13: cd:25:37:35:0a:63:b2:31:48:7d:18:e9:cd:58:54: db:3d:6b:63:71:a8:af:fe:fa:1e:bf:38:2a:f6:9d: ec:e6:53:28:34:e1:0f:46:90:be:63:db:85:b1:71: 38:61:f9:ae:ee:cd:d7:a8:62:cf:24:d3:42:0a:14: 3a:94:98:18:c4:b2:9e:a2:f8:c6:bc:29:da:32:c3: 89:4e:e2:90:e3:ff:54:ab:35:6f:d9:dc:03:d1:51: 07:9f:5b:ba:d4:cd:2f:5b:64:98:58:76:ac:13:1b: a6:f6:c4:52:f2:53:81:e0:f0:9c:ee:ea:ac:0b:01: 84:e8:ab:72:e7:f4:26:33:05:bb:d2:97:12:de:25: 21:f9:2a:ad:a1:08:9f:16:f2:a4:b8:13:a6:11:f6: f1:09:d7:93:b9:99:72:c8:89:fb:7c:07:1d:d8:3c: 81:c7:3f:27:98:c9:1b:dd:66:da:e8:bb:72:59:8f: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F1:9C:75:9E:7B:83:1B:7E:73:6C:D3:B4:92:C9:27:65:D7:97:23 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:74:41:33:e6:9b:ef:3e:42:df:43:d2:d2:d5:0a:6d:db:eb: 06:a3:50:64:6e:3e:dd:e4:a9:10:cc:09:58:e2:7c:a9:74:ce: 5d:f8:62:fd:7a:07:64:d0:5a:4c:db:e2:d6:1c:42:c5:22:8d: d3:97:28:9e:74:bc:23:3f:bf:ba:0d:09:74:1e:4b:71:ce:98: ba:43:a5:21:30:c9:55:59:a9:4b:70:7d:7a:a7:ac:c7:e1:64: 7d:80:ab:42:d7:75:e1:b0:7f:92:15:05:e1:c2:4c:ed:2c:ff: 7f:8a:21:23:8d:36:97:ef:3d:9a:3a:7a:f1:db:c9:05:b3:57: fc:21:e8:d4:41:18:19:88:a1:79:83:99:6d:01:38:36:b3:83: 94:2c:ac:bf:02:34:9c:67:23:81:19:88:e2:68:a3:81:2b:49: d0:61:f5:df:a0:92:7e:26:f7:71:15:42:28:b8:d1:1d:86:43: bf:b7:e4:07:0b:17:dd:61:ac:06:e3:6a:47:c9:8a:9f:8b:0b: 63:05:0d:ab:88:da:95:f9:82:7b:da:b8:41:c8:d3:4d:05:e1: f0:e7:a5:71:a4:73:7e:90:af:af:e7:5b:68:2f:ec:a3:22:11: bd:e7:ed:15:d0:04:77:ab:a9:7a:63:a8:a8:94:98:44:c1:34: a0:ec:c6:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUwNTA5MDIzNDU4WhcNMjUwNTE2MDIzNDU4WjAYMRYwFAYD VQQDEw02ODFkNjlkMi04ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81QkUCS29ZAVhF8V5D1GSZHl5rG4dgbduPpCAxNooUql7f+78NtPC0txdkSB +T8Jp6CydrUDCrcjYEkOD/ru5ZT14ZLcjOqG7BPNJTc1CmOyMUh9GOnNWFTbPWtj caiv/voevzgq9p3s5lMoNOEPRpC+Y9uFsXE4Yfmu7s3XqGLPJNNCChQ6lJgYxLKe ovjGvCnaMsOJTuKQ4/9UqzVv2dwD0VEHn1u61M0vW2SYWHasExum9sRS8lOB4PCc 7uqsCwGE6Kty5/QmMwW70pcS3iUh+SqtoQifFvKkuBOmEfbxCdeTuZlyyIn7fAcd 2DyBxz8nmMkb3Wba6LtyWY8Y4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjxnHWe e4MbfnNs07SSySdl15cjMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjMxRC9FN0U3RUM1MEJENjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhW TDVYeVREbmRIMEdIbzBGLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIdEEz5pvvPkLfQ9LS1Qpt2+sGo1Bkbj7d5KkQzAlY4nypdM5d+GL9 egdk0FpM2+LWHELFIo3TlyiedLwjP7+6DQl0Hktxzpi6Q6UhMMlVWalLcH16p6zH 4WR9gKtC13XhsH+SFQXhwkztLP9/iiEjjTaX7z2aOnrx28kFs1f8IejUQRgZiKF5 g5ltATg2s4OULKy/AjScZyOBGYjiaKOBK0nQYfXfoJJ+JvdxFUIouNEdhkO/t+QH CxfdYawG42pHyYqfiwtjBQ2riNqV+YJ72rhByNNNBeHw56VxpHN+kK+v51toL+yj IhG95+0V0AR3q6l6Y6iolJhEwTSg7MYR -----END CERTIFICATE-----Generated at Fri May 9 10:27:03 2025 by rpki-client