$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: ezSZJA6IaxrXGD7x8aeC1mQtVlkNef76hEqtIP/gUGM= Subject key identifier: 8B:2F:F8:22:17:B3:E8:8E:D4:B3:2C:F7:92:D9:A7:BC:58:E9:44:99 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0516 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 050E Signing time: Sat 10 May 2025 23:14:48 +0000 Manifest this update: Sat 10 May 2025 23:14:48 +0000 Manifest next update: Sat 17 May 2025 23:14:48 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: qeW/VZC9AaUzR+yXwH006yx6TIxKezUWFnbAgnhl4bE=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: May 10 23:14:48 2025 GMT Not After : May 17 23:14:48 2025 GMT Subject: CN=681fdde8-9aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:19:3b:2f:22:53:8b:09:2c:e9:e3:98:d1: ad:ae:18:3c:d3:9d:b7:86:f9:91:49:6b:6a:10:2a: 2d:ae:68:ff:55:5a:fe:52:47:2f:2f:f2:2c:dc:51: 0a:5d:5f:21:59:cf:8d:83:92:c8:9c:37:d5:69:0c: a2:ff:47:88:99:fe:11:6d:a3:06:48:e4:8a:dd:18: 94:39:07:f2:88:5d:51:c1:6a:3a:32:17:02:e3:1f: fe:5b:15:21:9b:1d:04:a9:66:55:f6:75:a7:fd:3f: 78:54:8b:7d:dd:04:e1:05:33:10:96:14:cc:73:e6: 3a:d9:32:d1:47:6e:a6:ae:33:56:fe:2b:ae:a7:b1: 2a:e5:b8:fd:1b:68:2b:b1:bb:b3:8c:4d:76:9d:a0: 90:7f:21:9e:cf:ef:48:33:93:47:de:81:dc:cc:d2: d3:c7:d6:66:06:e1:da:93:82:a0:56:de:2e:28:ed: 06:55:60:6e:3d:27:02:e2:ed:58:10:7d:b0:39:ad: 80:34:25:94:ef:c8:d8:f4:e8:6a:0c:0d:82:fb:0e: c5:56:08:54:20:07:c6:3c:97:15:16:bb:05:c8:f0: e6:07:4a:e6:a3:6a:6e:0a:a3:8a:bb:cd:ab:77:33: a0:cc:68:d0:02:0e:bc:c2:2d:5d:b5:79:bb:9d:03: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2F:F8:22:17:B3:E8:8E:D4:B3:2C:F7:92:D9:A7:BC:58:E9:44:99 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d3:0f:7e:23:47:35:a6:53:c5:ff:8a:0a:12:a4:85:28:75: fa:14:d5:4c:de:a1:87:81:b4:b7:67:53:b0:a9:59:11:b2:b9: 3c:ac:98:14:38:42:50:3f:a0:49:3c:6b:5b:e7:77:b9:04:62: 28:cb:fb:2d:bb:a7:4a:36:c7:a3:21:10:ea:1e:c9:40:d3:dd: 80:0c:d0:02:9e:fa:81:04:07:3a:fb:bc:4e:aa:dc:f5:62:be: 74:1c:61:01:69:fc:de:68:72:57:0c:df:d2:21:15:25:92:88: b7:23:55:4f:f4:c3:0e:d7:e5:96:b6:18:c0:b4:b6:9c:91:e8: 65:b4:db:45:90:5f:76:b2:a1:fe:a5:82:c4:f3:9f:08:1b:48: 23:48:29:2b:08:ba:31:fb:8e:5e:6d:a5:58:9f:57:1a:35:6f: 19:99:4f:56:71:35:ed:ad:da:20:e3:71:ae:fd:98:9c:61:27: a3:5b:99:b3:58:9d:47:c1:46:e3:a8:01:14:ef:b8:52:30:71: a8:86:fa:9a:77:ba:94:48:b5:df:9f:f8:7b:ba:51:e9:78:21: ba:c5:10:0c:05:ec:40:fb:b9:8d:1c:c0:65:72:57:7f:b8:78: be:53:a8:b2:db:e5:57:55:f4:2a:a1:cb:c4:1d:7d:3e:66:f5: 21:04:9a:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUwNTEwMjMxNDQ4WhcNMjUwNTE3MjMxNDQ4WjAYMRYwFAYD VQQDEw02ODFmZGRlOC05YWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw68ZOy8iU4sJLOnjmNGtrhg80523hvmRSWtqECotrmj/VVr+UkcvL/Is3FEK XV8hWc+Ng5LInDfVaQyi/0eImf4RbaMGSOSK3RiUOQfyiF1RwWo6MhcC4x/+WxUh mx0EqWZV9nWn/T94VIt93QThBTMQlhTMc+Y62TLRR26mrjNW/iuup7Eq5bj9G2gr sbuzjE12naCQfyGez+9IM5NH3oHczNLTx9ZmBuHak4KgVt4uKO0GVWBuPScC4u1Y EH2wOa2ANCWU78jY9OhqDA2C+w7FVghUIAfGPJcVFrsFyPDmB0rmo2puCqOKu82r dzOgzGjQAg68wi1dtXm7nQM65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsv+CIX s+iO1LMs95LZp7xY6USZMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB70w9+I0c1plPF/4oKEqSFKHX6FNVM3qGHgbS3Z1OwqVkRsrk8rJgU OEJQP6BJPGtb53e5BGIoy/stu6dKNsejIRDqHslA092ADNACnvqBBAc6+7xOqtz1 Yr50HGEBafzeaHJXDN/SIRUlkoi3I1VP9MMO1+WWthjAtLackehltNtFkF92sqH+ pYLE858IG0gjSCkrCLox+45ebaVYn1caNW8ZmU9WcTXtrdog43Gu/ZicYSejW5mz WJ1HwUbjqAEU77hSMHGohvqad7qUSLXfn/h7ulHpeCG6xRAMBexA+7mNHMBlcld/ uHi+U6iy2+VXVfQqocvEHX0+ZvUhBJqe -----END CERTIFICATE-----Generated at Mon May 12 12:43:22 2025 by rpki-client