$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json) Hash identifier: XaTVRrCM1f9AR1zMJASpAT5QOK//3BaKSARGRLqmnas= Subject key identifier: 71:81:04:12:4E:E8:0D:ED:E1:DF:2A:EC:5B:96:0E:3C:B5:72:F7:EB Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft Manifest number: 81 Signing time: Thu 15 May 2025 05:57:12 +0000 Manifest this update: Thu 15 May 2025 05:57:12 +0000 Manifest next update: Thu 22 May 2025 05:57:12 +0000 Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: oATKO7gIBfk/TPm9y8lNzFWE0xoYlQJaU72w+7b9n4w=) 2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: ASyOdjxX3bTv6LEG6rhAb+4hOVrCfvwO9cJPKa93j28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: May 15 05:57:12 2025 GMT Not After : May 22 05:57:12 2025 GMT Subject: CN=68258238-193b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:fb:f4:14:3e:bb:7c:5a:88:d3:0c:0c:96: 36:73:fd:85:fd:f4:99:d0:50:8b:69:30:69:1e:a9: 5a:a2:27:c4:6a:0d:c3:f1:01:8a:20:68:14:54:c1: ab:0d:6d:e2:22:65:28:62:b7:77:c4:28:a9:92:da: 32:d3:1a:11:67:36:8a:ad:68:29:d8:92:0c:41:02: 04:12:46:97:a2:af:cd:e3:48:bc:63:94:07:9f:e8: ca:89:10:35:2a:0c:da:68:0d:2f:5b:e9:58:d8:b4: 31:98:ed:08:58:a9:32:d3:14:33:61:e4:f3:eb:2e: 03:f5:4e:d3:10:b3:c1:34:e4:93:79:32:51:91:58: 05:36:75:fd:84:f4:ea:41:56:ad:e7:4a:94:9a:40: 7e:2f:98:b4:28:c8:26:7c:f9:7c:2d:25:9b:d0:f5: d0:13:fb:2f:77:65:27:c3:fe:96:ec:d2:32:f5:e8: 61:8d:a9:08:32:a7:d3:9b:60:b6:ba:47:57:dc:57: 7c:98:6c:6d:fc:d0:a8:28:a4:ba:9e:68:77:31:fc: 31:c0:1f:62:d4:e8:88:ee:00:40:81:97:3f:53:34: 94:2d:be:a1:ee:36:50:96:a6:0f:9e:bb:69:2d:d9: 44:92:9b:e3:c1:8b:8e:d1:89:35:fd:5b:2f:1c:45: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:81:04:12:4E:E8:0D:ED:E1:DF:2A:EC:5B:96:0E:3C:B5:72:F7:EB X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:22:be:73:c0:a7:7f:3d:0b:58:0c:be:e6:3d:74:0b:af:af: 19:5f:3d:6b:39:0e:1b:d8:73:e2:2a:1c:30:08:00:1e:60:e1: 39:2c:ef:93:0c:57:db:04:ea:ad:1a:86:3f:bc:62:91:c4:51: 2d:25:71:d6:03:da:30:96:67:b4:ab:5a:3b:96:4f:e4:c1:56: ae:41:09:74:28:3c:6e:35:72:7d:29:75:67:25:f4:d2:5c:7d: 8f:7f:05:b6:b0:db:ef:14:4d:ad:79:ed:2a:17:ae:46:7e:2c: df:20:4d:08:a0:d7:06:bc:46:6b:d5:b6:58:c4:ab:2c:10:1c: 35:5a:70:cc:0e:98:14:4a:90:f4:05:04:39:56:06:52:94:f0: 37:26:d3:e9:db:5f:f7:77:b2:20:40:a5:c5:28:1a:ff:dc:11: c0:8e:8d:34:73:b1:27:f8:54:98:a8:65:ce:6c:65:9b:7c:d2: 92:d4:0a:a8:86:8d:c1:a6:88:3d:d8:81:29:9e:82:ca:03:19: f2:70:5c:18:22:52:ba:ae:3a:67:02:71:78:c4:c5:97:ca:52: 4f:ce:ed:fc:da:78:cb:99:46:fc:9b:e8:00:3b:15:79:46:45: 12:95:bb:e4:f3:21:b0:72:20:ea:0e:e9:9b:36:01:df:a7:8e: eb:d4:01:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy OEM3OTRCMDEwHhcNMjUwNTE1MDU1NzEyWhcNMjUwNTIyMDU1NzEyWjAYMRYwFAYD VQQDEw02ODI1ODIzOC0xOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j379BQ+u3xaiNMMDJY2c/2F/fSZ0FCLaTBpHqlaoifEag3D8QGKIGgUVMGr DW3iImUoYrd3xCipktoy0xoRZzaKrWgp2JIMQQIEEkaXoq/N40i8Y5QHn+jKiRA1 KgzaaA0vW+lY2LQxmO0IWKky0xQzYeTz6y4D9U7TELPBNOSTeTJRkVgFNnX9hPTq QVat50qUmkB+L5i0KMgmfPl8LSWb0PXQE/svd2Unw/6W7NIy9ehhjakIMqfTm2C2 ukdX3Fd8mGxt/NCoKKS6nmh3MfwxwB9i1OiI7gBAgZc/UzSULb6h7jZQlqYPnrtp LdlEkpvjwYuO0Yk1/VsvHEVMBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGBBBJO 6A3t4d8q7FuWDjy1cvfrMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS9GNzIwOUMzMjcwQUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3Bs VFlDSlJkdURXcDRveDVTd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArIr5zwKd/PQtYDL7mPXQLr68ZXz1rOQ4b2HPiKhwwCAAeYOE5LO+T DFfbBOqtGoY/vGKRxFEtJXHWA9owlme0q1o7lk/kwVauQQl0KDxuNXJ9KXVnJfTS XH2PfwW2sNvvFE2tee0qF65GfizfIE0IoNcGvEZr1bZYxKssEBw1WnDMDpgUSpD0 BQQ5VgZSlPA3JtPp21/3d7IgQKXFKBr/3BHAjo00c7En+FSYqGXObGWbfNKS1Aqo ho3Bpog92IEpnoLKAxnycFwYIlK6rjpnAnF4xMWXylJPzu382njLmUb8m+gAOxV5 RkUSlbvk8yGwciDqDumbNgHfp47r1AEk -----END CERTIFICATE-----Generated at Thu May 15 19:14:38 2025 by rpki-client