$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: wAXiiOfOOH3RY1H8UTziQcGg8vcOI/H5Pr4icM7vrrQ= Subject key identifier: 68:68:43:37:68:C3:BD:9B:69:FF:C1:92:D2:96:4D:9D:0F:1B:6A:3B Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 01E6 Signing time: Thu 15 May 2025 02:05:38 +0000 Manifest this update: Thu 15 May 2025 02:05:38 +0000 Manifest next update: Thu 22 May 2025 02:05:38 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: 59SQYmzff9pIzle1c7l+QFPMTcL04+0Hkq6c3JiS3Fg=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: May 15 02:05:38 2025 GMT Not After : May 22 02:05:38 2025 GMT Subject: CN=68254bf2-c697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:c3:11:0c:02:6e:52:af:52:b4:45:46:52: 27:86:8f:a5:a8:b4:20:ee:72:fb:eb:e1:4e:d2:97: af:69:e4:28:8c:9d:f8:ad:3b:56:00:d2:83:65:7a: 39:b2:32:3a:fe:13:7d:ce:49:5a:e2:9d:ae:9a:45: ff:2c:a7:87:ec:c6:3c:d5:21:c0:88:46:97:d4:54: 2d:9b:cb:e2:b0:5a:8d:4e:a2:70:31:e9:07:58:34: b8:39:1b:c7:51:8b:bc:ee:69:a6:50:01:a2:86:2e: 05:20:04:e5:7e:72:93:45:ee:1c:7e:c7:9f:06:f4: 97:97:df:eb:97:d4:8d:03:da:89:15:4c:a3:92:c5: a6:86:89:ea:bc:a1:7d:10:03:b5:d4:69:7a:c9:9b: 0b:4a:ce:03:44:b9:66:fe:50:b0:20:17:2a:61:1f: 18:c0:10:22:a7:bd:2e:df:f8:14:bc:77:40:12:df: 64:fc:84:ac:f4:a7:2b:2e:aa:37:9b:15:48:b4:ec: bc:00:b8:fb:87:3a:dc:04:7f:79:fb:3d:0c:d4:f3: 45:61:83:15:bd:0d:fa:a6:5a:56:f0:62:30:da:f5: 0a:c3:95:22:b2:92:4c:58:13:7a:c9:f6:eb:7a:e8: 54:6a:9c:d4:67:10:a0:cd:9e:63:e2:29:be:f2:9a: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:68:43:37:68:C3:BD:9B:69:FF:C1:92:D2:96:4D:9D:0F:1B:6A:3B X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:d0:dc:fb:23:81:a5:c5:1a:24:d9:00:b5:21:84:2d:9f: 3d:24:0e:ab:f7:8e:07:30:3e:c8:f7:52:a6:8d:0e:36:39:c7: a5:41:d3:17:b7:39:14:11:1f:7d:a5:f6:b4:1d:2c:bc:53:2a: a9:51:f8:80:a6:6d:88:0c:1b:d6:e5:1c:dd:e9:99:7f:1c:f3: fc:b8:9f:b8:04:b6:63:e1:fa:6c:ef:4b:b7:f3:bd:4f:36:65: d7:52:48:8a:ec:fc:ee:a2:d7:ca:cf:2a:f1:6c:68:3f:f2:bd: 2a:83:9f:55:a2:b5:60:1f:6b:9e:26:74:22:cc:67:87:f3:c8: 25:42:e5:ab:10:21:fe:99:e7:3f:47:30:54:2b:bb:dd:9f:f7: ee:50:80:0f:4e:ef:00:dd:77:04:bf:be:65:08:87:0f:ba:36: 6f:24:c5:58:ea:6d:ee:d0:78:47:e0:41:83:7b:6a:b5:03:04: 8c:38:a0:bc:98:5b:e8:c6:f4:26:a6:0c:06:ba:8c:39:17:dc: 76:a2:03:5a:a6:27:e5:25:c2:e7:de:80:d9:60:e5:f8:fe:ac: cd:b3:b6:f0:1f:d1:98:38:49:23:e1:f0:f4:64:64:73:9f:0d: b7:2e:04:7b:96:7c:4a:a1:36:1f:99:c8:a8:b7:b1:44:66:d0: d6:96:9e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUwNTE1MDIwNTM4WhcNMjUwNTIyMDIwNTM4WjAYMRYwFAYD VQQDEw02ODI1NGJmMi1jNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EzDEQwCblKvUrRFRlInho+lqLQg7nL76+FO0pevaeQojJ34rTtWANKDZXo5 sjI6/hN9zkla4p2umkX/LKeH7MY81SHAiEaX1FQtm8visFqNTqJwMekHWDS4ORvH UYu87mmmUAGihi4FIATlfnKTRe4cfsefBvSXl9/rl9SNA9qJFUyjksWmhonqvKF9 EAO11Gl6yZsLSs4DRLlm/lCwIBcqYR8YwBAip70u3/gUvHdAEt9k/ISs9KcrLqo3 mxVItOy8ALj7hzrcBH95+z0M1PNFYYMVvQ36plpW8GIw2vUKw5UispJMWBN6yfbr euhUapzUZxCgzZ5j4im+8prjywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhoQzdo w72baf/BktKWTZ0PG2o7MB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwmdDc+yOBpcUaJNkAtSGELZ89JA6r944HMD7I91KmjQ42OcelQdMX tzkUER99pfa0HSy8UyqpUfiApm2IDBvW5Rzd6Zl/HPP8uJ+4BLZj4fps70u3871P NmXXUkiK7PzuotfKzyrxbGg/8r0qg59VorVgH2ueJnQizGeH88glQuWrECH+mec/ RzBUK7vdn/fuUIAPTu8A3XcEv75lCIcPujZvJMVY6m3u0HhH4EGDe2q1AwSMOKC8 mFvoxvQmpgwGuow5F9x2ogNapiflJcLn3oDZYOX4/qzNs7bwH9GYOEkj4fD0ZGRz nw23LgR7lnxKoTYfmciot7FEZtDWlp7n -----END CERTIFICATE-----Generated at Thu May 15 08:47:24 2025 by rpki-client