$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: NXFNx5XMNdNuAB8ahVYhR1f9QjH+/dBC4PnoCC7qvt4= Subject key identifier: A0:06:AF:2A:0F:79:88:9A:5E:57:1E:17:A0:34:8C:81:88:B1:5B:28 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 061C Signing time: Mon 12 May 2025 22:38:13 +0000 Manifest this update: Mon 12 May 2025 22:38:13 +0000 Manifest next update: Mon 19 May 2025 22:38:13 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: vEOfQQFQ6abApwReReNEX4uFOuQ3tNFVQGFLNwZAEcc=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: May 12 22:38:13 2025 GMT Not After : May 19 22:38:13 2025 GMT Subject: CN=68227855-84c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:3d:fb:9d:31:4a:f7:fa:84:46:2e:6a:8c: 0b:ba:c3:18:0f:12:34:67:88:53:bb:bf:18:f2:7b: 07:05:50:3a:1f:59:f6:9b:fa:d0:bc:a7:a4:88:9f: 41:8d:c7:95:c3:86:91:18:e3:ad:76:2c:ba:1d:ad: d3:28:d1:c8:1b:66:46:70:19:a9:1e:40:57:08:24: ce:a0:39:49:04:b1:a5:fd:10:fe:ba:7e:bb:e3:ef: 2e:33:5d:9a:22:04:8b:e9:69:2a:fd:6d:d3:44:6f: d3:44:51:db:ef:c7:dc:e9:5a:24:a9:f5:d9:f4:bb: 59:82:65:a6:96:39:f4:88:1c:0d:ef:e9:b9:da:29: 97:b4:92:32:53:20:3a:9f:a3:98:70:5a:af:bc:76: 45:4a:c8:58:75:d3:7d:b2:b5:b1:5a:50:4d:a6:a5: 8d:1f:63:7a:9b:66:b7:e6:b7:81:b4:42:61:ec:18: 27:11:b5:7f:ec:53:a7:75:04:fe:52:cc:b4:73:f4: 02:4c:59:95:6b:b7:8b:20:f0:f5:19:3c:bf:ef:d1: 06:a5:b8:92:b1:86:9c:7b:c8:f3:a3:be:51:26:fc: 45:b9:49:7e:50:3e:8e:73:bf:64:92:50:82:99:f0: df:6b:07:72:42:6b:30:4c:bc:23:8d:78:03:62:71: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:AF:2A:0F:79:88:9A:5E:57:1E:17:A0:34:8C:81:88:B1:5B:28 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fd:3a:b6:6a:ae:b4:cc:ed:a3:0e:6b:3a:b0:94:b1:f3:a7: 17:18:40:0f:e8:10:6e:84:54:a3:93:52:86:bb:e9:6b:2e:2a: e5:20:9a:f7:37:27:7b:3d:75:51:fe:c6:b5:3c:75:39:cd:16: 0b:69:5f:44:d9:a0:a3:cd:20:2c:99:b4:6b:e1:65:ea:0b:19: cc:9a:36:7d:83:b5:ed:ff:bc:1d:67:bc:8b:62:a1:bf:f5:27: a2:45:6a:d7:d0:36:b1:86:9f:d1:99:c4:bb:a5:8f:32:00:ab: e0:62:c4:dc:9f:ca:94:ef:f9:af:4d:3f:54:b1:e9:fc:91:59: 0e:51:d5:06:9a:2f:33:56:4c:e0:8d:f9:9c:d7:e9:61:64:c9: e6:77:3a:3d:23:c6:83:1a:71:d2:d9:db:95:aa:5d:c0:d7:2a: bb:d3:d6:b9:b8:d0:b1:89:aa:17:43:6e:ae:3a:f3:14:02:80: 58:f4:c8:61:54:28:82:43:2a:50:db:96:31:c3:9e:db:c4:72: f3:b5:17:60:be:31:03:55:a5:16:8b:aa:44:c0:6a:e7:ae:f6: c2:9b:91:99:9b:1b:c5:80:26:a5:fa:88:4c:0b:17:6e:2e:2b: 68:99:fd:17:52:cc:51:0b:c7:36:c0:a5:dd:1f:c2:b0:93:b7: 23:1b:e1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNTEyMjIzODEzWhcNMjUwNTE5MjIzODEzWjAYMRYwFAYD VQQDEw02ODIyNzg1NS04NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuY9+50xSvf6hEYuaowLusMYDxI0Z4hTu78Y8nsHBVA6H1n2m/rQvKekiJ9B jceVw4aRGOOtdiy6Ha3TKNHIG2ZGcBmpHkBXCCTOoDlJBLGl/RD+un674+8uM12a IgSL6Wkq/W3TRG/TRFHb78fc6VokqfXZ9LtZgmWmljn0iBwN7+m52imXtJIyUyA6 n6OYcFqvvHZFSshYddN9srWxWlBNpqWNH2N6m2a35reBtEJh7BgnEbV/7FOndQT+ Usy0c/QCTFmVa7eLIPD1GTy/79EGpbiSsYace8jzo75RJvxFuUl+UD6Oc79kklCC mfDfawdyQmswTLwjjXgDYnFRUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAGryoP eYiaXlceF6A0jIGIsVsoMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7/Tq2aq60zO2jDms6sJSx86cXGEAP6BBuhFSjk1KGu+lrLirlIJr3 Nyd7PXVR/sa1PHU5zRYLaV9E2aCjzSAsmbRr4WXqCxnMmjZ9g7Xt/7wdZ7yLYqG/ 9SeiRWrX0Daxhp/RmcS7pY8yAKvgYsTcn8qU7/mvTT9Usen8kVkOUdUGmi8zVkzg jfmc1+lhZMnmdzo9I8aDGnHS2duVql3A1yq709a5uNCxiaoXQ26uOvMUAoBY9Mhh VCiCQypQ25Yxw57bxHLztRdgvjEDVaUWi6pEwGrnrvbCm5GZmxvFgCal+ohMCxdu Litomf0XUsxRC8c2wKXdH8Kwk7cjG+G8 -----END CERTIFICATE-----Generated at Tue May 13 11:19:02 2025 by rpki-client