$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: TmjpwqaF2TgDZ1DqU57JtiFI+jgtojmQXeY5ONvNUQQ= Subject key identifier: 4A:7A:38:A0:99:AF:64:79:AA:09:9F:4C:A7:80:5F:93:29:D7:76:5F Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B2C Signing time: Fri 16 May 2025 19:25:20 +0000 Manifest this update: Fri 16 May 2025 19:25:20 +0000 Manifest next update: Fri 23 May 2025 19:25:20 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: EfIshYegaoO1Ah9rNDoMkmM/inQ8b4CRovDklCjkgwk=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: May 16 19:25:20 2025 GMT Not After : May 23 19:25:20 2025 GMT Subject: CN=68279120-866c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:0a:97:e2:b8:4e:fb:47:52:72:82:09:93: 7d:ca:30:b2:a0:ee:f2:7d:3c:2f:0b:1f:40:d6:d5: 94:79:22:ae:6c:c8:cc:6a:ba:69:3d:f3:79:16:95: 28:90:60:88:9a:59:e9:3c:d6:35:0c:26:c6:24:1a: a0:b1:96:2c:67:8b:e7:1a:0c:83:4e:46:88:a2:fd: 6a:d8:2e:21:4c:1a:03:9a:51:73:c1:56:a1:87:6a: 26:a0:92:1d:ea:f5:7d:ba:f9:8a:33:b4:e1:36:f7: 39:58:5e:fd:56:fa:13:08:99:e3:c6:c1:5c:aa:df: 68:f6:31:dc:16:32:62:e9:6f:6a:3c:97:7d:58:a9: 42:20:30:d9:95:84:d6:c3:6c:b3:30:88:fb:e6:dc: 91:ca:1e:c8:ff:2e:d9:65:3a:96:7a:ba:98:54:78: f0:09:fb:d0:91:d8:0f:b0:89:ef:f6:d5:5e:b0:20: 66:74:35:8e:0a:65:5e:5b:9e:f7:68:28:4f:24:55: 87:59:c5:a3:d6:36:93:65:27:99:0a:73:da:5b:18: 0e:13:7e:c6:5d:52:5d:41:95:7d:51:42:fb:12:6d: 78:05:2d:dc:ce:e7:d8:44:e4:79:96:6c:70:d6:53: 5a:1f:fb:44:b8:da:fa:ee:ec:f7:9c:f1:13:46:38: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:38:A0:99:AF:64:79:AA:09:9F:4C:A7:80:5F:93:29:D7:76:5F X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:21:22:1b:89:2e:ee:ce:3b:e4:b8:fd:7b:29:80:4b:4a:b6: 7f:d2:1c:d6:f4:4f:9c:a8:1d:8a:6a:69:f7:f8:7d:3f:00:82: 9b:34:fa:d4:2b:d3:ae:de:f0:18:83:ee:0e:eb:02:3e:8e:65: 3d:e6:7f:92:5b:15:ba:2b:dd:e7:6c:77:da:cf:9e:02:c1:2a: ce:14:d0:58:79:94:51:3f:54:cc:e4:27:8d:b5:e8:7b:5f:1d: 2b:ca:b1:af:97:c7:36:2a:83:21:11:d8:e2:f3:c2:ca:49:fc: 1d:6c:60:ab:69:c5:00:f7:f9:80:64:e0:73:c6:46:ac:4e:a0: 46:1f:8b:8f:60:c7:dc:41:24:0a:c1:9e:77:44:63:1c:de:6b: f3:e2:da:fb:a6:e4:46:30:37:8a:cb:6f:60:a7:cc:65:12:77: 06:96:93:70:dd:1f:58:33:15:85:ba:48:99:10:36:ed:d9:0b: 65:a8:ee:46:53:94:13:63:4a:21:6c:9a:19:34:c4:75:82:a3: ce:91:14:00:c4:1a:24:19:53:a3:09:82:33:9e:bc:c8:cf:2d: ed:69:cd:08:a6:19:f2:19:60:39:66:e8:da:88:67:a6:e0:ed: a0:42:18:0f:ef:82:dd:93:d5:40:d4:a8:ce:9d:58:68:16:3b: f1:35:55:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwNTE2MTkyNTIwWhcNMjUwNTIzMTkyNTIwWjAYMRYwFAYD VQQDEw02ODI3OTEyMC04NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HgKl+K4TvtHUnKCCZN9yjCyoO7yfTwvCx9A1tWUeSKubMjMarppPfN5FpUo kGCImlnpPNY1DCbGJBqgsZYsZ4vnGgyDTkaIov1q2C4hTBoDmlFzwVahh2omoJId 6vV9uvmKM7ThNvc5WF79VvoTCJnjxsFcqt9o9jHcFjJi6W9qPJd9WKlCIDDZlYTW w2yzMIj75tyRyh7I/y7ZZTqWerqYVHjwCfvQkdgPsInv9tVesCBmdDWOCmVeW573 aChPJFWHWcWj1jaTZSeZCnPaWxgOE37GXVJdQZV9UUL7Em14BS3czufYROR5lmxw 1lNaH/tEuNr67uz3nPETRjhsrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp6OKCZ r2R5qgmfTKeAX5Mp13ZfMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcISIbiS7uzjvkuP17KYBLSrZ/0hzW9E+cqB2Kamn3+H0/AIKbNPrU K9Ou3vAYg+4O6wI+jmU95n+SWxW6K93nbHfaz54CwSrOFNBYeZRRP1TM5CeNteh7 Xx0ryrGvl8c2KoMhEdji88LKSfwdbGCracUA9/mAZOBzxkasTqBGH4uPYMfcQSQK wZ53RGMc3mvz4tr7puRGMDeKy29gp8xlEncGlpNw3R9YMxWFukiZEDbt2QtlqO5G U5QTY0ohbJoZNMR1gqPOkRQAxBokGVOjCYIznrzIzy3tac0IphnyGWA5ZujaiGem 4O2gQhgP74Ldk9VA1KjOnVhoFjvxNVUJ -----END CERTIFICATE-----Generated at Fri May 16 21:53:11 2025 by rpki-client