$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: R72qWGQkFzzQsZfEAR3LNq4MJLhYlHkXRD2j8ZbkAAk= Subject key identifier: 00:1E:C7:19:96:62:98:D5:F2:C3:4D:3E:16:30:BD:4E:D1:B9:C4:41 Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D6B Signing time: Fri 16 May 2025 18:12:53 +0000 Manifest this update: Fri 16 May 2025 18:12:53 +0000 Manifest next update: Fri 23 May 2025 18:12:53 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: ykPWrD2iXg0qya2+jDTjKit2k5NY5XjPwSgZqEpfjYk=) 2: 5E6CE2C631AE11F0A9F09E0AC4F9AE02.roa (hash: farohxRDBQ9VasCgVSwSJ3ojZEnteNVPGizonI3QnXo=) 3: 3D8179B431AE11F0A7D0076FC4F9AE02.roa (hash: idQquXKRevDwjAJCqVW+rFJv8DkXtp2+vMql8G3VE3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: May 16 18:12:53 2025 GMT Not After : May 23 18:12:53 2025 GMT Subject: CN=68278025-66d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:30:99:e1:90:ff:68:24:0c:f3:54:e2:d8: 98:71:66:ba:e9:0c:0e:fa:85:92:cd:f0:af:3e:7b: 2c:34:de:09:cc:7e:93:c3:44:02:e6:ba:53:b7:13: 5d:56:e3:57:fb:37:9d:14:dc:7d:51:cf:b2:07:ed: 6e:8b:ef:32:e2:d2:c0:09:2a:44:aa:4e:4d:72:1f: 7c:94:6a:71:b1:4c:66:db:0e:df:cf:93:92:da:30: e3:fe:b0:ef:45:37:7d:d4:da:44:ec:53:71:03:4a: 56:2c:8e:a6:18:39:c9:6c:9e:96:2b:ec:ee:9a:70: 7a:dd:2e:ac:fe:8b:37:de:7f:2e:7e:db:ab:fd:05: 16:54:cf:56:39:94:c7:ae:8c:43:18:e8:37:c7:2e: d1:d0:fc:13:8d:f7:2f:86:4a:0e:c3:64:4d:9c:01: 1a:b3:18:e9:31:04:76:1a:51:b9:3a:37:6c:95:43: 79:ba:06:47:fc:6d:43:e5:06:28:1a:f6:65:67:fa: 13:d5:7a:80:97:eb:b5:7e:bc:e1:39:94:68:f9:60: d8:bc:49:3e:10:80:6e:4a:e2:c8:74:cc:4a:fb:9b: c3:08:f2:41:7f:07:70:9a:b0:2c:e2:d1:c5:34:a2: d7:02:3e:0b:65:20:d3:6c:1f:05:d3:3b:88:9c:82: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1E:C7:19:96:62:98:D5:F2:C3:4D:3E:16:30:BD:4E:D1:B9:C4:41 X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b3:d1:df:ab:6d:6b:d7:91:2e:99:b6:c1:96:b1:0b:f5:1a: 90:55:f2:71:91:63:c8:a4:7e:fd:ca:26:80:22:c3:0f:4d:f1: 34:c2:bf:58:6a:8f:86:d7:e9:2c:35:22:56:58:dd:b2:a0:99: c9:ea:56:23:a9:76:74:4d:ec:3d:6b:02:b9:3f:4d:43:c9:0e: b5:dc:63:e6:35:e8:d7:9c:db:f4:85:c5:c9:9c:21:40:f3:24: ec:b5:98:e4:9c:fe:36:0b:cf:ad:01:41:f7:51:7f:83:77:19: 4c:30:5f:ab:66:95:22:69:40:fe:bd:6a:97:b3:48:66:c0:95: f9:88:81:e9:5c:0c:29:b4:70:a9:71:3f:b9:3a:83:e4:39:d9: a5:15:40:cf:87:80:29:34:7a:13:c5:6c:85:85:51:34:50:33: 8a:96:33:82:cb:f5:cd:cb:fa:0e:38:25:b3:cb:68:e8:d9:56: 6a:26:2b:b8:4b:7c:6b:32:79:78:be:df:97:34:cb:be:73:93: b9:e8:1f:af:14:05:3d:8d:f5:35:0d:44:70:8b:94:3f:51:d7: b1:53:0e:df:21:95:f9:8a:e6:24:4e:6d:cd:de:7c:a8:1d:88: 29:15:13:69:2e:f4:59:e0:b2:d0:93:b6:bc:b6:2f:49:0c:a7: 2f:8e:ed:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjUwNTE2MTgxMjUzWhcNMjUwNTIzMTgxMjUzWjAYMRYwFAYD VQQDEw02ODI3ODAyNS02NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmEwmeGQ/2gkDPNU4tiYcWa66QwO+oWSzfCvPnssNN4JzH6Tw0QC5rpTtxNd VuNX+zedFNx9Uc+yB+1ui+8y4tLACSpEqk5Nch98lGpxsUxm2w7fz5OS2jDj/rDv RTd91NpE7FNxA0pWLI6mGDnJbJ6WK+zumnB63S6s/os33n8uftur/QUWVM9WOZTH roxDGOg3xy7R0PwTjfcvhkoOw2RNnAEasxjpMQR2GlG5OjdslUN5ugZH/G1D5QYo GvZlZ/oT1XqAl+u1frzhOZRo+WDYvEk+EIBuSuLIdMxK+5vDCPJBfwdwmrAs4tHF NKLXAj4LZSDTbB8F0zuInII/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAexxmW YpjV8sNNPhYwvU7RucRBMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4s9Hfq21r15EumbbBlrEL9RqQVfJxkWPIpH79yiaAIsMPTfE0wr9Y ao+G1+ksNSJWWN2yoJnJ6lYjqXZ0Tew9awK5P01DyQ613GPmNejXnNv0hcXJnCFA 8yTstZjknP42C8+tAUH3UX+DdxlMMF+rZpUiaUD+vWqXs0hmwJX5iIHpXAwptHCp cT+5OoPkOdmlFUDPh4ApNHoTxWyFhVE0UDOKljOCy/XNy/oOOCWzy2jo2VZqJiu4 S3xrMnl4vt+XNMu+c5O56B+vFAU9jfU1DURwi5Q/UdexUw7fIZX5iuYkTm3N3nyo HYgpFRNpLvRZ4LLQk7a8ti9JDKcvju0c -----END CERTIFICATE-----Generated at Sat May 17 02:46:41 2025 by rpki-client