$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft File: LRgGu3n37GppfLCmWiHlyxIv3nY.mft (raw, json) Hash identifier: f8w6eTTFKPd/psc/MB7SYh+VvFBGoE9UALk6wqALHHI= Subject key identifier: C7:E7:54:67:CF:60:CF:C1:00:EC:54:3C:43:B7:DB:EE:57:95:01:50 Authority key identifier: 2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 Certificate issuer: /CN=A9165A58/serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft Manifest number: 76 Signing time: Sun 11 May 2025 05:31:30 +0000 Manifest this update: Sun 11 May 2025 05:31:30 +0000 Manifest next update: Sun 18 May 2025 05:31:30 +0000 Files and hashes: 1: LRgGu3n37GppfLCmWiHlyxIv3nY.crl (hash: Rtk7aHWpXJgT/mUBoDfZuAMOoAHNccJ04baTrCgJCeg=) 2: BDBEED967C0011EFB63C7076C4F9AE02.roa (hash: Nz2FGej23dIiDwRtV6Sp50mpW+TP9HnxQFOScAwf8wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=2D1806BB79F7EC6A697CB0A65A21E5CB122FDE76 Validity Not Before: May 11 05:31:30 2025 GMT Not After : May 18 05:31:30 2025 GMT Subject: CN=68203632-a545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:c0:5f:7b:c3:0a:de:92:20:6c:65:ab:7e: d2:2a:65:8a:8f:70:6a:65:0f:2c:91:67:1c:24:60: cc:d2:3f:50:e4:8f:14:6a:4f:a7:c1:40:e9:39:a6: 8b:81:26:a8:05:0a:6b:b2:00:e7:02:23:ea:a8:b1: 62:95:9d:52:c3:8d:45:50:c2:a8:8e:9d:fe:24:e9: 47:6e:1b:1a:4d:4c:2e:48:12:48:48:49:63:9e:9d: c6:c9:41:b2:fd:6c:4b:2e:5e:9f:a0:95:45:3e:75: 42:8f:f4:b7:d5:12:eb:5f:48:4b:34:ea:9a:4a:3c: 88:08:22:31:57:8a:29:5e:8c:78:e2:3d:53:c9:85: d7:ef:d6:9b:11:d1:3a:28:9c:cb:04:e0:eb:f2:a8: 4f:95:ba:67:60:c7:40:d6:59:5f:f7:9c:62:af:bc: 97:ce:b9:a6:10:ca:52:f7:00:e8:99:1c:8b:29:2d: 53:c2:99:a1:7e:a8:7f:e0:4a:da:63:6d:03:d6:0a: 46:19:3f:82:45:33:1b:9f:e2:f5:b2:ae:5e:ce:97: 52:41:60:32:bb:5c:30:af:f5:c0:11:da:2f:c0:f9: 57:2c:c9:a9:e3:23:f2:99:60:ce:d1:23:d3:57:62: 31:df:90:f7:f9:5f:33:1a:9a:11:fb:c0:46:8d:ca: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:54:67:CF:60:CF:C1:00:EC:54:3C:43:B7:DB:EE:57:95:01:50 X509v3 Authority Key Identifier: keyid:2D:18:06:BB:79:F7:EC:6A:69:7C:B0:A6:5A:21:E5:CB:12:2F:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LRgGu3n37GppfLCmWiHlyxIv3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/DF694BA67BFD11EFA7B8EB5CC4F9AE02/LRgGu3n37GppfLCmWiHlyxIv3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:37:42:52:dc:ee:60:cb:b2:cb:b8:2d:5e:68:f0:fc:2d:18: a4:d4:2b:a4:ec:f4:7b:a4:a7:ea:b3:74:1d:05:1a:68:12:b6: f8:5e:69:70:b2:f3:b2:df:b4:d5:aa:cc:a4:94:39:5c:ef:44: bc:65:20:9c:b5:40:18:5b:9b:19:0a:5c:fe:ae:84:04:36:f5: 40:c9:fa:88:13:72:c3:8d:20:7a:52:49:f4:34:9c:42:b3:88: d8:c1:20:39:42:79:97:00:51:99:05:fd:5f:9d:e7:be:e1:82: 4b:25:7b:37:89:66:ac:3c:97:ef:fd:5a:95:e4:d5:27:c0:92: a8:f6:62:4a:44:16:f8:f3:ea:66:d3:3c:19:6c:1b:68:4b:0e: b5:45:f8:93:b3:dc:44:17:47:d5:a6:c8:de:c6:d8:dc:25:e0: e8:88:1f:c7:2c:8f:0e:29:ac:87:d0:90:7d:fb:24:f3:e1:02: 3e:9c:bd:82:42:cc:8a:a3:41:00:a7:e8:bd:c5:25:ba:04:fa: 32:5a:26:7c:f8:f5:49:e5:05:dd:38:8e:66:bb:22:36:c6:4f: 5a:1a:16:17:14:d3:56:a7:17:87:e5:2e:8c:ca:da:13:e8:fc: 4b:24:70:48:fa:68:5f:ac:e4:ec:0b:4d:40:e2:72:22:c9:55: db:7c:fe:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUE1ODExMC8GA1UEBRMoMkQxODA2QkI3OUY3RUM2QTY5N0NCMEE2NUEyMUU1Q0Ix MjJGREU3NjAeFw0yNTA1MTEwNTMxMzBaFw0yNTA1MTgwNTMxMzBaMBgxFjAUBgNV BAMTDTY4MjAzNjMyLWE1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENMBfe8MK3pIgbGWrftIqZYqPcGplDyyRZxwkYMzSP1DkjxRqT6fBQOk5pouB JqgFCmuyAOcCI+qosWKVnVLDjUVQwqiOnf4k6UduGxpNTC5IEkhISWOencbJQbL9 bEsuXp+glUU+dUKP9LfVEutfSEs06ppKPIgIIjFXiilejHjiPVPJhdfv1psR0Too nMsE4OvyqE+Vumdgx0DWWV/3nGKvvJfOuaYQylL3AOiZHIspLVPCmaF+qH/gStpj bQPWCkYZP4JFMxuf4vWyrl7Ol1JBYDK7XDCv9cAR2i/A+VcsyanjI/KZYM7RI9NX YjHfkPf5XzMamhH7wEaNyj79AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx+dUZ89g z8EA7FQ8Q7fb7leVAVAwHwYDVR0jBBgwFoAULRgGu3n37GppfLCmWiHlyxIv3nYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QTU4L0RGNjk0QkE2N0JG RDExRUZBN0I4RUI1Q0M0RjlBRTAyL0xSZ0d1M24zN0dwcGZMQ21XaUhseXhJdjNu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFJnR3UzbjM3R3BwZkxDbVdpSGx5eEl2M25ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QTU4L0RGNjk0QkE2N0JGRDExRUZBN0I4RUI1Q0M0RjlBRTAyL0xSZ0d1M24zN0dw cGZMQ21XaUhseXhJdjNuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOk3QlLc7mDLssu4LV5o8PwtGKTUK6Ts9Hukp+qzdB0FGmgStvheaXCy 87LftNWqzKSUOVzvRLxlIJy1QBhbmxkKXP6uhAQ29UDJ+ogTcsONIHpSSfQ0nEKz iNjBIDlCeZcAUZkF/V+d577hgkslezeJZqw8l+/9WpXk1SfAkqj2YkpEFvjz6mbT PBlsG2hLDrVF+JOz3EQXR9WmyN7G2Nwl4OiIH8csjw4prIfQkH37JPPhAj6cvYJC zIqjQQCn6L3FJboE+jJaJnz49UnlBd04jma7IjbGT1oaFhcU01anF4flLozK2hPo /EskcEj6aF+s5OwLTUDiciLJVdt8/hE= -----END CERTIFICATE-----Generated at Sun May 11 20:48:42 2025 by rpki-client