$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft File: LDapC6RHk-UIQM9l9mUogr_PuPI.mft (raw, json) Hash identifier: DX9fFkZvMs0kTwhlXp8RRF5xeEUPd0/yludEHtDkgJo= Subject key identifier: B0:61:00:36:C1:18:75:DA:5C:BB:7D:2C:1F:E7:44:D3:45:8F:C6:4D Authority key identifier: 2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 Certificate issuer: /CN=A9168D00/serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft Manifest number: 05EE Signing time: Sat 10 May 2025 22:32:02 +0000 Manifest this update: Sat 10 May 2025 22:32:01 +0000 Manifest next update: Sat 17 May 2025 22:32:01 +0000 Files and hashes: 1: LDapC6RHk-UIQM9l9mUogr_PuPI.crl (hash: PLUenQXYe6HD5wPTgZGqiXQBmh0SIowAE1gvSmo5ZQ8=) 2: 7054AB4AAC5611EBA1C1D381C4F9AE02.roa (hash: Q1d1g05zi4G/ogm4b/r2cc7LZ3pSsv6EHqXO8XveQLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2C36A90BA44793E50840CF65F6652882BFCFB8F2 Validity Not Before: May 10 22:32:01 2025 GMT Not After : May 17 22:32:01 2025 GMT Subject: CN=681fd3e2-3c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:1d:31:c7:c8:13:71:4f:8c:01:b5:47:2c: 89:3b:30:01:df:89:20:fd:30:c0:bd:85:92:3f:9d: 3e:53:40:ec:11:aa:a8:77:41:b8:9e:60:af:a5:11: 76:0c:d7:cd:23:ed:68:64:0c:65:39:de:6d:f5:54: 8d:71:73:48:99:25:f2:48:3b:f4:fd:86:3a:1f:fb: 9c:8a:05:57:85:4d:85:2a:ce:b6:1c:36:3a:44:2b: ad:70:8d:6a:c9:75:35:68:e6:98:3e:cc:50:93:26: 33:d6:60:c6:a6:eb:7d:47:b3:71:66:29:8c:03:55: 39:61:19:b3:54:ff:d9:38:3c:6d:0d:3f:e9:47:a1: 87:79:48:d3:60:95:17:6b:92:68:2d:20:73:3d:81: cd:d9:d8:78:24:bb:19:f5:82:29:4e:a5:67:43:65: 77:6c:da:10:9e:04:03:c5:d0:88:8e:14:8b:14:a9: 49:10:a0:1a:b0:df:b9:37:7d:ec:1c:f1:4e:48:70: dc:cf:4b:37:e1:2d:b8:52:38:69:10:92:83:0c:72: 6c:47:d1:1c:02:b9:a9:70:08:b7:83:54:cd:7d:28: 59:fa:b8:e2:1c:43:cd:1d:da:56:f8:ba:18:71:e6: 69:42:06:fd:4d:74:bd:3c:56:67:00:0d:71:e2:79: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:61:00:36:C1:18:75:DA:5C:BB:7D:2C:1F:E7:44:D3:45:8F:C6:4D X509v3 Authority Key Identifier: keyid:2C:36:A9:0B:A4:47:93:E5:08:40:CF:65:F6:65:28:82:BF:CF:B8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDapC6RHk-UIQM9l9mUogr_PuPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F70A80C2AC0811EB86E42B6BC4F9AE02/LDapC6RHk-UIQM9l9mUogr_PuPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:46:ce:fe:e9:52:69:be:a4:48:70:4b:36:ef:02:9e:59: 26:e3:8d:77:41:36:ce:77:82:ed:35:f0:0b:48:06:be:80:51: 1e:46:f8:78:7f:66:d3:08:88:6a:5b:62:dc:9d:96:26:6f:e7: 00:00:b6:0e:f0:1a:3c:c2:ad:5d:4b:36:5c:7a:2b:9d:6e:92: 5d:00:a0:85:a3:a8:c0:1c:b3:49:79:d2:34:36:04:cb:2a:17: 90:51:3d:4e:68:ac:20:22:c3:4a:38:8e:b3:11:38:10:97:51: 06:43:35:66:6f:eb:9b:d3:87:74:a5:c7:a7:e8:fa:c6:c4:a7: 00:0c:b2:b0:1c:c0:88:59:d4:65:63:68:46:7b:74:50:d9:df: a7:71:ca:df:77:26:75:a6:2c:5d:39:5f:82:b4:b8:9a:19:e3: de:19:0d:5e:33:c1:c1:e1:3d:7e:02:6d:2a:26:94:ab:b0:ca: 66:54:0c:a8:19:a4:08:d5:d6:e6:d8:8f:e7:96:b2:ac:74:6c: c5:85:ab:8b:3f:3f:1f:74:c4:f6:ca:60:49:df:c2:ce:5f:4f: 3c:1e:bb:56:f0:f9:51:17:32:1c:bf:d1:f5:4c:fe:b5:ae:39: 61:be:15:20:4d:ef:f4:61:10:b4:c5:55:69:8e:35:d4:11:0e: 02:48:e5:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDJDMzZBOTBCQTQ0NzkzRTUwODQwQ0Y2NUY2NjUyODgy QkZDRkI4RjIwHhcNMjUwNTEwMjIzMjAxWhcNMjUwNTE3MjIzMjAxWjAYMRYwFAYD VQQDEw02ODFmZDNlMi0zYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HYdMcfIE3FPjAG1RyyJOzAB34kg/TDAvYWSP50+U0DsEaqod0G4nmCvpRF2 DNfNI+1oZAxlOd5t9VSNcXNImSXySDv0/YY6H/ucigVXhU2FKs62HDY6RCutcI1q yXU1aOaYPsxQkyYz1mDGput9R7NxZimMA1U5YRmzVP/ZODxtDT/pR6GHeUjTYJUX a5JoLSBzPYHN2dh4JLsZ9YIpTqVnQ2V3bNoQngQDxdCIjhSLFKlJEKAasN+5N33s HPFOSHDcz0s34S24UjhpEJKDDHJsR9EcArmpcAi3g1TNfShZ+rjiHEPNHdpW+LoY ceZpQgb9TXS9PFZnAA1x4nlzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBhADbB GHXaXLt9LB/nRNNFj8ZNMB8GA1UdIwQYMBaAFCw2qQukR5PlCEDPZfZlKIK/z7jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GNzBBODBDMkFD MDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGstVUlRTTlsOW1Vb2dyX1B1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEYXBDNlJIay1VSVFNOWw5bVVvZ3JfUHVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GNzBBODBDMkFDMDgxMUVCODZFNDJCNkJDNEY5QUUwMi9MRGFwQzZSSGst VUlRTTlsOW1Vb2dyX1B1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCkbO/ulSab6kSHBLNu8Cnlkm4413QTbOd4LtNfALSAa+gFEeRvh4 f2bTCIhqW2LcnZYmb+cAALYO8Bo8wq1dSzZceiudbpJdAKCFo6jAHLNJedI0NgTL KheQUT1OaKwgIsNKOI6zETgQl1EGQzVmb+ub04d0pcen6PrGxKcADLKwHMCIWdRl Y2hGe3RQ2d+nccrfdyZ1pixdOV+CtLiaGePeGQ1eM8HB4T1+Am0qJpSrsMpmVAyo GaQI1dbm2I/nlrKsdGzFhauLPz8fdMT2ymBJ38LOX088HrtW8PlRFzIcv9H1TP61 rjlhvhUgTe/0YRC0xVVpjjXUEQ4CSOUw -----END CERTIFICATE-----Generated at Mon May 12 05:43:25 2025 by rpki-client