$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: mOcGCJM20q3sxuaVhXhmZ5SPYY18/lw8nqF6Z1NLpN4= Subject key identifier: 79:FA:E2:5C:ED:51:D1:7D:E0:5F:3C:05:03:F9:98:B8:C6:3B:65:D6 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 02A1 Signing time: Mon 05 May 2025 01:06:36 +0000 Manifest this update: Mon 05 May 2025 01:06:36 +0000 Manifest next update: Mon 12 May 2025 01:06:36 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: wOopXrsfj2B08DyeZNJc6P3wUWh2AqAShXyovFtIRTk=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: May 5 01:06:36 2025 GMT Not After : May 12 01:06:36 2025 GMT Subject: CN=68180f1c-4388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:99:ec:53:73:18:b2:6d:6c:a1:76:54:90: fa:75:87:5d:80:aa:af:98:4b:3c:af:1b:57:2c:4f: 25:29:e1:b9:79:3d:91:d1:45:3a:f1:6f:3e:22:a3: 44:b7:d9:3b:e4:ad:2b:80:46:8f:21:f5:a8:c6:a3: 97:b1:b2:62:83:4b:c8:46:12:bc:f7:1c:f0:7e:7e: 66:be:d9:fa:2e:ae:1b:6a:3d:3c:a1:f5:ed:1e:85: a3:bc:d9:cc:ad:39:32:f3:7c:a3:85:01:51:15:f5: fe:79:4a:84:08:56:ae:11:91:05:50:b3:15:67:39: 28:ab:2f:2a:e0:01:38:42:f5:d3:ee:ae:dc:19:7e: 44:51:b7:b8:7f:0a:25:da:1d:d8:05:b7:95:b8:88: 98:ce:c2:68:51:e8:be:4d:49:81:5a:e4:c6:f8:9f: a1:a3:db:60:23:d7:8b:a3:e4:b3:cc:6e:80:80:4f: d1:53:bb:10:1a:87:b4:10:0f:e0:4b:20:fb:b1:1e: 0f:8f:6a:c9:cd:28:51:e5:5b:5f:95:bf:7b:22:ce: 36:05:ec:c1:ea:63:83:96:cb:4e:50:ee:6e:eb:a1: ee:10:0c:6b:eb:a9:bc:88:19:f8:c7:5d:32:ab:63: c9:f3:48:fe:9f:20:f6:03:90:ff:3e:ea:4e:e5:ce: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:E2:5C:ED:51:D1:7D:E0:5F:3C:05:03:F9:98:B8:C6:3B:65:D6 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:10:7e:63:18:56:ab:b5:1f:c4:81:4d:c3:94:80:3f:23:77: 52:b6:fb:1a:ba:8a:e4:12:1c:9f:01:c5:f9:f2:2e:50:5f:62: 3e:cc:59:d8:25:13:68:52:6e:e8:31:d9:e9:81:de:d3:6f:4e: 58:c5:bd:8f:03:3a:35:e2:ed:46:51:f9:96:8c:42:bc:24:c9: 49:28:93:36:a5:ac:a7:9d:b8:2a:7e:b2:83:84:88:be:55:f4: 5f:9b:71:ec:09:d8:6b:cd:98:09:53:8c:f8:8b:bd:21:8b:ad: 49:28:33:af:ba:10:c1:3a:a4:19:df:a5:57:1b:65:bd:a1:a1: f3:66:bd:22:b7:e0:f7:99:cc:17:69:05:13:2f:33:0f:74:49: ac:ab:24:f0:95:29:99:07:f0:4d:9d:83:fc:8c:34:9a:20:8a: 52:ba:48:e6:65:cb:de:0a:39:50:23:16:60:36:49:5f:05:3f: 8b:91:bb:fa:0c:c3:50:b0:23:ee:ef:4a:47:95:06:d8:19:41: fa:7e:72:9b:6e:1c:18:88:8b:2e:99:5f:07:a5:aa:85:23:d1: 91:c5:09:33:3a:fc:54:dc:2e:1f:1d:57:69:da:20:e3:68:66: 0e:70:0c:83:48:ae:94:3a:c2:ff:e5:90:e1:b6:10:e8:6b:25: 12:d0:7d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwNTA1MDEwNjM2WhcNMjUwNTEyMDEwNjM2WjAYMRYwFAYD VQQDEw02ODE4MGYxYy00Mzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso6Z7FNzGLJtbKF2VJD6dYddgKqvmEs8rxtXLE8lKeG5eT2R0UU68W8+IqNE t9k75K0rgEaPIfWoxqOXsbJig0vIRhK89xzwfn5mvtn6Lq4baj08ofXtHoWjvNnM rTky83yjhQFRFfX+eUqECFauEZEFULMVZzkoqy8q4AE4QvXT7q7cGX5EUbe4fwol 2h3YBbeVuIiYzsJoUei+TUmBWuTG+J+ho9tgI9eLo+SzzG6AgE/RU7sQGoe0EA/g SyD7sR4Pj2rJzShR5Vtflb97Is42BezB6mODlstOUO5u66HuEAxr66m8iBn4x10y q2PJ80j+nyD2A5D/PupO5c6jeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn64lzt UdF94F88BQP5mLjGO2XWMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoEH5jGFartR/EgU3DlIA/I3dStvsauorkEhyfAcX58i5QX2I+zFnY JRNoUm7oMdnpgd7Tb05Yxb2PAzo14u1GUfmWjEK8JMlJKJM2paynnbgqfrKDhIi+ VfRfm3HsCdhrzZgJU4z4i70hi61JKDOvuhDBOqQZ36VXG2W9oaHzZr0it+D3mcwX aQUTLzMPdEmsqyTwlSmZB/BNnYP8jDSaIIpSukjmZcveCjlQIxZgNklfBT+Lkbv6 DMNQsCPu70pHlQbYGUH6fnKbbhwYiIsumV8HpaqFI9GRxQkzOvxU3C4fHVdp2iDj aGYOcAyDSK6UOsL/5ZDhthDoayUS0H3E -----END CERTIFICATE-----Generated at Mon May 5 03:01:07 2025 by rpki-client