$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: D21yv2L0vL84CnhL06ro/DyIcWCUI0nW6TAdQx+F6bA= Subject key identifier: 9C:58:A8:60:E9:E3:76:7A:EF:71:2D:FA:D9:FB:44:C9:44:AA:AD:B3 Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 13B0 Signing time: Sat 10 May 2025 18:30:46 +0000 Manifest this update: Sat 10 May 2025 18:30:45 +0000 Manifest next update: Sat 17 May 2025 18:30:45 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: 99eXvmErRuyXyvqadsPi0COKGYIOfE9C9NYCdjh4XjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3066 (0xbfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: May 10 18:30:45 2025 GMT Not After : May 17 18:30:45 2025 GMT Subject: CN=681f9b56-c381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:22:bc:9f:43:61:88:6c:cd:9c:6b:88:68: 52:b9:7f:97:4d:f6:61:1e:c1:8a:ad:1f:55:7b:a7: 2c:a8:ab:71:9d:48:c4:5b:61:48:84:aa:73:14:2b: 4e:1a:cb:78:44:57:95:d2:b0:3f:6a:80:b8:5b:7f: f9:78:e9:14:40:e0:ed:14:23:f9:d0:51:8b:26:01: 7a:11:27:04:2e:fc:0b:33:02:ea:f9:0c:42:99:55: 72:91:6e:95:59:c9:d7:95:eb:44:f8:f5:5f:70:7b: 42:f6:0b:5e:b8:31:a1:d2:ee:ef:9b:6e:50:d4:6e: c6:ed:39:e9:4d:c0:a1:b1:fc:d5:03:f9:87:55:27: 8b:08:6f:73:16:02:f5:8d:2b:4b:59:99:8b:5e:c7: 72:71:37:09:3e:b3:b0:b4:60:c6:86:d7:5f:27:02: 5e:71:a8:ae:54:40:b9:90:1c:ec:e4:d1:8a:5e:9c: 29:41:58:7d:bb:8c:fc:04:91:e5:ec:83:2a:10:ca: dd:cf:3a:31:8e:4a:b5:34:6e:1c:d6:1f:76:3c:bf: aa:53:13:3f:e6:e9:d4:3d:a3:b1:bf:5a:23:10:31: bf:48:fa:82:62:44:56:21:2f:5b:2f:ab:0a:02:a5: 88:31:6e:84:b5:38:c3:3c:d9:38:35:cc:72:2f:48: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:58:A8:60:E9:E3:76:7A:EF:71:2D:FA:D9:FB:44:C9:44:AA:AD:B3 X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ad:f7:b9:3c:93:4a:14:82:6f:20:4e:a1:4f:29:66:56:41: 3f:14:a9:e3:17:be:ea:60:a7:23:a7:87:61:34:4e:ed:7b:52: f3:6b:7f:c9:52:34:59:e7:ec:fd:bf:1b:8e:f2:81:58:d0:60: 1a:87:0a:f6:16:fa:35:67:e2:70:63:bc:1f:59:41:ba:1e:ad: 44:9f:65:47:c2:a8:a4:1a:49:29:84:aa:00:33:6a:da:0e:d2: 1e:8f:af:ab:70:f6:43:6f:b3:54:52:0f:ca:af:67:cb:c5:9d: ef:39:99:ad:dd:bb:33:da:93:c2:d9:fc:21:af:45:a6:b1:3b: 94:a7:b0:6d:ca:2c:ba:59:ce:c2:67:f0:78:6f:88:0f:f2:56: 8e:ed:60:44:67:56:27:82:2d:49:4a:38:58:82:b3:17:f1:fb: 9c:71:36:22:14:ff:02:84:85:56:dd:5f:a2:88:0d:77:04:6f: 5d:62:03:6a:75:12:3d:60:73:41:51:90:36:2f:82:ef:9b:8c: 43:c3:fc:2a:da:33:e8:f8:21:e3:b7:d2:89:be:b4:26:4f:31: 88:5f:24:c1:3a:0b:b6:00:c6:9b:0b:8c:31:53:8a:12:6d:ca: 2c:ef:1c:b2:2e:5d:ca:94:8b:14:84:ea:66:b4:ee:53:a5:47: 23:c8:26:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUwNTEwMTgzMDQ1WhcNMjUwNTE3MTgzMDQ1WjAYMRYwFAYD VQQDEw02ODFmOWI1Ni1jMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugIivJ9DYYhszZxriGhSuX+XTfZhHsGKrR9Ve6csqKtxnUjEW2FIhKpzFCtO Gst4RFeV0rA/aoC4W3/5eOkUQODtFCP50FGLJgF6EScELvwLMwLq+QxCmVVykW6V WcnXletE+PVfcHtC9gteuDGh0u7vm25Q1G7G7TnpTcChsfzVA/mHVSeLCG9zFgL1 jStLWZmLXsdycTcJPrOwtGDGhtdfJwJecaiuVEC5kBzs5NGKXpwpQVh9u4z8BJHl 7IMqEMrdzzoxjkq1NG4c1h92PL+qUxM/5unUPaOxv1ojEDG/SPqCYkRWIS9bL6sK AqWIMW6EtTjDPNk4NcxyL0jucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxYqGDp 43Z673Et+tn7RMlEqq2zMB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwrfe5PJNKFIJvIE6hTylmVkE/FKnjF77qYKcjp4dhNE7te1Lza3/J UjRZ5+z9vxuO8oFY0GAahwr2Fvo1Z+JwY7wfWUG6Hq1En2VHwqikGkkphKoAM2ra DtIej6+rcPZDb7NUUg/Kr2fLxZ3vOZmt3bsz2pPC2fwhr0WmsTuUp7Btyiy6Wc7C Z/B4b4gP8laO7WBEZ1Yngi1JSjhYgrMX8fuccTYiFP8ChIVW3V+iiA13BG9dYgNq dRI9YHNBUZA2L4Lvm4xDw/wq2jPo+CHjt9KJvrQmTzGIXyTBOgu2AMabC4wxU4oS bcos7xyyLl3KlIsUhOpmtO5TpUcjyCbZ -----END CERTIFICATE-----Generated at Sun May 11 20:06:20 2025 by rpki-client