$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: IZteJiTfWEKgQnJJBwzIsLE0Dud+FmU2jw6BHQ+jW0s= Subject key identifier: 49:6C:B1:2E:ED:95:39:6F:48:01:9F:27:1F:FC:B3:33:27:A1:8D:07 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: CE Signing time: Tue 13 May 2025 04:55:47 +0000 Manifest this update: Tue 13 May 2025 04:55:46 +0000 Manifest next update: Tue 20 May 2025 04:55:46 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: jNUiy93mnpZ72K3/IvK0xpKdOt61fiD4JDCHhe4sbzE=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: May 13 04:55:46 2025 GMT Not After : May 20 04:55:46 2025 GMT Subject: CN=6822d0d3-b445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:b9:8c:e9:17:fc:2a:bb:5c:b6:f8:02:40: 94:1b:e6:54:c3:9e:b1:09:71:e7:7e:fd:13:0a:44: b4:47:cf:cf:41:3c:51:15:43:e6:99:a6:c1:47:80: b8:8f:46:a4:b7:a1:b5:18:ca:68:8b:55:be:5b:ac: 89:2c:85:11:bd:ba:f8:07:5c:0e:19:ac:86:77:d5: 8e:ec:6c:19:66:54:ef:96:32:57:6e:d9:fe:c0:3a: cd:86:1b:d5:01:70:cb:03:d7:37:46:f3:cf:8c:5a: 32:93:ef:0d:55:d2:3e:69:06:c3:4c:0b:c4:00:ac: f5:5b:04:9a:64:42:56:72:52:06:30:5f:94:33:6a: f6:bd:ab:b4:cb:68:49:d8:bd:21:3e:03:fe:ae:07: e7:31:cd:5b:59:30:e0:f4:9f:32:7c:13:d7:76:0d: 65:be:b4:35:fc:b1:b2:ca:a8:e7:4d:35:9d:3f:98: 52:71:eb:c5:fc:4d:0c:3a:63:07:fe:12:55:9b:e1: 9d:9f:ea:64:c6:c5:e2:8d:41:f9:db:2e:61:d0:a1: 35:1b:06:70:a4:7c:16:55:a2:5c:42:67:90:1d:f5: 56:04:93:cd:18:0c:b5:a1:e9:65:64:75:b6:48:0a: 50:9e:30:f2:1f:15:a5:ad:c5:f6:45:bd:f6:72:46: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6C:B1:2E:ED:95:39:6F:48:01:9F:27:1F:FC:B3:33:27:A1:8D:07 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a3:32:c7:33:fa:6c:1b:b9:bc:63:de:2f:93:45:82:02:29: 5a:b4:96:d8:07:7e:3e:f5:52:ab:20:bd:58:28:17:0f:c2:7a: c5:46:f1:da:b4:c3:8c:c1:83:38:8c:27:6b:45:95:d1:c4:00: 65:c5:15:a8:0f:0a:dd:5e:36:0d:17:de:82:82:b6:85:67:e0: 81:4b:47:06:07:6f:05:2f:0b:67:25:a0:83:63:34:67:e2:16: 9c:ad:15:26:0b:68:2a:a2:6c:d2:e2:fa:e5:81:46:4a:33:da: 09:1a:5f:30:02:24:93:13:d4:f4:1d:e8:f2:00:4d:4c:66:6c: 39:81:21:98:b4:e9:d1:18:ca:3e:4a:e3:bf:68:be:fc:93:a3: 3e:cf:ba:68:f3:c0:51:2b:5e:bf:69:71:5a:71:c7:71:85:b3: 6b:98:14:57:a0:91:1a:f1:24:a6:3a:f9:af:5c:e9:9c:cf:67: ff:17:d0:e1:57:21:2f:56:8e:55:d6:a4:67:5f:b7:f4:b1:aa: 9a:1e:b5:0b:04:10:34:7f:61:88:ba:eb:5f:a4:67:3f:25:ca: 8d:64:b5:88:90:c7:50:5c:e8:46:dd:fe:20:ea:c9:f8:8f:70: bb:4b:b5:5a:3e:59:ca:17:4a:4d:34:da:69:f7:44:f7:7a:79: 33:ae:cd:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwNTEzMDQ1NTQ2WhcNMjUwNTIwMDQ1NTQ2WjAYMRYwFAYD VQQDEw02ODIyZDBkMy1iNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTy5jOkX/Cq7XLb4AkCUG+ZUw56xCXHnfv0TCkS0R8/PQTxRFUPmmabBR4C4 j0akt6G1GMpoi1W+W6yJLIURvbr4B1wOGayGd9WO7GwZZlTvljJXbtn+wDrNhhvV AXDLA9c3RvPPjFoyk+8NVdI+aQbDTAvEAKz1WwSaZEJWclIGMF+UM2r2vau0y2hJ 2L0hPgP+rgfnMc1bWTDg9J8yfBPXdg1lvrQ1/LGyyqjnTTWdP5hScevF/E0MOmMH /hJVm+Gdn+pkxsXijUH52y5h0KE1GwZwpHwWVaJcQmeQHfVWBJPNGAy1oellZHW2 SApQnjDyHxWlrcX2Rb32ckbCHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElssS7t lTlvSAGfJx/8szMnoY0HMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeozLHM/psG7m8Y94vk0WCAilatJbYB34+9VKrIL1YKBcPwnrFRvHa tMOMwYM4jCdrRZXRxABlxRWoDwrdXjYNF96CgraFZ+CBS0cGB28FLwtnJaCDYzRn 4hacrRUmC2gqomzS4vrlgUZKM9oJGl8wAiSTE9T0HejyAE1MZmw5gSGYtOnRGMo+ SuO/aL78k6M+z7po88BRK16/aXFaccdxhbNrmBRXoJEa8SSmOvmvXOmcz2f/F9Dh VyEvVo5V1qRnX7f0saqaHrULBBA0f2GIuutfpGc/JcqNZLWIkMdQXOhG3f4g6sn4 j3C7S7VaPlnKF0pNNNpp90T3enkzrs03 -----END CERTIFICATE-----Generated at Wed May 14 12:55:54 2025 by rpki-client