$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: 5j3CTauKAW83O63JdVxGgw7SNXql7GhYKiKVXmUYbh4= Subject key identifier: 44:38:71:1F:DE:1C:85:52:FE:F0:63:1C:E1:2D:73:29:64:D5:91:F9 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 0118 Signing time: Sun 11 May 2025 03:44:12 +0000 Manifest this update: Sun 11 May 2025 03:44:11 +0000 Manifest next update: Sun 18 May 2025 03:44:11 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: AC/bVh3J0Kyr4EYecsyr6g7pavj6TTvwri4abNpsml4=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: May 11 03:44:11 2025 GMT Not After : May 18 03:44:11 2025 GMT Subject: CN=68201d0c-3fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:3e:fa:4f:eb:86:4c:ce:3a:97:96:ea:86: 31:08:07:d0:2b:72:1b:56:17:05:32:84:95:11:64: 35:a6:37:25:1d:31:92:d1:6b:8f:38:2e:25:21:bb: 31:2a:43:8d:25:0d:92:d8:21:3e:08:e3:c0:23:98: ab:64:66:29:37:b6:8f:8f:9d:5c:1d:2f:2e:ec:f5: 1b:e3:e0:d9:69:ae:84:54:d8:43:88:d2:4c:5a:42: 11:f0:86:08:20:60:8f:aa:7c:50:ba:fc:71:54:7d: 0c:08:3a:84:e4:f1:98:05:c7:73:5d:1b:a4:56:41: 75:22:cf:8a:15:dc:5b:5f:fa:68:7d:60:11:28:04: 21:f6:ec:d1:5e:d5:75:3a:28:06:a7:c8:70:76:69: a7:69:8a:43:f6:5e:c6:e9:eb:f6:36:82:55:26:82: 0f:1c:e8:34:4c:93:8b:30:fd:0e:95:88:cb:1c:71: 01:cd:d8:ee:75:e8:ba:0a:45:b3:af:54:47:0d:dc: 72:d1:49:fd:ef:63:c4:c0:39:f7:ba:18:17:a0:8d: c9:bd:3a:c8:5d:45:67:75:38:4e:03:fc:d7:a4:f5: 21:6a:58:00:39:c2:e0:7f:f8:d7:0f:9d:27:a8:62: 84:09:17:9c:fa:4d:12:c6:a0:aa:27:49:e4:34:91: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:71:1F:DE:1C:85:52:FE:F0:63:1C:E1:2D:73:29:64:D5:91:F9 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:66:cc:cf:12:23:99:17:fe:ef:d6:42:79:b6:39:cc:ee:f8: a5:ad:00:b7:4f:8c:19:1c:94:5b:fb:a3:ac:b7:93:0b:fa:26: 70:93:14:10:4a:53:a1:71:27:e1:a5:99:ee:03:61:92:f4:1b: 14:be:55:5a:7d:7a:60:36:5e:20:02:fc:58:f9:8a:60:12:03: 18:a7:9f:e2:4c:c8:cc:1e:eb:55:85:7f:d1:98:16:d8:3d:a6: 88:36:ef:a8:e1:bc:ce:15:88:26:1f:c8:17:f1:96:98:d8:f3: 11:0a:e7:a9:cd:94:36:bc:08:f7:5a:f3:56:11:60:ab:4c:a7: 5e:55:18:28:c8:f4:3f:b0:b4:f8:06:80:20:58:17:0b:bf:1d: dc:fa:78:9f:2f:be:44:bd:f4:28:e6:44:0c:98:c4:e3:75:10: 70:59:f9:0b:7d:28:b2:47:40:d3:0c:7b:ee:85:97:26:9a:e1: c2:7f:93:24:ac:28:b3:db:c9:88:56:89:0c:cd:12:7c:d5:eb: 99:50:ed:e3:c1:99:0e:06:39:7b:bc:51:21:e3:f1:df:bb:07: 5b:96:53:cc:65:cb:52:fd:c6:4a:30:60:fb:5d:eb:af:8d:8c: c1:5d:40:50:42:aa:5e:a0:79:f3:1f:d1:80:3d:2d:a2:13:b6: 9a:f9:8d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwNTExMDM0NDExWhcNMjUwNTE4MDM0NDExWjAYMRYwFAYD VQQDEw02ODIwMWQwYy0zZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYk++k/rhkzOOpeW6oYxCAfQK3IbVhcFMoSVEWQ1pjclHTGS0WuPOC4lIbsx KkONJQ2S2CE+COPAI5irZGYpN7aPj51cHS8u7PUb4+DZaa6EVNhDiNJMWkIR8IYI IGCPqnxQuvxxVH0MCDqE5PGYBcdzXRukVkF1Is+KFdxbX/pofWARKAQh9uzRXtV1 OigGp8hwdmmnaYpD9l7G6ev2NoJVJoIPHOg0TJOLMP0OlYjLHHEBzdjudei6CkWz r1RHDdxy0Un972PEwDn3uhgXoI3JvTrIXUVndThOA/zXpPUhalgAOcLgf/jXD50n qGKECRec+k0SxqCqJ0nkNJHQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ4cR/e HIVS/vBjHOEtcylk1ZH5MB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAZszPEiOZF/7v1kJ5tjnM7vilrQC3T4wZHJRb+6Ost5ML+iZwkxQQ SlOhcSfhpZnuA2GS9BsUvlVafXpgNl4gAvxY+YpgEgMYp5/iTMjMHutVhX/RmBbY PaaINu+o4bzOFYgmH8gX8ZaY2PMRCuepzZQ2vAj3WvNWEWCrTKdeVRgoyPQ/sLT4 BoAgWBcLvx3c+nifL75EvfQo5kQMmMTjdRBwWfkLfSiyR0DTDHvuhZcmmuHCf5Mk rCiz28mIVokMzRJ81euZUO3jwZkOBjl7vFEh4/HfuwdbllPMZctS/cZKMGD7Xeuv jYzBXUBQQqpeoHnzH9GAPS2iE7aa+Y3m -----END CERTIFICATE-----Generated at Mon May 12 03:57:50 2025 by rpki-client