$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: yXKpjH/PI+E7uF+8rrOJWwIlVHv1sC/ySUl0Y8BDqCI= Subject key identifier: C5:80:B0:46:32:9E:32:E6:A6:90:C5:16:05:39:86:C5:7A:54:05:A3 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0B24 Signing time: Sat 10 May 2025 19:01:36 +0000 Manifest this update: Sat 10 May 2025 19:01:35 +0000 Manifest next update: Sat 17 May 2025 19:01:35 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: C6lI4Z8jgMHpBaqZ3FBR3T95qPe/2UJ4VHL0p/GuAIU=) 2: E57CEB8E15BC11F0B0C4DA24C4F9AE02.roa (hash: xt39h14o1313pmbs36BQLGWrDIIjLUsLHdJ1IsYxI9s=) 3: 088BBCAE15BD11F0A1CED525C4F9AE02.roa (hash: TPVp9VWOXR8oVOp+7fMuRvb11VEEdHgj+iQi4wf2KDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: May 10 19:01:35 2025 GMT Not After : May 17 19:01:35 2025 GMT Subject: CN=681fa28f-8ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:7d:9a:9b:49:19:e8:d6:da:77:31:59:71: c7:1d:e9:99:82:8e:75:5b:31:26:eb:07:48:b1:67: 34:60:75:f5:0b:d5:eb:5a:a6:7e:bd:d9:16:21:2f: 09:b6:aa:0b:f5:85:90:e3:d2:a7:b0:83:60:e2:d6: a1:6b:e4:4b:d5:b2:c4:cb:38:d5:4c:0a:b0:cf:ba: 01:34:57:98:b0:56:c5:93:04:2e:de:ce:4e:54:64: 7c:5f:0c:9e:ec:de:75:44:8a:46:ac:1e:1e:1a:2f: 81:b0:a5:3a:8e:4d:cc:40:06:23:0e:6b:d2:d2:b5: fd:ef:69:20:49:b6:78:49:02:de:52:f6:a8:84:5b: 19:00:4d:70:a3:55:d5:8e:1e:5a:9c:b5:f5:bd:5e: 65:e5:b8:c7:0a:bd:dd:a7:e9:32:7a:1d:48:f1:82: 5d:36:a8:58:a2:e6:01:70:81:2e:95:26:2d:04:e5: 89:e2:b1:d8:a6:e0:97:50:c6:67:2b:0c:3b:f0:7f: e0:f2:1d:b2:f4:bc:30:c8:9f:6d:e0:93:56:50:bf: a6:8e:9b:b1:7a:ac:42:93:b0:f3:09:84:1a:9c:04: f5:0e:dd:83:da:97:34:b9:85:84:fc:f3:11:f2:8c: 3e:af:27:f4:2a:18:2c:d0:30:59:7a:be:51:e1:b1: f9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:80:B0:46:32:9E:32:E6:A6:90:C5:16:05:39:86:C5:7A:54:05:A3 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:12:fd:73:f2:15:f2:75:0a:40:ec:d7:60:78:a7:7c:96:11: ec:73:0b:87:ef:44:e5:d3:78:13:87:fb:80:26:6e:88:99:b0: 0e:00:9f:cf:21:c3:f2:34:55:3f:fb:62:9a:05:33:6c:ba:6c: c0:06:f0:bc:d7:13:73:97:eb:a4:20:e9:98:6d:a5:da:d1:04: 59:4d:db:13:d0:b7:2b:d7:03:fb:d5:9e:f1:9e:b1:3c:af:fd: ba:bd:e5:0b:0b:c3:7a:e0:ce:47:c9:bf:90:5f:93:7e:d1:9a: 3b:56:07:3d:d9:e4:c9:0c:db:d8:73:2f:6d:ad:cf:5d:b5:69: dc:55:58:4d:94:83:ab:43:b2:20:6a:02:38:5c:19:c2:53:0e: da:0b:87:7a:8c:1d:52:9c:08:48:26:e7:7e:78:8e:f4:52:c0: 9f:39:e0:4f:9d:0b:2b:f0:1b:ea:4a:09:28:22:ac:dc:c4:19: bf:84:21:d1:04:81:bc:91:4b:13:7d:0e:4d:7e:c5:86:d9:3e: 0e:ae:ee:c6:a8:0e:9f:ab:1c:d2:46:45:2b:60:85:0a:4f:73: 3c:9a:df:11:48:e2:94:1e:a5:5a:b7:be:98:7d:71:e1:86:72: 51:d9:6b:8f:19:63:13:13:e8:e7:37:c3:3c:5e:97:1e:de:1d: 22:4d:26:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjUwNTEwMTkwMTM1WhcNMjUwNTE3MTkwMTM1WjAYMRYwFAYD VQQDEw02ODFmYTI4Zi04Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Nh9mptJGejW2ncxWXHHHemZgo51WzEm6wdIsWc0YHX1C9XrWqZ+vdkWIS8J tqoL9YWQ49KnsINg4taha+RL1bLEyzjVTAqwz7oBNFeYsFbFkwQu3s5OVGR8Xwye 7N51RIpGrB4eGi+BsKU6jk3MQAYjDmvS0rX972kgSbZ4SQLeUvaohFsZAE1wo1XV jh5anLX1vV5l5bjHCr3dp+kyeh1I8YJdNqhYouYBcIEulSYtBOWJ4rHYpuCXUMZn Kww78H/g8h2y9LwwyJ9t4JNWUL+mjpuxeqxCk7DzCYQanAT1Dt2D2pc0uYWE/PMR 8ow+ryf0Khgs0DBZer5R4bH5iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWAsEYy njLmppDFFgU5hsV6VAWjMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKEv1z8hXydQpA7NdgeKd8lhHscwuH70Tl03gTh/uAJm6ImbAOAJ/P IcPyNFU/+2KaBTNsumzABvC81xNzl+ukIOmYbaXa0QRZTdsT0Lcr1wP71Z7xnrE8 r/26veULC8N64M5Hyb+QX5N+0Zo7Vgc92eTJDNvYcy9trc9dtWncVVhNlIOrQ7Ig agI4XBnCUw7aC4d6jB1SnAhIJud+eI70UsCfOeBPnQsr8BvqSgkoIqzcxBm/hCHR BIG8kUsTfQ5NfsWG2T4Oru7GqA6fqxzSRkUrYIUKT3M8mt8RSOKUHqVat76YfXHh hnJR2WuPGWMTE+jnN8M8Xpce3h0iTSam -----END CERTIFICATE-----Generated at Sun May 11 22:35:32 2025 by rpki-client