$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft File: lJtkel-MefbaSuNtngDETgKpp6Q.mft (raw, json) Hash identifier: DTSrqnbXCVgXN8CEbF+rRT2F/7rYf9kuVsaIJlBz8V4= Subject key identifier: E6:77:35:61:17:BE:03:BD:35:A1:B3:E5:FD:A1:51:A1:54:A8:B7:33 Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 Certificate issuer: /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft Manifest number: 011C Signing time: Thu 15 May 2025 04:11:29 +0000 Manifest this update: Thu 15 May 2025 04:11:28 +0000 Manifest next update: Thu 22 May 2025 04:11:28 +0000 Files and hashes: 1: lJtkel-MefbaSuNtngDETgKpp6Q.crl (hash: FrVno1MHaS57qTTP1yVTQ+x7RF7UW+DVWLqjyk3/0Bg=) 2: 1FB96962DA1311EE81216D86C4F9AE02.roa (hash: 322ioaBzAzi6yUpdAJJxn+TJMCIFPpfe4ryfjRmmpZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D84, serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4 Validity Not Before: May 15 04:11:28 2025 GMT Not After : May 22 04:11:28 2025 GMT Subject: CN=68256970-510c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:3a:b0:ca:bf:61:24:18:b7:be:39:75:b7: 6d:13:a9:80:70:db:d1:59:90:66:a2:3a:49:4c:68: e4:1e:31:8f:eb:73:11:ec:83:42:1a:13:3d:a3:c8: 32:34:e7:2e:d9:1f:69:0e:93:46:1e:cd:b7:32:ae: b9:12:6f:c4:03:1e:cc:d5:68:29:30:d9:15:31:c9: f6:9f:ff:45:38:af:2a:15:75:d7:d5:51:f0:4e:f8: 70:9d:6c:c4:fe:d0:3c:70:36:b9:f6:eb:60:7c:45: 2e:f4:2c:f4:aa:7a:95:b4:84:7b:72:a1:8c:f5:fc: 71:e2:fb:20:4f:7f:73:5f:3a:d6:38:2e:0b:31:fa: 92:ae:aa:84:dc:27:06:17:4e:e6:27:64:f2:c9:b8: 73:5b:fd:04:86:08:8c:30:a8:c1:fb:cd:b2:f1:ed: 5f:2e:89:45:e2:3e:4e:88:1a:bb:16:50:f2:5f:93: 6f:82:f3:bb:5a:11:c4:f3:1f:80:07:e6:c8:bf:a8: ce:4f:72:d6:7e:20:6f:37:17:80:38:b5:64:ca:d8: 88:9c:40:6c:1e:08:99:b7:7c:01:bd:bf:ab:6c:cf: 8e:cf:6f:ee:d0:dc:69:dc:c5:af:62:45:90:d9:93: c7:08:33:db:08:69:62:04:7a:be:dd:65:9b:e1:a2: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:35:61:17:BE:03:BD:35:A1:B3:E5:FD:A1:51:A1:54:A8:B7:33 X509v3 Authority Key Identifier: keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:48:32:5d:8e:5e:90:91:c3:a2:2e:87:ba:1b:75:3f:2e:8b: 05:09:67:4e:49:9a:e5:5c:ec:ed:ce:2b:b5:68:04:b1:e8:00: de:ae:c0:f5:77:b5:8d:62:21:cd:52:a7:a2:6b:ea:75:3a:92: c4:e4:48:70:76:75:5e:a5:71:eb:00:9e:e2:e3:31:ba:fc:b8: 5e:28:b4:dc:26:50:6e:68:64:53:e4:aa:35:d2:4b:9b:c5:8e: 8d:36:bd:3d:2f:ee:a4:73:92:47:a9:e6:25:46:bb:dd:57:9a: f2:76:f5:7c:58:49:4b:02:b1:9f:78:59:03:a6:19:24:af:c0: 53:70:7e:3c:5f:55:0e:b7:d8:7a:86:cd:68:cf:70:f8:3f:bf: 4d:ad:97:27:22:db:df:ae:1b:d1:e9:11:f8:19:0c:e6:7a:e9: 1f:f1:40:67:7f:e6:cf:d0:61:57:25:9a:2c:0f:aa:f1:52:7c: d1:16:87:d5:86:95:d5:8a:d3:e9:fc:e8:91:61:6e:e1:d4:13: a2:fe:b0:dd:12:cd:04:08:88:80:7e:b9:cb:e2:e6:f3:f8:c3: b9:1e:a8:41:00:20:12:d8:bd:46:50:cf:38:b6:dd:55:37:e2: 15:db:f4:84:78:2b:df:07:a9:ea:62:5f:75:a9:fd:22:7a:c4: 7b:af:bb:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVEODQxMTAvBgNVBAUTKDk0OUI2NDdBNUY4Qzc5RjZEQTRBRTM2RDlFMDBDNDRF MDJBOUE3QTQwHhcNMjUwNTE1MDQxMTI4WhcNMjUwNTIyMDQxMTI4WjAYMRYwFAYD VQQDEw02ODI1Njk3MC01MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVI6sMq/YSQYt745dbdtE6mAcNvRWZBmojpJTGjkHjGP63MR7INCGhM9o8gy NOcu2R9pDpNGHs23Mq65Em/EAx7M1WgpMNkVMcn2n/9FOK8qFXXX1VHwTvhwnWzE /tA8cDa59utgfEUu9Cz0qnqVtIR7cqGM9fxx4vsgT39zXzrWOC4LMfqSrqqE3CcG F07mJ2TyybhzW/0EhgiMMKjB+82y8e1fLolF4j5OiBq7FlDyX5NvgvO7WhHE8x+A B+bIv6jOT3LWfiBvNxeAOLVkytiInEBsHgiZt3wBvb+rbM+Oz2/u0Nxp3MWvYkWQ 2ZPHCDPbCGliBHq+3WWb4aLKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ3NWEX vgO9NaGz5f2hUaFUqLczMB8GA1UdIwQYMBaAFJSbZHpfjHn22krjbZ4AxE4Cqaek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ4NC9GODA2OTQzQzg2 QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVmYmFTdU50bmdERVRnS3Bw NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xKdGtlbC1NZWZiYVN1TnRuZ0RFVGdLcHA2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ4NC9GODA2OTQzQzg2QzgxMUVFQUFEMzQ0MTRDNEY5QUUwMi9sSnRrZWwtTWVm YmFTdU50bmdERVRnS3BwNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxSDJdjl6QkcOiLoe6G3U/LosFCWdOSZrlXOztziu1aASx6ADersD1 d7WNYiHNUqeia+p1OpLE5EhwdnVepXHrAJ7i4zG6/LheKLTcJlBuaGRT5Ko10kub xY6NNr09L+6kc5JHqeYlRrvdV5rydvV8WElLArGfeFkDphkkr8BTcH48X1UOt9h6 hs1oz3D4P79NrZcnItvfrhvR6RH4GQzmeukf8UBnf+bP0GFXJZosD6rxUnzRFofV hpXVitPp/OiRYW7h1BOi/rDdEs0ECIiAfrnL4ubz+MO5HqhBACAS2L1GUM84tt1V N+IV2/SEeCvfB6nqYl91qf0iesR7r7u6 -----END CERTIFICATE-----Generated at Fri May 16 18:18:21 2025 by rpki-client