$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: p2uMJJyskt1h26kNRN4XepyhhVGok4sYrnR9BXw0DHE= Subject key identifier: A7:97:13:90:CE:61:68:43:FA:23:F1:13:90:02:1A:35:1D:B7:76:95 Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: C0 Signing time: Thu 15 May 2025 05:11:26 +0000 Manifest this update: Thu 15 May 2025 05:11:26 +0000 Manifest next update: Thu 22 May 2025 05:11:26 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: tSsTSnYNE0uatKZqfpMSXaSC3p8tJQa6dUGL1Eg0COc=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: zjHSWjEAJbElSjtvgLzBTS12ZS/2A0buXGVs+XwBcIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Validity Not Before: May 15 05:11:26 2025 GMT Not After : May 22 05:11:26 2025 GMT Subject: CN=6825777e-8080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:2a:ef:f6:45:21:af:d7:6e:3f:ba:54:5d: 53:99:ed:d4:b2:c9:1a:8f:91:cf:cd:a1:60:60:ff: 2b:4e:dc:06:1e:a4:84:26:45:d9:1a:7a:25:5e:86: d7:62:f3:d0:c8:48:e4:bd:eb:aa:57:b9:90:0d:d8: 72:57:d0:72:1b:d6:40:21:8a:61:85:92:1b:b2:99: 00:e0:33:8a:00:bd:d9:e9:4c:73:90:a4:f7:95:95: 29:5a:5f:57:ad:03:b5:3c:7b:f9:bc:d9:03:f6:0d: 80:33:3d:6e:8a:44:0e:9a:3f:10:14:bb:08:39:44: b6:16:2c:89:b4:e1:57:85:33:54:df:2b:fa:d5:f9: 8a:5b:ce:03:6a:82:f9:bf:b6:25:e1:0d:18:14:09: a1:43:e2:ea:36:b3:42:48:a4:4c:60:c7:a0:95:12: 9d:61:61:15:27:0a:de:43:a3:15:7d:e9:23:a5:1d: d7:39:ab:b8:bb:d2:f2:02:72:91:d3:50:46:0e:d5: de:89:4b:91:48:3f:72:4e:7a:3e:05:9c:34:2d:5a: 14:a1:57:4e:52:3e:2e:46:d2:ae:37:d9:eb:e5:4f: 33:7e:5e:ae:ff:ba:50:82:78:96:25:7b:72:e0:35: 68:6d:c6:56:45:75:70:a5:b1:fc:9b:94:0a:43:9b: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:13:90:CE:61:68:43:FA:23:F1:13:90:02:1A:35:1D:B7:76:95 X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:59:98:2f:54:2a:e6:05:14:20:4c:3d:02:70:9d:b9:fc:2d: 5d:f3:f2:69:cb:4c:cb:41:f1:2a:7e:7b:fc:ce:60:bf:8c:04: da:eb:1e:42:e2:7b:a1:15:7b:53:7f:f7:51:11:9b:4b:f2:f9: 9e:ae:6c:5a:17:74:37:e9:f4:86:9d:ef:6d:a9:cd:06:bf:b2: 5e:87:26:67:9f:f4:fc:34:c2:42:01:2f:22:93:0c:cd:d2:3a: 48:f1:3c:0f:11:72:76:54:8f:31:90:5b:df:13:38:6a:df:7b: 6b:34:9a:91:b9:b2:b3:0f:79:69:04:fe:05:a3:e9:c6:74:2f: c1:34:8e:54:2b:f4:55:0c:74:38:ca:7a:18:2a:c7:33:79:d3: 39:9b:bc:4c:a5:96:99:a7:46:31:3d:0d:2b:e1:64:db:8c:72: 14:c1:82:2f:75:c4:fe:55:da:dc:e6:e7:f3:1e:2b:e2:8f:09: 1a:e1:43:6a:e1:28:1d:45:9f:be:b6:74:10:50:c4:e7:94:bb: 0d:b4:4d:a5:6c:a1:b5:23:2b:88:9c:32:2c:e8:f2:a5:04:ae: a0:6d:2b:c9:4e:85:45:bb:42:8a:18:95:77:14:a5:5c:36:e3: a8:4a:25:64:e2:e1:ef:e2:7e:6c:2d:20:5e:49:2b:fc:ee:39: c9:fb:91:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNTE1MDUxMTI2WhcNMjUwNTIyMDUxMTI2WjAYMRYwFAYD VQQDEw02ODI1Nzc3ZS04MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD0q7/ZFIa/Xbj+6VF1Tme3Usskaj5HPzaFgYP8rTtwGHqSEJkXZGnolXobX YvPQyEjkveuqV7mQDdhyV9ByG9ZAIYphhZIbspkA4DOKAL3Z6UxzkKT3lZUpWl9X rQO1PHv5vNkD9g2AMz1uikQOmj8QFLsIOUS2FiyJtOFXhTNU3yv61fmKW84DaoL5 v7Yl4Q0YFAmhQ+LqNrNCSKRMYMeglRKdYWEVJwreQ6MVfekjpR3XOau4u9LyAnKR 01BGDtXeiUuRSD9yTno+BZw0LVoUoVdOUj4uRtKuN9nr5U8zfl6u/7pQgniWJXty 4DVobcZWRXVwpbH8m5QKQ5vpDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeXE5DO YWhD+iPxE5ACGjUdt3aVMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPWZgvVCrmBRQgTD0CcJ25/C1d8/Jpy0zLQfEqfnv8zmC/jATa6x5C 4nuhFXtTf/dREZtL8vmermxaF3Q36fSGne9tqc0Gv7JehyZnn/T8NMJCAS8ikwzN 0jpI8TwPEXJ2VI8xkFvfEzhq33trNJqRubKzD3lpBP4Fo+nGdC/BNI5UK/RVDHQ4 ynoYKsczedM5m7xMpZaZp0YxPQ0r4WTbjHIUwYIvdcT+Vdrc5ufzHivijwka4UNq 4SgdRZ++tnQQUMTnlLsNtE2lbKG1IyuInDIs6PKlBK6gbSvJToVFu0KKGJV3FKVc NuOoSiVk4uHv4n5sLSBeSSv87jnJ+5Hx -----END CERTIFICATE-----Generated at Sat May 17 03:31:30 2025 by rpki-client