$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: xYmJljIM8teUm0+xr92WpReRIdjDhRSJu0kTBm//Rho= Subject key identifier: 79:78:C0:DD:45:65:84:B4:C2:B7:16:09:36:5D:B0:69:18:5D:F8:A0 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 1342 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 12EB Signing time: Mon 12 May 2025 17:02:01 +0000 Manifest this update: Mon 12 May 2025 17:02:00 +0000 Manifest next update: Mon 19 May 2025 17:02:00 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: MLi9k7ljE+2vrq3GK9OIwW6LjidN7rBEmNr605T1zy0=) 2: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 3: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: ijr6UDNyvj4aysISbjMaLFQ8kk4sQ7342WXhcB82+Yo=) 4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) 5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: May 12 17:02:00 2025 GMT Not After : May 19 17:02:00 2025 GMT Subject: CN=68222989-3084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:6f:39:55:c7:14:0c:e7:f7:4a:97:4d:33: e2:6d:92:d9:0d:eb:3e:d7:4a:9d:c1:0b:3c:fd:05: 15:16:84:55:d7:42:01:83:e1:07:ed:5f:e2:f4:33: 75:91:1d:95:6d:80:16:4b:5f:ad:15:76:a9:c5:c8: 51:b9:87:e5:f9:5e:33:c9:45:f3:c2:94:49:72:69: 7d:46:d8:83:e0:53:b8:c2:78:39:60:51:0e:9c:56: a5:0d:34:78:db:b4:0c:e2:6e:a1:4d:9e:31:91:86: bb:03:35:f8:a5:13:de:36:df:49:74:2d:3d:db:58: 55:cb:6c:be:da:f8:c0:80:bc:1a:e8:d9:b5:b2:0f: f3:02:87:3a:26:98:b8:00:9b:89:ff:21:99:81:db: fb:1a:82:5e:9e:a6:26:d5:31:5e:2a:b3:5a:2d:84: 9a:f3:33:c0:97:01:49:5d:d5:87:a4:98:6f:9d:6b: a3:7e:d4:20:7d:50:1a:54:70:74:c0:39:0a:c0:7e: 73:c7:1d:aa:97:1e:69:6b:a0:fa:c4:fb:96:85:2b: 56:ec:ad:1c:ee:bb:97:ce:47:7a:4b:0d:10:c7:46: 66:88:a3:15:20:8b:d2:18:7c:bf:b2:03:5e:06:fd: 73:a6:0e:4a:c0:62:ca:43:b8:5f:1f:2d:2e:5c:c6: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:78:C0:DD:45:65:84:B4:C2:B7:16:09:36:5D:B0:69:18:5D:F8:A0 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:52:cf:88:63:ec:01:2d:6b:82:33:25:ea:e3:1f:3b:4f:d8: 86:8c:05:96:da:ae:53:7b:b8:e9:5c:03:33:1c:3b:32:b6:45: b5:5a:72:79:1d:2d:72:36:de:c5:a3:cd:e6:23:19:d7:7b:4e: 8b:8a:ef:78:97:9f:c1:9a:bd:44:b5:53:a9:55:f4:ec:b6:5a: de:3f:be:6e:a6:9d:44:0b:3c:e6:cc:7a:be:8d:76:30:d3:05: 98:db:93:c1:fc:f8:a0:62:5f:e1:42:77:81:9c:56:a4:84:76: a5:cc:a4:dc:33:7c:8e:6b:71:a9:2d:8f:cf:80:23:09:6f:b4: ce:2b:15:cc:56:b3:1d:25:8d:2e:0c:16:b8:5d:4a:56:7f:52: 18:e1:77:21:9e:a6:3c:5f:1e:76:a8:da:f7:18:ce:3d:6f:c5: 70:aa:c1:d4:69:f2:45:9a:ad:25:6a:54:7d:2b:da:8d:5d:1b: f6:85:e6:13:42:55:5f:29:9e:aa:4d:49:57:1d:95:78:8e:60: a8:7d:bb:fc:2c:18:11:13:f8:5f:fd:b5:b7:78:8d:86:fb:60: 35:7a:8d:ca:fa:e8:c5:64:13:7d:b9:cd:b0:b4:56:48:27:45: 78:04:4f:e1:03:33:63:5a:23:d3:e9:d7:2a:fa:54:1a:80:62: a1:46:ca:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUwNTEyMTcwMjAwWhcNMjUwNTE5MTcwMjAwWjAYMRYwFAYD VQQDEw02ODIyMjk4OS0zMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3ZvOVXHFAzn90qXTTPibZLZDes+10qdwQs8/QUVFoRV10IBg+EH7V/i9DN1 kR2VbYAWS1+tFXapxchRuYfl+V4zyUXzwpRJcml9RtiD4FO4wng5YFEOnFalDTR4 27QM4m6hTZ4xkYa7AzX4pRPeNt9JdC0921hVy2y+2vjAgLwa6Nm1sg/zAoc6Jpi4 AJuJ/yGZgdv7GoJenqYm1TFeKrNaLYSa8zPAlwFJXdWHpJhvnWujftQgfVAaVHB0 wDkKwH5zxx2qlx5pa6D6xPuWhStW7K0c7ruXzkd6Sw0Qx0ZmiKMVIIvSGHy/sgNe Bv1zpg5KwGLKQ7hfHy0uXMYEyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl4wN1F ZYS0wrcWCTZdsGkYXfigMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUs+IY+wBLWuCMyXq4x87T9iGjAWW2q5Te7jpXAMzHDsytkW1WnJ5 HS1yNt7Fo83mIxnXe06Liu94l5/Bmr1EtVOpVfTstlreP75upp1ECzzmzHq+jXYw 0wWY25PB/PigYl/hQneBnFakhHalzKTcM3yOa3GpLY/PgCMJb7TOKxXMVrMdJY0u DBa4XUpWf1IY4XchnqY8Xx52qNr3GM49b8VwqsHUafJFmq0lalR9K9qNXRv2heYT QlVfKZ6qTUlXHZV4jmCofbv8LBgRE/hf/bW3eI2G+2A1eo3K+ujFZBN9uc2wtFZI J0V4BE/hAzNjWiPT6dcq+lQagGKhRspU -----END CERTIFICATE-----Generated at Tue May 13 22:04:04 2025 by rpki-client