$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft File: LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json) Hash identifier: MkwUIoyqfziaE/cTutFbObepMv8xoebCqKfdBqODhm4= Subject key identifier: C5:CA:91:A9:40:5B:A3:67:C8:9E:B6:E7:9D:79:46:31:F9:78:80:69 Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36 Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636 Certificate serial: 0989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft Manifest number: 0979 Signing time: Fri 16 May 2025 20:26:09 +0000 Manifest this update: Fri 16 May 2025 20:26:08 +0000 Manifest next update: Fri 23 May 2025 20:26:08 +0000 Files and hashes: 1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: j6CWdkqfo+zncOJAzVQHdFnBIb+Vx/xpPpMRowmdssk=) 2: 87818166020D11EF916F0D65C4F9AE02.roa (hash: 4GMMhSURpIBkWAvEdhOIay2AAC4Jz1BwpUEUv1geigk=) 3: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: H4bAXJJ+0ihkBBeD63YdMNR3q/0ZrnIacu1H+UbOy6o=) 4: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: DwD2XfQzkUEDcTcYe00tSnenB6ZWlHETqrcMuPPWI98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636 Validity Not Before: May 16 20:26:08 2025 GMT Not After : May 23 20:26:08 2025 GMT Subject: CN=68279f60-e471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:7d:b8:a3:da:60:30:48:f1:99:a8:c8:b7: 42:9f:47:9a:93:13:8d:cc:20:cb:c9:db:ca:30:97: 55:13:85:72:29:1e:31:59:52:a3:62:45:8c:49:66: 39:82:cc:41:87:ca:46:34:0a:87:35:4c:ea:17:e6: ca:3c:89:b8:95:79:a0:95:92:3a:02:54:97:2b:c8: cc:1c:8e:8c:17:0f:a3:ec:e4:fe:ae:f4:af:a5:ef: 3f:ff:19:c2:a0:cb:d8:b1:d3:56:21:55:58:88:72: 98:2a:ee:bc:48:68:e7:cf:4e:ab:b8:79:70:85:b1: 58:17:35:43:64:d4:9d:70:c6:30:47:d2:75:f3:22: 72:8b:86:3c:a6:03:8e:90:9c:17:27:a3:db:d2:07: b6:62:a1:9d:86:81:5c:42:9d:a9:49:b1:e2:5e:0e: c4:81:cb:be:6f:fa:8f:7a:61:07:df:dc:cf:2a:bd: e6:bf:15:1b:a6:7d:41:fa:9c:bd:53:cb:b6:1c:21: 7c:f2:7f:00:cc:66:7d:2b:ae:9a:23:dd:14:a6:06: 5b:65:dc:a9:1c:13:51:53:df:3b:ad:b7:d7:91:11: 5d:d8:db:1f:09:ed:8c:43:eb:c8:2e:9a:d4:62:4d: f4:ee:aa:85:3d:cd:4e:56:87:59:5c:9e:1d:e0:ef: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CA:91:A9:40:5B:A3:67:C8:9E:B6:E7:9D:79:46:31:F9:78:80:69 X509v3 Authority Key Identifier: keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:dd:8d:55:a0:8f:8e:5d:a7:70:68:23:1b:a8:3b:04:0e:6b: a2:90:59:80:7c:1a:fc:3f:60:46:b9:64:f9:1c:8f:29:92:85: 9d:43:11:0f:f5:7a:f5:c9:fe:3a:d4:f7:b5:8e:5b:f7:44:da: 95:cc:30:94:76:7e:f1:7d:2f:42:47:38:5f:df:98:b1:e7:9f: fb:5e:69:0c:43:50:5d:fe:0c:d1:9f:86:4a:98:44:3f:2c:71: e8:12:db:44:30:ff:3f:f3:e2:a1:bf:ea:e5:6a:ca:7a:c0:fb: 11:7d:4b:6d:90:89:47:37:83:77:11:35:c4:f6:d1:fe:f6:bf: ff:94:19:62:42:7b:a3:3e:b3:d9:ac:85:4b:6d:11:84:06:3e: 40:60:9d:63:cf:10:c5:13:bc:44:d1:84:04:d6:1d:0a:0e:be: a9:19:b2:d6:b1:0f:6e:20:11:8a:08:90:61:43:5a:0f:a1:f3: 4c:c2:bb:8e:ab:d9:af:b3:38:22:0e:83:72:dc:2e:58:4c:04: 56:14:d7:0e:7b:97:e3:4f:1a:d6:73:e3:89:5c:ad:e4:47:06: 59:10:1c:7b:32:94:37:23:2e:7f:ad:f9:9a:7b:3a:d5:08:f1: de:82:55:1f:9d:32:c5:f5:75:6d:cb:ec:7e:4b:7f:6d:da:62: 06:74:17:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5MEMxMTAvBgNVBAUTKDJENTg5ODkwNDhDMjE5RjAxMDg4QUU3MkJGQUUwOTcw REY1REE2MzYwHhcNMjUwNTE2MjAyNjA4WhcNMjUwNTIzMjAyNjA4WjAYMRYwFAYD VQQDEw02ODI3OWY2MC1lNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3np9uKPaYDBI8ZmoyLdCn0eakxONzCDLydvKMJdVE4VyKR4xWVKjYkWMSWY5 gsxBh8pGNAqHNUzqF+bKPIm4lXmglZI6AlSXK8jMHI6MFw+j7OT+rvSvpe8//xnC oMvYsdNWIVVYiHKYKu68SGjnz06ruHlwhbFYFzVDZNSdcMYwR9J18yJyi4Y8pgOO kJwXJ6Pb0ge2YqGdhoFcQp2pSbHiXg7Egcu+b/qPemEH39zPKr3mvxUbpn1B+py9 U8u2HCF88n8AzGZ9K66aI90UpgZbZdypHBNRU987rbfXkRFd2NsfCe2MQ+vILprU Yk307qqFPc1OVodZXJ4d4O8F5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXKkalA W6NnyJ625515RjH5eIBpMB8GA1UdIwQYMBaAFC1YmJBIwhnwEIiucr+uCXDfXaY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjkwQy9EM0Q1ODQ4QzhG QkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dmQVFpSzV5djY0SmNOOWRw alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWaVlrRWpDR2ZBUWlLNXl2NjRKY045ZHBqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjkwQy9EM0Q1ODQ4QzhGQkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dm QVFpSzV5djY0SmNOOWRwalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC83Y1VoI+OXadwaCMbqDsEDmuikFmAfBr8P2BGuWT5HI8pkoWdQxEP 9Xr1yf461Pe1jlv3RNqVzDCUdn7xfS9CRzhf35ix55/7XmkMQ1Bd/gzRn4ZKmEQ/ LHHoEttEMP8/8+Khv+rlasp6wPsRfUttkIlHN4N3ETXE9tH+9r//lBliQnujPrPZ rIVLbRGEBj5AYJ1jzxDFE7xE0YQE1h0KDr6pGbLWsQ9uIBGKCJBhQ1oPofNMwruO q9mvszgiDoNy3C5YTARWFNcOe5fjTxrWc+OJXK3kRwZZEBx7MpQ3Iy5/rfmaezrV CPHeglUfnTLF9XVty+x+S39t2mIGdBdx -----END CERTIFICATE-----Generated at Fri May 16 22:48:56 2025 by rpki-client