$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: NhYqdC5h/zMJBn/USxagfkLSBmgrp26ID6SX4NHnQqU= Subject key identifier: B1:3C:C0:38:11:59:27:51:4B:89:9E:7A:AF:E5:8D:73:AE:1C:31:33 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 0115 Signing time: Wed 07 May 2025 03:59:08 +0000 Manifest this update: Wed 07 May 2025 03:59:08 +0000 Manifest next update: Wed 14 May 2025 03:59:08 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: IourcsJlFp9hnzVWena6gtMCWnHc0ntoGtmKpnFP+AA=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: Mp31Dl4GGrwfX+s1p5DZGdrkWL4P3e5ufUEs+Tl9/MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 03:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5, serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: May 7 03:59:08 2025 GMT Not After : May 14 03:59:08 2025 GMT Subject: CN=681ada8c-0750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:53:13:ee:65:fc:88:a7:e5:26:b5:2b:e1: de:6b:65:81:d2:37:1f:da:3a:b5:01:4f:01:84:f5: d8:22:d9:c9:e9:93:68:2f:8f:83:8b:80:fc:89:fb: 9d:d6:33:56:eb:0d:ff:cc:ea:80:51:0a:8e:02:11: 4b:2d:1c:91:7b:95:d6:d8:d0:1d:ec:6f:bf:e8:e8: 4d:88:b3:9d:e5:d6:0f:95:7d:27:a2:dd:e3:36:21: ca:25:ed:7a:60:57:67:09:c4:55:6d:19:d1:a7:c9: fc:0f:fa:b3:94:0b:51:29:ea:c9:0f:95:82:83:5c: 33:98:64:13:f7:22:14:6a:9c:99:f2:07:c1:b6:7e: be:7f:eb:76:cc:da:bc:10:da:72:42:1d:23:97:75: a6:1f:0c:8e:f4:b8:a3:5a:ec:cc:15:e1:bd:69:22: 77:fb:e2:43:eb:ff:c3:c3:48:6a:51:0e:5d:30:51: 20:ff:0a:2a:5a:98:24:1a:9b:e7:fe:37:e9:c6:0e: 2a:13:22:a9:68:55:cb:28:96:f1:68:ce:72:76:49: 3c:37:c6:c5:e6:b9:d7:00:e5:c1:9a:da:72:21:d5: c1:04:c0:4e:a2:36:3a:d6:f2:02:93:d4:34:2c:31: 8d:5a:5e:11:4b:31:27:fd:b4:91:c0:bd:18:65:10: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3C:C0:38:11:59:27:51:4B:89:9E:7A:AF:E5:8D:73:AE:1C:31:33 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d5:44:ca:15:9b:75:0f:ab:e4:22:a1:d9:15:a3:9c:42:8c: 89:44:cb:df:a4:17:9e:5f:26:cf:77:ac:bf:4b:88:16:76:a7: b0:fd:bc:27:da:9c:f9:98:5e:eb:15:2b:5a:7f:e7:d1:1b:39: 4b:4d:2e:91:e2:c5:d1:fe:d4:bb:c8:fe:8d:48:c4:a3:c6:ab: d3:67:1c:29:c0:11:5e:33:63:b1:56:72:ac:68:05:8c:76:e8: dc:1a:84:db:d3:a2:a6:de:c2:7f:78:18:b7:86:07:d8:17:b8: 28:91:1f:f8:34:da:37:d3:ea:f0:a6:aa:de:97:d4:de:6b:7f: 81:dc:7a:40:4a:52:fe:16:ba:73:06:6d:5a:81:c5:96:bc:60: 04:07:3b:ad:32:23:72:33:52:1a:31:20:5c:3c:4a:c0:e6:ec: fd:1a:13:4a:25:53:20:f4:41:70:b5:75:58:bd:43:4f:2a:b6: b7:75:f9:4a:fb:3c:80:cc:23:64:7a:70:b6:6c:f2:4b:15:94: e9:b3:8c:d9:44:92:e7:24:33:72:8b:0f:02:eb:9f:3f:be:f7: 76:50:0a:4b:0d:5a:46:f8:04:4e:37:3e:78:99:c2:4f:6f:7b: 16:79:95:89:99:86:f5:cd:91:94:7c:28:12:03:0d:5b:68:6d: 5e:27:90:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdERDUxMTAvBgNVBAUTKDk0QzNFRThDQzA3MjRFQkEzQ0IxMDMyNEY5RURCODFC QUM4NTAzMjAwHhcNMjUwNTA3MDM1OTA4WhcNMjUwNTE0MDM1OTA4WjAYMRYwFAYD VQQDEw02ODFhZGE4Yy0wNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKRTE+5l/Iin5Sa1K+Hea2WB0jcf2jq1AU8BhPXYItnJ6ZNoL4+Di4D8ifud 1jNW6w3/zOqAUQqOAhFLLRyRe5XW2NAd7G+/6OhNiLOd5dYPlX0not3jNiHKJe16 YFdnCcRVbRnRp8n8D/qzlAtRKerJD5WCg1wzmGQT9yIUapyZ8gfBtn6+f+t2zNq8 ENpyQh0jl3WmHwyO9LijWuzMFeG9aSJ3++JD6//Dw0hqUQ5dMFEg/woqWpgkGpvn /jfpxg4qEyKpaFXLKJbxaM5ydkk8N8bF5rnXAOXBmtpyIdXBBMBOojY61vICk9Q0 LDGNWl4RSzEn/bSRwL0YZRDlywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE8wDgR WSdRS4meeq/ljXOuHDEzMB8GA1UdIwQYMBaAFJTD7ozAck66PLEDJPntuBushQMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0RENS8xNkQ0QjBEQzgx Q0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRybzhzUU1rLWUyNEc2eUZB eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0RENS8xNkQ0QjBEQzgxQ0YxMUVFQkMxNTJGNjBDNEY5QUUwMi9sTVB1ak1CeVRy bzhzUU1rLWUyNEc2eUZBeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ1UTKFZt1D6vkIqHZFaOcQoyJRMvfpBeeXybPd6y/S4gWdqew/bwn 2pz5mF7rFStaf+fRGzlLTS6R4sXR/tS7yP6NSMSjxqvTZxwpwBFeM2OxVnKsaAWM dujcGoTb06Km3sJ/eBi3hgfYF7gokR/4NNo30+rwpqrel9Tea3+B3HpASlL+Frpz Bm1agcWWvGAEBzutMiNyM1IaMSBcPErA5uz9GhNKJVMg9EFwtXVYvUNPKra3dflK +zyAzCNkenC2bPJLFZTps4zZRJLnJDNyiw8C658/vvd2UApLDVpG+ARONz54mcJP b3sWeZWJmYb1zZGUfCgSAw1baG1eJ5CQ -----END CERTIFICATE-----Generated at Fri May 9 02:49:04 2025 by rpki-client