$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft File: ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json) Hash identifier: fW1WGmB4IGDO939YwEZtf3BF/Xgc8ZK2RkTLVerl9EQ= Subject key identifier: 99:F6:72:C2:F4:68:23:BD:31:31:FB:42:F6:BF:93:0D:A7:5C:CC:AF Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft Manifest number: 02A1 Signing time: Sun 11 May 2025 01:03:02 +0000 Manifest this update: Sun 11 May 2025 01:03:02 +0000 Manifest next update: Sun 18 May 2025 01:03:02 +0000 Files and hashes: 1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: /ALjXakYR3TrsSQ7235DjmMNvB3IwNDo4k711f1PEkM=) 2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: QEMOAgpk78T4cfgnhZBQcgORRh937yPLAJRwPHTKv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF Validity Not Before: May 11 01:03:02 2025 GMT Not After : May 18 01:03:02 2025 GMT Subject: CN=681ff746-f063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:42:9d:ff:d4:12:03:4b:23:cb:3d:8d:6f: 78:7a:0e:b1:38:5c:2e:b6:43:53:29:6e:de:9e:7d: f8:d2:b8:8b:75:38:f1:65:81:38:a5:13:96:af:23: cb:7b:bf:9a:23:a2:a0:40:87:70:22:0a:aa:2b:28: b7:ea:92:3c:4d:24:ea:eb:37:7c:9d:03:16:21:6c: a3:85:6e:1c:7a:3b:15:f1:6e:b8:2a:f5:25:5c:84: 73:cb:50:4e:bd:c1:6e:33:cf:b4:06:5d:9c:7b:e4: 2c:ac:b2:74:03:65:9f:e8:a8:3c:17:ee:d5:44:e7: 4c:ed:39:fa:f4:93:21:02:85:b8:b5:26:a2:c4:43: c1:1f:8b:f6:62:21:ea:b1:da:f1:90:b3:e9:ea:bc: 28:40:82:d4:92:19:43:15:bd:f5:04:d2:ce:fa:41: c5:98:6f:3e:d8:6a:a4:55:41:80:d1:ac:de:34:db: da:d3:e6:37:6f:d3:af:34:57:53:56:47:89:4b:d1: 35:69:a7:5b:05:af:0a:15:73:fd:71:9e:e6:cc:51: da:93:a7:e7:55:8c:1c:57:e3:2c:64:05:e6:7a:cc: 63:f3:bc:cd:28:ac:86:c3:4e:4d:45:93:be:1d:8d: f7:b5:25:c1:73:6e:ed:a6:63:96:ae:40:81:0a:f6: 60:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F6:72:C2:F4:68:23:BD:31:31:FB:42:F6:BF:93:0D:A7:5C:CC:AF X509v3 Authority Key Identifier: keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:92:b1:a9:a9:d8:df:d6:22:44:d7:f4:8f:62:60:ec:b8: eb:8f:c2:08:f1:e3:69:e6:9f:93:b5:7c:64:a2:74:ee:b3:88: 12:3d:c3:bd:57:ab:2e:12:26:3c:3f:98:90:e5:37:fb:f6:18: e4:c6:25:24:1c:c0:44:75:91:1f:01:21:a5:44:f1:ac:8e:24: f0:ec:12:a3:95:03:38:e7:07:8f:1b:70:22:11:39:29:a5:c9: 17:34:fb:77:da:c5:5c:fb:dc:09:d0:f3:11:8e:34:24:36:de: ed:23:5b:62:c4:91:60:e6:5f:9e:a6:80:0e:9d:4f:6f:5f:36: d3:08:31:3b:a4:16:38:0f:c8:56:f6:2a:0e:1d:9b:d5:ef:f9: b0:8a:29:ce:a0:3d:1a:94:df:69:a0:9a:41:e7:58:83:6e:3b: c0:d9:4e:bf:92:01:a7:b7:ff:8d:f2:1b:7f:f4:64:62:7b:9d: 37:3b:41:49:9e:c2:ac:ca:0c:56:3b:01:c8:48:23:1a:3c:10: 87:03:32:50:a2:84:23:d1:b3:92:00:af:b8:97:61:85:29:a5: 33:72:bd:09:da:f5:d8:39:c2:6d:d5:a4:3e:ed:25:4d:b8:fe: a6:4a:11:bc:de:b6:e7:e9:d0:8a:aa:dc:0a:ea:f9:74:88:ab: 21:7c:84:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE MjczQjZGREYwHhcNMjUwNTExMDEwMzAyWhcNMjUwNTE4MDEwMzAyWjAYMRYwFAYD VQQDEw02ODFmZjc0Ni1mMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK1Cnf/UEgNLI8s9jW94eg6xOFwutkNTKW7enn340riLdTjxZYE4pROWryPL e7+aI6KgQIdwIgqqKyi36pI8TSTq6zd8nQMWIWyjhW4cejsV8W64KvUlXIRzy1BO vcFuM8+0Bl2ce+QsrLJ0A2Wf6Kg8F+7VROdM7Tn69JMhAoW4tSaixEPBH4v2YiHq sdrxkLPp6rwoQILUkhlDFb31BNLO+kHFmG8+2GqkVUGA0azeNNva0+Y3b9OvNFdT VkeJS9E1aadbBa8KFXP9cZ7mzFHak6fnVYwcV+MsZAXmesxj87zNKKyGw05NRZO+ HY33tSXBc27tpmOWrkCBCvZgyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn2csL0 aCO9MTH7Qva/kw2nXMyvMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5 MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS9DMjRDNzIwQ0Y5MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcw SFNNeUU1N21Mb19TYzdiOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaNJKxqanY39YiRNf0j2Jg7Ljrj8II8eNp5p+TtXxkonTus4gSPcO9 V6suEiY8P5iQ5Tf79hjkxiUkHMBEdZEfASGlRPGsjiTw7BKjlQM45wePG3AiETkp pckXNPt32sVc+9wJ0PMRjjQkNt7tI1tixJFg5l+epoAOnU9vXzbTCDE7pBY4D8hW 9ioOHZvV7/mwiinOoD0alN9poJpB51iDbjvA2U6/kgGnt/+N8ht/9GRie503O0FJ nsKsygxWOwHISCMaPBCHAzJQooQj0bOSAK+4l2GFKaUzcr0J2vXYOcJt1aQ+7SVN uP6mShG83rbn6dCKqtwK6vl0iKshfISq -----END CERTIFICATE-----Generated at Sun May 11 12:13:51 2025 by rpki-client