$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft File: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft (raw, json) Hash identifier: ZP46ZOrVCTXJ7u5HqusmoITjKI60UcsmSzpZmMWAUr8= Subject key identifier: B0:4C:C6:37:50:B3:DF:00:DE:6B:0C:12:87:B7:55:48:AC:6F:15:FD Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 Certificate issuer: /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473 Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft Manifest number: 038B Signing time: Sun 11 May 2025 00:23:28 +0000 Manifest this update: Sun 11 May 2025 00:23:28 +0000 Manifest next update: Sun 18 May 2025 00:23:28 +0000 Files and hashes: 1: lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl (hash: n8pYTR+IBlcWgmpT7ox5OqkU9sjivMkDSi82nbcld1Y=) 2: 886907F8EE9911EDB02DA367C4F9AE02.roa (hash: Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=) 3: EAAACB14A46111ECA6D7AC4AC4F9AE02.roa (hash: G0VAwKVz22dJplsZ8JCisNdr5V+Bm42xeQ9XdjBCqhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473 Validity Not Before: May 11 00:23:28 2025 GMT Not After : May 18 00:23:28 2025 GMT Subject: CN=681fee00-73e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:6b:b9:dd:d1:bc:7c:46:0d:b0:68:45:78: c5:1e:08:e5:67:4c:57:0e:64:ad:2a:32:fc:05:72: 86:cb:11:cf:80:6e:32:6e:7b:f7:9a:cd:ef:55:40: 0f:cf:60:dd:08:56:14:ec:1b:68:f2:85:84:9e:ac: ec:9d:55:2a:21:3b:fb:b7:b8:ba:f5:84:96:40:1d: 63:ea:59:ce:67:79:9e:72:fa:fc:68:ce:9a:d5:4b: 87:2a:0f:57:85:cf:42:66:b4:41:3f:85:96:a7:a4: 19:ef:55:c2:74:e0:04:1c:4b:3d:a0:8b:fe:8e:01: d8:20:18:87:40:30:3f:bc:45:28:b3:c3:34:6a:f2: c7:3b:96:93:9b:85:44:38:f5:be:e6:58:7c:47:b2: fb:be:2c:8e:19:bf:76:5f:41:6e:d8:11:74:b6:a7: 79:78:21:c6:87:cc:2c:8f:8f:77:f5:c8:f6:f7:c9: c9:c6:9a:02:62:b0:40:51:90:10:3f:2b:03:cd:7f: a4:98:46:bf:84:f0:2e:d6:3a:1e:ad:60:83:b0:af: d8:18:88:33:36:d3:ed:2c:56:b5:05:07:20:af:1e: 05:8a:88:eb:71:70:aa:33:13:05:5a:c2:f1:4b:cf: 3b:a1:64:70:93:fd:db:b9:2c:35:b4:a8:0b:98:a3: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:C6:37:50:B3:DF:00:DE:6B:0C:12:87:B7:55:48:AC:6F:15:FD X509v3 Authority Key Identifier: keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ef:5d:db:13:da:6b:c2:42:68:dc:a0:bb:5a:bc:39:1b:99: 3d:89:e4:87:ad:f3:ad:18:bc:34:9d:2c:a0:6c:eb:d4:ea:fb: 7e:7a:6b:ae:3b:3b:03:27:25:ff:b6:7d:99:b7:cf:20:39:27: a3:0a:4b:8b:3e:f1:59:89:4b:a3:38:2f:c3:15:69:21:b5:fd: de:80:79:ba:c7:b3:48:bc:c4:88:b6:86:39:6a:0f:4c:c1:24: 9b:b7:d2:f8:3c:7a:54:a0:b0:86:1e:f7:9a:e6:ca:c7:d2:2d: f1:d2:60:56:47:52:04:d1:35:35:81:5c:1c:ed:27:51:42:7c: c6:54:c9:a6:e0:b6:87:e4:a8:8a:8d:a4:5c:15:fc:13:0b:d0: 9c:1f:3c:40:55:5f:36:17:d4:09:5e:ff:a2:f5:72:5e:c1:5f: 04:8d:87:23:0a:8e:8a:74:e2:9d:83:0b:fd:67:1b:f5:fe:7a: 02:4e:4c:3c:d4:ca:d3:2b:ae:2e:21:61:7a:04:c2:ed:a9:d7: 88:27:5c:6f:13:72:3b:e5:46:cb:75:ae:ff:f5:6a:f0:19:41: 71:5c:54:08:29:00:e1:6d:a7:1c:4e:fd:eb:d3:b8:0a:72:e1: 88:36:d4:8c:3a:e3:c2:e5:ee:bc:4c:88:46:33:f0:63:2a:9c: 27:de:13:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIxODAxMTAvBgNVBAUTKDk1ODU0NzU3MzVFMkVFMTAzQTg4MzU3NzY5RTE3NjMw NkQxOTc0NzMwHhcNMjUwNTExMDAyMzI4WhcNMjUwNTE4MDAyMzI4WjAYMRYwFAYD VQQDEw02ODFmZWUwMC03M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseJrud3RvHxGDbBoRXjFHgjlZ0xXDmStKjL8BXKGyxHPgG4ybnv3ms3vVUAP z2DdCFYU7Bto8oWEnqzsnVUqITv7t7i69YSWQB1j6lnOZ3mecvr8aM6a1UuHKg9X hc9CZrRBP4WWp6QZ71XCdOAEHEs9oIv+jgHYIBiHQDA/vEUos8M0avLHO5aTm4VE OPW+5lh8R7L7viyOGb92X0Fu2BF0tqd5eCHGh8wsj4939cj298nJxpoCYrBAUZAQ PysDzX+kmEa/hPAu1joerWCDsK/YGIgzNtPtLFa1BQcgrx4FiojrcXCqMxMFWsLx S887oWRwk/3buSw1tKgLmKMGWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBMxjdQ s98A3msMEoe3VUisbxX9MB8GA1UdIwQYMBaAFJWFR1c14u4QOog1d2nhdjBtGXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjE4MC8xMDJCQTE5RTlF NDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdoQTZpRFYzYWVGMk1HMFpk SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZVkhWelhpN2hBNmlEVjNhZUYyTUcwWmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjE4MC8xMDJCQTE5RTlFNDMxMUVDODdEMEIyNkZDNEY5QUUwMi9sWVZIVnpYaTdo QTZpRFYzYWVGMk1HMFpkSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP713bE9prwkJo3KC7Wrw5G5k9ieSHrfOtGLw0nSygbOvU6vt+emuu OzsDJyX/tn2Zt88gOSejCkuLPvFZiUujOC/DFWkhtf3egHm6x7NIvMSItoY5ag9M wSSbt9L4PHpUoLCGHvea5srH0i3x0mBWR1IE0TU1gVwc7SdRQnzGVMmm4LaH5KiK jaRcFfwTC9CcHzxAVV82F9QJXv+i9XJewV8EjYcjCo6KdOKdgwv9Zxv1/noCTkw8 1MrTK64uIWF6BMLtqdeIJ1xvE3I75UbLda7/9WrwGUFxXFQIKQDhbaccTv3r07gK cuGINtSMOuPC5e68TIhGM/BjKpwn3hPu -----END CERTIFICATE-----Generated at Sun May 11 22:39:49 2025 by rpki-client