$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: avrhFd6n5YaoiKe4bzb+X3wCuCArrCXOA8VZd9ERNDc= Subject key identifier: 1D:24:92:04:81:67:46:17:8F:DC:C8:AB:06:03:9A:95:33:74:A7:34 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1E6B Signing time: Fri 16 May 2025 16:17:00 +0000 Manifest this update: Fri 16 May 2025 16:17:00 +0000 Manifest next update: Fri 23 May 2025 16:17:00 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: wt43ggO4D1HTkuJ/X5NhO0hPLLIB/i7IqyHH9O1yudQ=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: G8JFHwSz1ocsPfiu5EdB881TguSYEm9QZ2Yz9AovjhA=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: 0mgkLjgKwKqnZvyXs7R0/CM7YveV0fnq5l57+ocSN+k=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7803 (0x1e7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: May 16 16:17:00 2025 GMT Not After : May 23 16:17:00 2025 GMT Subject: CN=682764fc-c33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:86:95:d6:2c:1e:40:d7:a6:c4:f3:bc:fb: c7:fa:35:5b:c3:1d:e2:12:a3:8f:d2:ea:85:33:87: a6:fd:a5:8e:44:c2:51:a0:b7:01:bb:0d:45:02:83: 69:cc:21:2b:16:33:15:91:16:53:7d:a2:02:c8:2d: db:0a:ef:42:4c:58:47:58:38:e1:18:cc:cf:95:7f: 11:30:d5:77:fd:e6:7a:c0:2b:d6:d8:e0:d4:5f:f4: ee:91:36:17:03:0d:cf:5e:ec:87:e6:0f:a1:ce:0e: d5:ff:99:cb:5a:5d:04:9f:3e:2e:81:70:f1:fb:34: 18:0c:99:32:e3:d7:89:53:dd:a7:1b:60:cf:82:52: 1a:3a:33:3e:df:12:90:ec:86:76:4d:0e:aa:6c:1f: 7c:90:21:df:79:5d:72:88:07:50:f3:83:d1:ff:b7: a7:08:ec:c6:87:2f:02:be:77:b0:61:c7:52:59:bf: 30:4e:20:85:43:2a:0c:89:b9:33:e7:a4:f7:69:72: 7e:da:04:7c:76:5c:37:56:e6:a1:39:ff:33:c2:8e: 2b:2c:2d:02:1f:24:c2:c9:6f:bf:55:1c:9a:4f:67: 85:95:c0:4c:01:cf:b3:3c:0a:9b:37:68:0c:98:14: dd:ea:9d:2e:8f:84:73:90:5c:4e:d5:aa:d2:06:af: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:24:92:04:81:67:46:17:8F:DC:C8:AB:06:03:9A:95:33:74:A7:34 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:90:e7:a5:a3:06:1c:e0:90:67:aa:43:08:b1:db:f6:6d:ba: a2:89:76:38:ef:3a:45:f2:12:1a:ad:c2:36:bb:51:1b:62:b7: 88:86:e8:e0:02:f6:c0:08:86:06:9c:d3:81:c8:e7:2d:56:71: 6b:24:8c:15:1a:b3:0b:38:58:90:21:eb:b4:63:60:bc:60:34: 7c:f3:42:00:c3:89:f7:ed:bc:da:f3:57:e5:11:1c:df:a2:a1: 94:cb:e5:5c:2f:54:bb:f9:11:8a:60:7d:47:00:a5:af:9f:f3: 8a:1c:90:d9:90:3f:3a:77:f7:b6:2b:ab:02:ea:11:9f:f7:d9: 7c:4e:08:e7:f6:87:e9:af:a8:62:da:9d:34:6a:3e:34:cb:b8: e4:1f:00:87:09:e1:1e:3f:37:d7:b3:21:3f:e1:7b:66:33:bd: 6d:1a:5e:59:40:75:6b:a3:fb:8b:12:7c:06:4a:61:ae:2c:9a: 2d:9e:70:b2:8a:b4:60:1a:43:75:fd:a5:44:cb:b4:59:47:81: 4a:af:61:72:3f:cf:4d:47:be:b7:8e:45:56:de:a2:7b:c9:ca: b8:d1:17:ba:c2:78:5b:61:bc:95:44:f0:4c:c0:b0:6a:08:28: b1:5b:22:ac:ba:b5:53:2a:db:f4:4a:da:c5:8c:12:a8:84:bc: 6d:91:2c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNTE2MTYxNzAwWhcNMjUwNTIzMTYxNzAwWjAYMRYwFAYD VQQDEw02ODI3NjRmYy1jMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCiGldYsHkDXpsTzvPvH+jVbwx3iEqOP0uqFM4em/aWORMJRoLcBuw1FAoNp zCErFjMVkRZTfaICyC3bCu9CTFhHWDjhGMzPlX8RMNV3/eZ6wCvW2ODUX/TukTYX Aw3PXuyH5g+hzg7V/5nLWl0Enz4ugXDx+zQYDJky49eJU92nG2DPglIaOjM+3xKQ 7IZ2TQ6qbB98kCHfeV1yiAdQ84PR/7enCOzGhy8CvnewYcdSWb8wTiCFQyoMibkz 56T3aXJ+2gR8dlw3VuahOf8zwo4rLC0CHyTCyW+/VRyaT2eFlcBMAc+zPAqbN2gM mBTd6p0uj4RzkFxO1arSBq9ibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0kkgSB Z0YXj9zIqwYDmpUzdKc0MB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUkOelowYc4JBnqkMIsdv2bbqiiXY47zpF8hIarcI2u1EbYreIhujg AvbACIYGnNOByOctVnFrJIwVGrMLOFiQIeu0Y2C8YDR880IAw4n37bza81flERzf oqGUy+VcL1S7+RGKYH1HAKWvn/OKHJDZkD86d/e2K6sC6hGf99l8Tgjn9ofpr6hi 2p00aj40y7jkHwCHCeEePzfXsyE/4XtmM71tGl5ZQHVro/uLEnwGSmGuLJotnnCy irRgGkN1/aVEy7RZR4FKr2FyP89NR763jkVW3qJ7ycq40Re6wnhbYbyVRPBMwLBq CCixWyKsurVTKtv0StrFjBKohLxtkSyz -----END CERTIFICATE-----Generated at Fri May 16 18:17:31 2025 by rpki-client