$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: 1Ajez2l81KIbi4KcG/RXGaiybaT65FhOMXi7oztuUkk= Subject key identifier: 4A:EC:C8:29:CF:73:C7:2C:27:CF:25:47:E8:2D:FB:B2:B9:3D:1C:1D Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 0117 Signing time: Sun 11 May 2025 03:48:22 +0000 Manifest this update: Sun 11 May 2025 03:48:21 +0000 Manifest next update: Sun 18 May 2025 03:48:21 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: nEQxw4ZoxfYXLY8J6VxG8LObzLC2YFXHTdEOlXxcSgw=) 2: 624EED84E05611EF94B15084C4F9AE02.roa (hash: R+rzbH36dZLSxYjNi8lcV9C3gxouYn22pNUnJ/fDW7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: May 11 03:48:21 2025 GMT Not After : May 18 03:48:21 2025 GMT Subject: CN=68201e05-ca13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:28:00:58:e4:b0:93:00:02:12:0c:ba:77: 1f:2d:1c:47:f6:82:9b:83:c2:c9:2c:df:8b:bf:9e: 76:c9:3d:7c:30:b3:be:9c:dd:0f:c3:1a:6d:f0:f1: 83:53:c5:b2:99:f6:50:f0:4b:65:7f:04:45:0d:09: 35:04:c9:6a:38:d2:98:7b:53:86:a5:b9:86:20:c0: 3e:1d:03:99:ef:0e:db:99:70:f9:30:e4:71:ce:7d: 97:7c:cd:37:28:67:7f:6f:9d:3b:b3:31:70:50:3a: 47:a4:ef:84:c4:79:51:45:da:77:a1:ed:ef:8b:a9: 11:80:2a:a3:b4:f1:a6:30:4c:53:1d:eb:45:75:b3: 76:4d:d6:40:a8:4c:4b:78:b5:19:c1:29:b9:cb:00: e4:d7:bf:35:3e:e7:e4:41:ee:46:a9:b8:f3:a4:a1: 63:50:2d:00:bf:6d:5a:36:78:ab:4e:a0:a8:79:7f: b9:ec:74:57:14:fd:2f:cb:df:1e:10:4f:4a:8a:bc: 76:d1:ba:51:fc:ca:a8:cf:be:e7:01:76:53:e9:6d: f9:c0:be:55:3b:27:23:47:31:47:83:64:53:69:89: d1:f9:56:e5:63:bd:18:ad:78:9c:de:49:aa:50:cb: 02:fa:10:29:b3:b7:2c:24:a6:96:a2:16:0b:a1:bc: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:C8:29:CF:73:C7:2C:27:CF:25:47:E8:2D:FB:B2:B9:3D:1C:1D X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:70:cc:a0:34:51:6c:54:8b:49:f1:fb:38:ca:07:96:ca:8f: f8:25:c1:a5:0d:95:d0:10:ef:68:4b:e0:d2:4f:74:60:d4:6d: bb:2f:09:3a:de:72:5b:6c:5f:03:77:32:a8:c9:a5:3a:17:ce: 38:05:5c:dd:a3:0a:eb:21:1b:6d:ab:e1:0d:a0:c3:1f:7e:2b: 90:10:1b:30:04:71:87:eb:2a:1b:bc:e3:59:a2:82:f3:b8:02: 39:72:c5:68:38:6e:7a:88:a1:7c:4c:96:bc:60:6c:57:5a:0f: 60:1c:4b:11:17:2c:1d:0c:49:44:d9:4d:0e:07:3c:4b:c1:9e: e3:59:ad:52:05:3c:5a:b9:f3:cd:5f:11:aa:55:5a:fa:37:05: 66:45:e6:91:4d:8a:fe:9c:f8:ea:02:82:45:17:9a:2d:a2:1c: ff:cd:12:25:88:42:41:de:32:d2:aa:ab:da:2e:2d:eb:ad:ab: 20:0d:6e:16:e9:cc:2b:48:95:ad:48:42:e8:89:a5:2e:d4:50: e6:45:9d:0e:aa:86:7e:93:e5:3a:3f:2b:3f:0c:06:1d:c8:20: 8b:b0:71:55:43:37:f1:65:56:f7:7d:a4:60:c6:72:f0:6e:19: b1:d4:96:c6:73:10:4d:e8:60:c7:1a:e9:7d:61:55:f0:ba:15: 0f:47:c6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUwNTExMDM0ODIxWhcNMjUwNTE4MDM0ODIxWjAYMRYwFAYD VQQDEw02ODIwMWUwNS1jYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7YoAFjksJMAAhIMuncfLRxH9oKbg8LJLN+Lv552yT18MLO+nN0Pwxpt8PGD U8WymfZQ8EtlfwRFDQk1BMlqONKYe1OGpbmGIMA+HQOZ7w7bmXD5MORxzn2XfM03 KGd/b507szFwUDpHpO+ExHlRRdp3oe3vi6kRgCqjtPGmMExTHetFdbN2TdZAqExL eLUZwSm5ywDk1781PufkQe5GqbjzpKFjUC0Av21aNnirTqCoeX+57HRXFP0vy98e EE9Kirx20bpR/Mqoz77nAXZT6W35wL5VOycjRzFHg2RTaYnR+VblY70YrXic3kmq UMsC+hAps7csJKaWohYLobyWZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErsyCnP c8csJ88lR+gt+7K5PRwdMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF UWFSUDNLWWZRck9tT3VFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJcMygNFFsVItJ8fs4ygeWyo/4JcGlDZXQEO9oS+DST3Rg1G27Lwk6 3nJbbF8DdzKoyaU6F844BVzdowrrIRttq+ENoMMffiuQEBswBHGH6yobvONZooLz uAI5csVoOG56iKF8TJa8YGxXWg9gHEsRFywdDElE2U0OBzxLwZ7jWa1SBTxaufPN XxGqVVr6NwVmReaRTYr+nPjqAoJFF5otohz/zRIliEJB3jLSqqvaLi3rrasgDW4W 6cwrSJWtSELoiaUu1FDmRZ0OqoZ+k+U6Pys/DAYdyCCLsHFVQzfxZVb3faRgxnLw bhmx1JbGcxBN6GDHGul9YVXwuhUPR8bg -----END CERTIFICATE-----Generated at Sun May 11 22:12:48 2025 by rpki-client