$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: 2AZQvVjY0shCZZzOrj3tx0tDUdOUdS4LYKAf0PtKJDk= Subject key identifier: 0F:9A:67:C5:E2:A0:C0:F2:7F:5A:82:AB:64:46:F3:82:5C:47:07:97 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 012E Signing time: Sun 11 May 2025 03:25:31 +0000 Manifest this update: Sun 11 May 2025 03:25:31 +0000 Manifest next update: Sun 18 May 2025 03:25:31 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: Saowx9pvg2BsA0BGB5BqXTi4zC1Cp9e5SchjVre260Q=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: K2l/EtZxWeLVYqj5ycNq5EmQOfjL5aHh+ijS2CAjoJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: May 11 03:25:31 2025 GMT Not After : May 18 03:25:31 2025 GMT Subject: CN=682018ab-c87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:41:f9:89:b0:fd:05:89:6f:eb:98:5d:65: 80:20:06:cf:a4:30:bf:9b:be:e4:54:67:1f:e2:27: a2:e4:59:11:55:ec:7d:de:4c:1a:f4:d1:96:79:81: 9d:42:30:15:e7:af:0c:e2:49:da:e8:38:40:ea:2c: 8d:46:08:60:8a:c4:8d:30:e2:ca:f6:92:7a:22:d1: f2:fb:2a:19:73:17:8b:19:4f:dc:91:ab:7a:31:52: 90:c7:32:ed:f8:cc:cd:fd:b5:87:c0:59:d0:2c:cc: 77:95:9f:bd:36:7e:1a:ee:9a:2c:56:ed:6f:a9:83: 73:65:a7:1f:a7:d3:4e:a7:76:2e:35:70:d1:43:89: 60:1d:52:01:d8:9d:e3:50:cd:17:70:18:70:6b:a8: 3d:3a:9c:30:af:22:0c:2c:3f:70:22:6a:56:3a:27: 7e:cc:78:d5:2f:24:11:46:c6:da:a7:f0:b8:ab:bf: e7:66:d7:f8:e0:a8:a2:47:6e:a4:33:d7:e7:36:ce: e1:75:dd:ab:b4:b7:0f:bc:5c:61:27:ee:e3:65:64: ca:5e:02:83:9a:8a:8c:25:c8:16:37:32:d0:0c:1e: b8:cf:0d:91:96:20:f9:c3:6c:ce:7e:71:fb:fc:a5: 55:3a:23:81:9b:20:44:d5:df:13:13:97:5d:bd:2b: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9A:67:C5:E2:A0:C0:F2:7F:5A:82:AB:64:46:F3:82:5C:47:07:97 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:37:7a:ef:ba:a4:64:bf:12:56:c6:69:2b:6e:a6:cb:42:de: b5:e9:35:09:2b:2a:a1:7a:82:92:20:d6:1f:42:dc:80:c8:28: f0:03:ce:c6:bc:14:0f:29:27:7c:1f:4d:c4:0c:59:dd:f8:18: fe:12:91:89:59:fe:48:3a:11:2a:d0:8a:92:ee:b5:a2:4f:7b: ee:3a:bb:ab:cc:c2:4f:d2:99:40:b1:27:d3:d3:7d:04:34:dd: a5:10:be:41:d6:86:c7:69:7f:90:d8:d0:36:59:8b:4b:73:9e: b7:d1:16:7d:76:f1:fb:2d:c3:2a:f5:97:b5:6d:cc:50:a2:13: 87:bd:f7:5c:51:cf:c6:3b:9d:cd:5c:44:9b:a0:ce:dc:0c:ea: 26:74:a1:92:13:ad:49:6f:83:3f:9b:5f:18:c5:39:7a:9b:e4: e6:39:f2:64:81:5a:dd:8e:17:7b:27:2e:7d:a6:c5:91:a6:95: 2c:2f:94:c2:f4:7b:88:a0:eb:87:4a:52:c2:c1:73:10:c0:d1: 47:ce:bc:8b:22:b6:53:37:26:78:20:0b:5a:5b:ca:ed:24:20: c7:3f:38:06:e1:82:48:79:11:0b:e6:ac:99:6e:3a:81:8f:cf: 61:70:ee:1d:51:c9:33:cd:de:ec:40:cc:b1:e7:b8:ae:39:8a: 8a:0e:63:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwNTExMDMyNTMxWhcNMjUwNTE4MDMyNTMxWjAYMRYwFAYD VQQDEw02ODIwMThhYi1jODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW9B+Ymw/QWJb+uYXWWAIAbPpDC/m77kVGcf4iei5FkRVex93kwa9NGWeYGd QjAV568M4kna6DhA6iyNRghgisSNMOLK9pJ6ItHy+yoZcxeLGU/ckat6MVKQxzLt +MzN/bWHwFnQLMx3lZ+9Nn4a7posVu1vqYNzZacfp9NOp3YuNXDRQ4lgHVIB2J3j UM0XcBhwa6g9OpwwryIMLD9wImpWOid+zHjVLyQRRsbap/C4q7/nZtf44KiiR26k M9fnNs7hdd2rtLcPvFxhJ+7jZWTKXgKDmoqMJcgWNzLQDB64zw2RliD5w2zOfnH7 /KVVOiOBmyBE1d8TE5ddvSsKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+aZ8Xi oMDyf1qCq2RG84JcRweXMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4N3rvuqRkvxJWxmkrbqbLQt616TUJKyqheoKSINYfQtyAyCjwA87G vBQPKSd8H03EDFnd+Bj+EpGJWf5IOhEq0IqS7rWiT3vuOrurzMJP0plAsSfT030E NN2lEL5B1obHaX+Q2NA2WYtLc5630RZ9dvH7LcMq9Ze1bcxQohOHvfdcUc/GO53N XESboM7cDOomdKGSE61Jb4M/m18YxTl6m+TmOfJkgVrdjhd7Jy59psWRppUsL5TC 9HuIoOuHSlLCwXMQwNFHzryLIrZTNyZ4IAtaW8rtJCDHPzgG4YJIeREL5qyZbjqB j89hcO4dUckzzd7sQMyx57iuOYqKDmNM -----END CERTIFICATE-----Generated at Sun May 11 09:22:17 2025 by rpki-client