$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: MjMv4i81AnRJg/CVBBF6tiw3Jl3r30TR0Cfsn+Z86MQ= Subject key identifier: C5:04:6D:FA:AD:E4:C1:35:8E:87:87:F2:5B:B9:89:90:9A:F0:FA:B9 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 03B7 Signing time: Tue 13 May 2025 00:29:30 +0000 Manifest this update: Tue 13 May 2025 00:29:29 +0000 Manifest next update: Tue 20 May 2025 00:29:29 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: 7ojg9CI+swp+li7SwSDELBe8qU5giDEelES8x0OKanA=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: May 13 00:29:29 2025 GMT Not After : May 20 00:29:29 2025 GMT Subject: CN=68229269-9f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:ad:0e:61:b2:e7:c3:fe:4d:b5:e4:09:ef: 63:16:05:c6:db:a9:5d:0c:fb:7e:e4:bd:92:4e:fb: 47:58:c2:22:fa:5a:3d:70:8b:fb:e4:be:7d:41:af: 8f:92:14:6c:ac:c5:57:cf:e2:62:53:3b:b9:0f:01: dd:a8:fa:d5:c0:2c:2b:e5:32:a3:91:bf:ae:24:9d: 15:a6:94:df:ba:07:7d:2d:df:fc:2d:fa:c1:81:05: e4:0b:3e:00:21:52:e2:c2:c7:d9:24:f7:69:f0:8c: 0b:76:0d:2e:a2:b2:fc:c6:bd:e3:d5:db:fb:4c:04: 6b:9d:c2:bc:27:b8:0a:09:8d:dd:8f:e1:87:fd:92: 86:fd:23:91:0c:32:30:de:6a:15:c9:cd:9d:58:50: 7b:76:1a:0b:3c:49:fc:d3:5e:34:68:77:fb:33:f8: 0d:4c:2f:3d:5f:ac:64:8d:a8:9a:11:a7:f6:5f:d6: ab:17:b7:f4:70:01:67:c0:56:9b:3f:54:5f:67:b6: 04:5a:ca:c3:c3:6b:94:3f:96:c2:06:d7:17:99:86: ef:39:0a:65:ea:d8:7c:14:8e:b1:43:4d:a5:1c:a1: d0:8e:a5:43:5d:90:66:38:24:0a:3e:fd:f1:24:58: b0:ba:e8:75:59:75:10:a1:ab:9c:58:6f:22:4a:16: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:6D:FA:AD:E4:C1:35:8E:87:87:F2:5B:B9:89:90:9A:F0:FA:B9 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e9:59:b1:88:24:e2:b6:3e:99:2b:70:e9:42:48:b8:7f:27: 89:eb:f4:32:7d:8b:9c:df:49:e2:70:34:33:aa:9b:f7:7e:79: 1b:8e:70:da:70:cc:21:49:85:88:59:c7:57:4a:32:16:44:e3: 37:0c:bf:83:7b:c3:19:50:14:c0:20:92:a2:6a:92:ea:20:a5: 07:04:b0:3c:40:9d:13:9d:56:16:0e:b6:5b:24:d4:b6:42:c8: f4:cb:8c:c7:8c:5e:c4:3f:79:85:8c:46:77:00:85:02:dc:2b: 8a:e7:47:81:34:33:9c:f3:8f:9f:50:31:61:dc:7b:07:59:86: 19:f7:54:89:db:25:62:59:f4:17:46:d3:c1:6f:65:24:c0:d7: 7c:bc:b7:50:c7:c7:f0:b4:20:8d:4a:12:c3:72:b1:ae:2c:12: 81:31:5d:56:e2:cd:db:6f:38:73:4e:b3:62:4e:dc:10:af:18: e9:06:39:92:2e:f0:ab:29:8c:57:26:e4:92:b6:6c:c9:52:17: 47:30:b4:e4:2a:a5:70:d1:53:60:f5:35:21:fe:9b:e1:54:de: f0:1a:67:ed:92:14:53:39:52:53:43:a6:9d:1b:74:59:d6:47: 62:64:b0:6b:1b:36:d1:50:bd:84:92:ea:3f:84:a3:55:47:af: 8f:13:b4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUwNTEzMDAyOTI5WhcNMjUwNTIwMDAyOTI5WjAYMRYwFAYD VQQDEw02ODIyOTI2OS05ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIWtDmGy58P+TbXkCe9jFgXG26ldDPt+5L2STvtHWMIi+lo9cIv75L59Qa+P khRsrMVXz+JiUzu5DwHdqPrVwCwr5TKjkb+uJJ0VppTfugd9Ld/8LfrBgQXkCz4A IVLiwsfZJPdp8IwLdg0uorL8xr3j1dv7TARrncK8J7gKCY3dj+GH/ZKG/SORDDIw 3moVyc2dWFB7dhoLPEn80140aHf7M/gNTC89X6xkjaiaEaf2X9arF7f0cAFnwFab P1RfZ7YEWsrDw2uUP5bCBtcXmYbvOQpl6th8FI6xQ02lHKHQjqVDXZBmOCQKPv3x JFiwuuh1WXUQoaucWG8iShZPUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUEbfqt 5ME1joeH8lu5iZCa8Pq5MB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB6VmxiCTitj6ZK3DpQki4fyeJ6/QyfYuc30nicDQzqpv3fnkbjnDa cMwhSYWIWcdXSjIWROM3DL+De8MZUBTAIJKiapLqIKUHBLA8QJ0TnVYWDrZbJNS2 Qsj0y4zHjF7EP3mFjEZ3AIUC3CuK50eBNDOc84+fUDFh3HsHWYYZ91SJ2yViWfQX RtPBb2UkwNd8vLdQx8fwtCCNShLDcrGuLBKBMV1W4s3bbzhzTrNiTtwQrxjpBjmS LvCrKYxXJuSStmzJUhdHMLTkKqVw0VNg9TUh/pvhVN7wGmftkhRTOVJTQ6adG3RZ 1kdiZLBrGzbRUL2Ekuo/hKNVR6+PE7TD -----END CERTIFICATE-----Generated at Tue May 13 02:34:42 2025 by rpki-client