$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft File: ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json) Hash identifier: ++/ntQcaohZO8On8+8lwQF3WhVjUMEy5qkKifwZFIeU= Subject key identifier: C0:42:2B:92:EC:89:77:1F:2E:FB:9E:3E:1A:88:F7:40:C8:88:85:6E Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft Manifest number: 1C Signing time: Sun 11 May 2025 06:41:57 +0000 Manifest this update: Sun 11 May 2025 06:41:57 +0000 Manifest next update: Sun 18 May 2025 06:41:56 +0000 Files and hashes: 1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: e3jjYi9Bq/glnPHh6WkGlCFQbMXDHpiWbw7GsOXxTHA=) 2: DE08EC260AF011F09BE4823DC4F9AE02.roa (hash: tS0pbkGyUAuopYmy/atTnvcHHOXmpYRnPtmCrrMVkIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: May 11 06:41:57 2025 GMT Not After : May 18 06:41:56 2025 GMT Subject: CN=682046b5-2a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:09:15:cd:50:5e:5d:2f:74:8c:f7:0c:3f: 38:97:de:61:9b:45:ee:b5:f2:0d:1d:56:69:35:e7: ed:6f:4f:c4:cc:af:3e:9f:26:f5:da:09:6c:98:c7: 82:43:39:e3:cd:e4:d3:e7:df:cc:b1:52:5a:9b:44: a4:26:33:7f:33:23:7b:aa:16:bc:5a:48:99:60:8e: df:e5:d8:f7:31:f9:ae:68:ea:2e:67:a3:68:a3:8c: ee:da:64:62:2f:a8:8f:77:9c:cd:d2:af:7c:d5:09: bf:21:2c:b4:c0:e8:3e:41:d2:92:de:6e:b0:79:e1: 22:63:e9:af:10:8d:a2:39:b8:7e:b2:bb:6f:3b:7d: a5:9d:e9:b2:32:d9:6d:68:7c:2c:66:df:ef:b7:34: 9b:fc:a3:3b:b5:2a:82:14:88:48:d2:f6:38:b7:b0: ee:3b:7c:1b:46:fa:5f:21:a9:25:6c:85:94:4f:68: ea:27:de:7f:97:4d:b0:0f:17:cb:8e:cb:0b:bc:76: 6a:99:ba:d1:41:6b:d3:45:3d:54:a5:a5:c4:10:53: de:81:a1:85:f3:09:aa:06:c4:e7:4a:79:09:8e:63: 4e:be:3a:5c:da:54:2e:c5:20:f3:06:cd:9f:5e:e4: 4c:d5:c6:06:70:1f:1c:93:9c:fc:a0:1e:19:a1:79: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:2B:92:EC:89:77:1F:2E:FB:9E:3E:1A:88:F7:40:C8:88:85:6E X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:33:56:35:e6:27:3c:94:cb:c0:80:90:fb:29:82:96:97:c3: 04:b6:b3:c7:c0:20:89:cb:89:d8:a1:74:5b:31:e2:3b:d8:cb: f1:53:79:b4:d5:89:b3:e8:26:15:2f:bd:7e:d4:6c:04:2f:68: ad:47:94:e7:ad:6d:21:0b:bd:fc:dc:b7:d1:d8:17:b4:84:15: e8:83:3f:35:bf:43:ff:b6:1d:77:f3:9d:74:0e:50:38:f8:37: 19:dc:6c:d9:44:48:63:92:8e:4e:2f:d0:2d:ce:33:86:04:a2: 2e:ff:b6:b8:c0:0d:cd:6e:5c:50:f6:89:07:39:2b:38:70:99: e7:63:29:b7:4e:e8:c5:f7:f0:70:42:21:d0:0c:70:89:dc:78: fb:70:fe:9d:2b:2f:1a:51:76:b9:65:b3:01:86:e1:88:26:b8: 94:3a:0a:4a:dd:7b:9a:a6:43:72:ff:d8:fc:c7:96:64:b5:aa: ed:1e:ea:73:14:48:8d:df:38:c4:6f:6d:f0:c1:8f:66:bb:67: 6d:f6:d8:bd:d4:49:c4:fb:5e:92:ac:e2:29:44:17:4b:83:1c: c5:2a:8a:b2:f3:67:c9:0c:2a:e2:ca:b8:8b:6f:d6:81:55:8a: d5:ef:c1:77:cf:c8:fe:23:29:61:f5:a0:1c:6e:9a:7b:67:7e: 45:ea:da:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTA1MTEwNjQxNTdaFw0yNTA1MTgwNjQxNTZaMBgxFjAUBgNV BAMTDTY4MjA0NmI1LTJhMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCewkVzVBeXS90jPcMPziX3mGbRe618g0dVmk15+1vT8TMrz6fJvXaCWyYx4JD OePN5NPn38yxUlqbRKQmM38zI3uqFrxaSJlgjt/l2Pcx+a5o6i5no2ijjO7aZGIv qI93nM3Sr3zVCb8hLLTA6D5B0pLebrB54SJj6a8QjaI5uH6yu287faWd6bIy2W1o fCxm3++3NJv8ozu1KoIUiEjS9ji3sO47fBtG+l8hqSVshZRPaOon3n+XTbAPF8uO ywu8dmqZutFBa9NFPVSlpcQQU96BoYXzCaoGxOdKeQmOY06+OlzaVC7FIPMGzZ9e 5EzVxgZwHxyTnPygHhmheZGhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwEIrkuyJ dx8u+54+Goj3QMiIhW4wHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjZBLzdBNTI5ODc2MEFGMDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1P UGxZeVB1cE1ZQVJmY0p1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANMzVjXmJzyUy8CAkPspgpaXwwS2s8fAIInLidihdFsx4jvYy/FTebTV ibPoJhUvvX7UbAQvaK1HlOetbSELvfzct9HYF7SEFeiDPzW/Q/+2HXfznXQOUDj4 NxncbNlESGOSjk4v0C3OM4YEoi7/trjADc1uXFD2iQc5KzhwmedjKbdO6MX38HBC IdAMcIncePtw/p0rLxpRdrllswGG4YgmuJQ6Ckrde5qmQ3L/2PzHlmS1qu0e6nMU SI3fOMRvbfDBj2a7Z2322L3UScT7XpKs4ilEF0uDHMUqirLzZ8kMKuLKuItv1oFV itXvwXfPyP4jKWH1oBxumntnfkXq2pA= -----END CERTIFICATE-----Generated at Sun May 11 12:36:31 2025 by rpki-client