$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: wcFm4VTj8HUrZBg6e4g16oGbxxgOvfnmitBT++9rBt4= Subject key identifier: 59:A4:7F:AC:70:A9:F8:02:1E:A3:88:33:A9:6C:9E:68:A1:D1:38:95 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0418 Signing time: Thu 15 May 2025 00:27:30 +0000 Manifest this update: Thu 15 May 2025 00:27:29 +0000 Manifest next update: Thu 22 May 2025 00:27:29 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: YcGaNkjibP4ZU0ySjPRc6kPJVO8aMlMDF1nDovJz04w=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: May 15 00:27:29 2025 GMT Not After : May 22 00:27:29 2025 GMT Subject: CN=682534f1-e056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:0f:99:78:54:37:b0:ad:f2:e4:43:88:70: 92:62:eb:11:4f:f3:32:69:86:27:05:09:7f:61:74: 45:61:3d:0b:71:0f:f9:2d:16:52:0c:09:f6:bd:70: 76:ef:c1:38:a0:50:41:3b:96:50:63:ce:0a:ee:4a: 89:69:14:9e:15:ac:7a:d1:37:f7:e8:1b:9e:1f:68: 65:8e:c4:2b:4a:e5:b3:a2:4d:bd:4d:14:b1:35:60: 4e:8f:6c:47:01:3d:49:20:c8:76:1c:f4:a9:c6:fe: f3:6b:ed:d5:14:57:e2:c5:11:f3:51:ed:15:45:ec: c0:d9:ac:8d:c7:ca:e2:40:6a:df:52:f9:2d:6a:3c: 69:7c:4d:fc:31:b2:9e:3b:8f:f4:34:17:44:06:7b: 0d:92:17:7e:da:5e:22:1a:bf:7a:2f:5b:48:7f:30: c5:dd:63:97:b6:57:2c:b7:36:56:90:aa:e6:84:1f: 9f:c5:e0:3b:1b:7c:44:c0:98:8a:71:b6:d1:6e:2c: 6e:7f:27:8a:d2:3f:85:67:73:20:15:cc:8b:97:86: 1a:e0:12:7e:b4:39:03:39:20:91:68:b7:44:3f:93: 88:07:22:b7:52:88:6f:cb:ce:d3:9d:9e:e9:dd:d6: d9:40:02:58:d2:fc:15:a0:df:71:2a:4c:cc:d3:b3: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:7F:AC:70:A9:F8:02:1E:A3:88:33:A9:6C:9E:68:A1:D1:38:95 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:77:3d:fb:10:8d:d9:aa:56:01:4f:bc:c4:db:33:ee:e1:eb: ab:8c:22:bc:49:4b:e5:67:6f:a1:12:5e:d2:cf:5f:45:0a:f9: 4f:93:87:a8:9b:84:56:cf:dd:9e:4b:d2:81:75:dd:b9:da:df: e2:1d:d6:24:6d:1b:5e:26:33:89:63:77:23:8a:59:5f:1e:69: 72:6c:76:80:75:54:8a:43:ed:af:48:b6:2a:d7:95:c4:0c:dd: c8:0e:f4:37:ff:fa:7b:6f:14:ae:f2:2a:d7:56:21:a6:6d:0e: 92:0f:16:96:ce:03:2b:84:da:27:f4:51:a6:44:7a:ee:44:a7: de:b5:ce:d9:ff:4f:e5:2a:9b:d5:8b:5c:64:34:8b:5e:88:5b: b4:17:0b:80:b1:c9:03:5e:62:e6:05:f0:08:b6:fd:ff:44:01: b0:9a:01:45:e9:d3:f9:cd:b5:b9:7c:74:14:76:25:56:55:9d: 26:a0:7d:5e:49:99:fe:97:99:da:7a:2d:a1:65:db:78:6b:35: f1:49:66:ba:22:0a:1f:50:5a:c7:b6:4f:de:2e:c3:e2:05:27: ea:58:be:1b:8f:9d:d2:b0:73:d0:a2:4b:ec:99:b9:bc:f9:ab: 0e:57:8c:71:7b:81:58:eb:1b:04:8d:43:dc:e5:ee:2d:ad:f7: 7e:f1:e6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwNTE1MDAyNzI5WhcNMjUwNTIyMDAyNzI5WjAYMRYwFAYD VQQDEw02ODI1MzRmMS1lMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57IPmXhUN7Ct8uRDiHCSYusRT/MyaYYnBQl/YXRFYT0LcQ/5LRZSDAn2vXB2 78E4oFBBO5ZQY84K7kqJaRSeFax60Tf36BueH2hljsQrSuWzok29TRSxNWBOj2xH AT1JIMh2HPSpxv7za+3VFFfixRHzUe0VRezA2ayNx8riQGrfUvktajxpfE38MbKe O4/0NBdEBnsNkhd+2l4iGr96L1tIfzDF3WOXtlcstzZWkKrmhB+fxeA7G3xEwJiK cbbRbixufyeK0j+FZ3MgFcyLl4Ya4BJ+tDkDOSCRaLdEP5OIByK3Uohvy87TnZ7p 3dbZQAJY0vwVoN9xKkzM07OedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmkf6xw qfgCHqOIM6lsnmih0TiVMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpdz37EI3ZqlYBT7zE2zPu4eurjCK8SUvlZ2+hEl7Sz19FCvlPk4eo m4RWz92eS9KBdd252t/iHdYkbRteJjOJY3cjillfHmlybHaAdVSKQ+2vSLYq15XE DN3IDvQ3//p7bxSu8irXViGmbQ6SDxaWzgMrhNon9FGmRHruRKfetc7Z/0/lKpvV i1xkNIteiFu0FwuAsckDXmLmBfAItv3/RAGwmgFF6dP5zbW5fHQUdiVWVZ0moH1e SZn+l5naei2hZdt4azXxSWa6IgofUFrHtk/eLsPiBSfqWL4bj53SsHPQokvsmbm8 +asOV4xxe4FY6xsEjUPc5e4trfd+8eaG -----END CERTIFICATE-----Generated at Thu May 15 13:29:48 2025 by rpki-client