$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: DMev25DfyytZuv2nnpEmU0+azGWPqPDUrgV3Yp4F6Og= Subject key identifier: 74:C6:99:F1:E9:F7:9D:92:A1:B9:DE:F5:80:EC:30:11:55:6C:11:DC Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 45 Signing time: Mon 05 May 2025 06:13:46 +0000 Manifest this update: Mon 05 May 2025 06:13:45 +0000 Manifest next update: Mon 12 May 2025 06:13:45 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: IobWrPgPEikoB300kVUs7upETW8RJ1I7pbWH59/sMDg=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: May 5 06:13:45 2025 GMT Not After : May 12 06:13:45 2025 GMT Subject: CN=68185719-4461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:03:d4:28:4d:db:fa:0a:58:13:44:22:ad: 0d:90:14:45:2a:ad:fd:92:7a:9e:0d:17:40:d9:63: 83:a8:b4:16:43:b2:10:d9:d7:1c:cd:55:af:45:ca: 01:7f:b9:7c:ca:55:aa:07:12:16:b8:10:94:41:e9: cc:2c:f1:bf:96:dd:33:5e:1f:31:d5:d9:e8:09:02: 09:56:c8:f9:8a:05:4d:f5:41:1c:16:01:1e:41:30: 36:df:b9:08:68:55:0d:63:6f:40:01:d6:da:a7:e7: 4b:d9:1b:f8:a1:e0:50:63:ca:e0:7b:ac:de:19:d7: d3:35:ff:c5:52:00:4e:05:1b:11:63:57:da:9e:ae: 80:3a:cf:8d:2f:53:cf:7d:ec:89:fb:b6:8c:db:24: f2:0e:fb:bb:69:6d:19:33:e3:7a:53:50:22:8d:f1: ca:27:f9:a0:ca:30:fb:89:27:5e:f2:b7:b6:d0:a1: 1a:fe:f4:36:85:1b:41:60:85:e5:57:b0:3e:4f:71: 7b:c1:0c:02:c2:b3:5c:f0:29:e4:42:f9:78:10:b4: 6e:de:db:ed:49:82:f2:61:c2:20:13:91:de:c8:fc: f6:fe:2d:d2:8a:04:62:db:56:7b:82:dc:20:47:ac: cc:d7:9b:c5:83:b5:e4:c1:6d:82:2d:6c:cd:9c:48: 04:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:99:F1:E9:F7:9D:92:A1:B9:DE:F5:80:EC:30:11:55:6C:11:DC X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5e:6c:cc:49:35:16:bc:01:77:c6:95:04:55:53:b7:ac:33: bb:a2:72:0c:b6:55:f6:76:75:91:42:8c:b8:33:2d:b4:5d:aa: 89:f1:04:19:e6:9a:c5:18:a9:ac:aa:ff:46:6e:dd:e2:a0:66: 48:1b:aa:08:e4:e9:e4:ce:35:e4:23:5f:03:98:b3:b4:80:bd: c6:b5:7e:9d:6d:c8:5e:28:44:a2:de:64:52:a2:fa:e9:18:3e: 3e:56:8a:4c:ce:23:22:52:6c:1d:02:a7:f0:b8:6a:8d:84:14: 4f:cb:d6:e6:2a:a8:27:a7:21:ae:e6:3f:aa:2e:4e:10:5b:7d: 15:43:dc:67:9b:fd:de:78:eb:f8:e4:27:ac:a5:a3:0e:3f:01: 1e:03:e9:fd:37:df:8b:52:9b:f0:78:98:b2:09:61:48:55:bd: a8:a3:17:03:ac:87:c6:de:84:26:2d:4f:7e:72:13:8f:09:27: c3:5a:68:82:6b:92:61:11:ea:a7:39:3c:11:a0:61:5c:2f:b0: f3:85:bf:be:09:5c:e8:a8:ea:15:44:30:11:70:18:4a:c4:b5: e7:6f:e3:80:58:11:dd:ae:76:08:5e:0a:ae:ae:6d:e1:de:4a: e7:5d:3d:1c:54:2c:2e:b4:f0:82:5e:e1:c5:ad:af:f7:51:f5: 31:b8:7a:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA1MDUwNjEzNDVaFw0yNTA1MTIwNjEzNDVaMBgxFjAUBgNV BAMTDTY4MTg1NzE5LTQ0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+9gPUKE3b+gpYE0QirQ2QFEUqrf2Sep4NF0DZY4OotBZDshDZ1xzNVa9FygF/ uXzKVaoHEha4EJRB6cws8b+W3TNeHzHV2egJAglWyPmKBU31QRwWAR5BMDbfuQho VQ1jb0AB1tqn50vZG/ih4FBjyuB7rN4Z19M1/8VSAE4FGxFjV9qeroA6z40vU899 7In7tozbJPIO+7tpbRkz43pTUCKN8con+aDKMPuJJ17yt7bQoRr+9DaFG0FgheVX sD5PcXvBDALCs1zwKeRC+XgQtG7e2+1JgvJhwiATkd7I/Pb+LdKKBGLbVnuC3CBH rMzXm8WDteTBbYItbM2cSASPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdMaZ8en3 nZKhud71gOwwEVVsEdwwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRebMxJNRa8AXfGlQRVU7esM7uicgy2VfZ2dZFCjLgzLbRdqonxBBnm msUYqayq/0Zu3eKgZkgbqgjk6eTONeQjXwOYs7SAvca1fp1tyF4oRKLeZFKi+ukY Pj5WikzOIyJSbB0Cp/C4ao2EFE/L1uYqqCenIa7mP6ouThBbfRVD3Geb/d546/jk J6ylow4/AR4D6f0334tSm/B4mLIJYUhVvaijFwOsh8behCYtT35yE48JJ8NaaIJr kmER6qc5PBGgYVwvsPOFv74JXOio6hVEMBFwGErEtedv44BYEd2udgheCq6ubeHe SuddPRxULC608IJe4cWtr/dR9TG4eoU= -----END CERTIFICATE-----Generated at Mon May 5 08:10:35 2025 by rpki-client