$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: Kidu7WcEY+Mabzec2ViTd9fskjjZKNrh7AJm+wMEwoY= Subject key identifier: B2:15:AB:58:A4:A3:97:DB:D5:F5:2C:E8:F1:1A:D6:F6:83:8F:9E:E0 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0925 Signing time: Tue 13 May 2025 23:23:59 +0000 Manifest this update: Tue 13 May 2025 23:23:59 +0000 Manifest next update: Tue 20 May 2025 23:23:59 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: AXgbPH/8Jih4SZxcAedrqIwoqHIDgYzoVsP16nsj3vQ=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 23:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: May 13 23:23:59 2025 GMT Not After : May 20 23:23:59 2025 GMT Subject: CN=6823d48f-9c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:7b:09:34:aa:f8:6e:fa:1a:2c:a9:5c:cb: 5f:e5:4d:d5:5b:a9:ae:60:1f:d5:50:de:49:c9:e7: f9:bc:1c:62:93:ab:e3:e4:23:58:62:76:6d:66:20: d3:bc:1c:4c:b7:a6:c2:5e:36:16:73:f8:31:d2:af: 60:5a:13:23:9a:09:8c:27:44:4d:59:f5:ba:33:79: 32:a8:39:6e:54:db:3e:f6:83:23:3e:90:e1:47:d3: 43:e0:14:09:81:f0:ba:f5:cc:72:fe:4a:e5:ab:e4: aa:f0:17:c1:db:83:8d:cd:9b:90:e4:11:a7:f3:51: e7:7a:ed:a8:47:88:8d:7e:4a:6e:de:47:73:0c:ec: 04:9b:7f:d8:5c:c4:2f:d0:46:b8:83:1e:26:83:ed: be:65:17:59:a4:e6:19:93:2c:e4:70:57:ba:f0:16: 16:f9:a6:e6:a0:20:69:2b:33:7e:82:71:b9:51:4b: da:d4:9c:bc:a8:92:58:e1:36:6c:3c:d6:aa:93:1f: 5f:4f:6f:c3:1a:28:2b:fc:95:2f:15:ea:27:e4:0f: 79:fb:c6:40:c8:22:3d:ca:a7:b6:43:d1:f6:af:e8: 11:3c:e2:4b:4f:55:ac:73:eb:ea:f8:20:a0:dc:01: 1c:a2:3d:a6:15:55:59:8a:8b:0e:f1:ba:f6:85:c8: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:AB:58:A4:A3:97:DB:D5:F5:2C:E8:F1:1A:D6:F6:83:8F:9E:E0 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e5:8a:a9:56:00:ad:57:64:cb:d2:3f:fd:02:aa:1b:64:76: 6c:95:19:f4:a5:12:23:8c:b9:1b:7a:f9:44:9a:3b:51:6f:33: 23:31:df:95:0c:6c:32:44:14:82:94:65:c3:2d:37:61:a9:72: 91:a4:4b:a7:04:f9:6d:89:0d:6c:67:e6:f2:3f:f6:01:66:44: 9e:37:7b:5c:c7:7e:d9:9f:d0:e3:6f:22:bb:ae:b9:10:a3:95: ee:6a:3e:1e:13:3c:f3:b4:01:72:e7:0e:c3:08:58:0d:f6:54: 2f:cc:2d:21:47:2d:8a:30:bf:13:96:df:e6:6d:c0:ac:ed:e0: ba:fc:4a:a6:90:ed:99:50:de:d8:2d:32:6d:33:a0:33:ab:5a: 0a:c9:bd:f9:e9:3d:6d:90:b9:5f:5d:18:65:1c:1b:74:55:51: 11:65:4a:a8:e1:3e:ab:65:85:48:11:e3:90:f1:0c:9c:ee:57: 66:70:4c:03:0d:47:93:cd:ed:02:6e:b2:19:7f:95:b5:cd:26: 94:cb:75:9e:6b:d4:6d:59:0f:a0:07:ce:ec:bd:13:22:6f:63: 89:d0:6f:17:f4:62:7c:14:8d:d2:1c:ff:74:49:8d:02:05:65: f1:22:2d:93:14:b7:ef:5f:4c:b5:56:d4:28:d0:d4:6e:97:64: 11:1a:10:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUwNTEzMjMyMzU5WhcNMjUwNTIwMjMyMzU5WjAYMRYwFAYD VQQDEw02ODIzZDQ4Zi05YzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK57CTSq+G76GiypXMtf5U3VW6muYB/VUN5Jyef5vBxik6vj5CNYYnZtZiDT vBxMt6bCXjYWc/gx0q9gWhMjmgmMJ0RNWfW6M3kyqDluVNs+9oMjPpDhR9ND4BQJ gfC69cxy/krlq+Sq8BfB24ONzZuQ5BGn81Hneu2oR4iNfkpu3kdzDOwEm3/YXMQv 0Ea4gx4mg+2+ZRdZpOYZkyzkcFe68BYW+abmoCBpKzN+gnG5UUva1Jy8qJJY4TZs PNaqkx9fT2/DGigr/JUvFeon5A95+8ZAyCI9yqe2Q9H2r+gRPOJLT1Wsc+vq+CCg 3AEcoj2mFVVZiosO8br2hciYbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIVq1ik o5fb1fUs6PEa1vaDj57gMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe5YqpVgCtV2TL0j/9AqobZHZslRn0pRIjjLkbevlEmjtRbzMjMd+V DGwyRBSClGXDLTdhqXKRpEunBPltiQ1sZ+byP/YBZkSeN3tcx37Zn9DjbyK7rrkQ o5Xuaj4eEzzztAFy5w7DCFgN9lQvzC0hRy2KML8Tlt/mbcCs7eC6/EqmkO2ZUN7Y LTJtM6Azq1oKyb356T1tkLlfXRhlHBt0VVERZUqo4T6rZYVIEeOQ8Qyc7ldmcEwD DUeTze0CbrIZf5W1zSaUy3Wea9RtWQ+gB87svRMib2OJ0G8X9GJ8FI3SHP90SY0C BWXxIi2TFLfvX0y1VtQo0NRul2QRGhDv -----END CERTIFICATE-----Generated at Wed May 14 20:58:40 2025 by rpki-client