$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: rPZIc7twGPidFgqkAhjjoqXipE94tCFG6st4lsr74L8= Subject key identifier: CB:35:06:91:22:88:7B:5C:FD:16:AB:90:00:B7:A2:7E:F5:31:95:FF Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0E45 Signing time: Wed 14 May 2025 17:53:53 +0000 Manifest this update: Wed 14 May 2025 17:53:53 +0000 Manifest next update: Wed 21 May 2025 17:53:53 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: 9wnL3QamAR9ROI5Uz7ysSb+UXI0H5wAPiDgR4QS9Ouc=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: May 14 17:53:53 2025 GMT Not After : May 21 17:53:53 2025 GMT Subject: CN=6824d8b1-a1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:6d:6f:b2:14:fa:f0:26:15:c0:ef:a6:42: f1:b9:ba:c6:1f:af:ed:18:e7:21:3e:a1:88:fe:84: b5:ad:05:65:64:bb:1c:d0:20:46:9f:5e:d7:49:08: bd:d2:b5:c9:98:0d:9f:0d:80:d6:c7:6a:66:3c:d5: ba:a4:1a:67:13:59:29:cd:1c:e4:05:c3:04:eb:64: 28:8c:8c:ac:86:57:d5:96:0d:7d:91:ad:d8:50:9b: 36:f6:36:18:65:5d:c8:69:66:f7:ea:59:b1:9d:8e: 2a:53:66:0d:b8:11:38:38:27:92:c0:c7:8e:45:a2: 70:13:e9:02:14:96:66:96:7b:c1:26:5b:2f:5f:86: e2:e8:7a:02:f8:2b:56:c2:61:31:93:3f:e4:3d:c3: 03:a8:26:31:a6:65:33:5a:89:27:f9:d8:fc:00:76: e9:e5:6e:6d:d2:a1:7d:f8:86:28:a0:b9:1e:58:ec: 67:6e:d2:bd:0c:08:b5:3b:6d:ce:46:71:59:5c:9a: 1b:f3:b0:d5:8a:1a:3b:a7:9d:bb:17:e8:c5:b4:fe: 4f:b0:9b:12:40:5b:6c:ed:17:93:f6:69:2d:70:2a: 8c:f2:12:06:f2:9a:82:50:59:45:bd:13:47:ae:6b: 26:34:60:cb:19:9f:5a:9e:c1:61:6d:bb:cb:c7:d8: 1b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:06:91:22:88:7B:5C:FD:16:AB:90:00:B7:A2:7E:F5:31:95:FF X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:c7:46:39:9e:2c:08:55:eb:b6:aa:8b:0b:33:f8:fe:7b: ab:8c:98:28:a1:3e:7a:7b:d0:77:86:bd:1b:63:a7:29:b4:f4: 63:72:44:f7:8e:2d:66:e7:3b:48:4b:a4:15:b8:52:ec:38:85: 63:ec:0c:d6:3b:95:22:c2:f2:5c:4c:a2:55:ec:f7:e0:d4:09: 2f:7a:9c:3e:1d:2a:d4:a4:71:ff:bb:de:ac:eb:42:72:d9:74: f9:47:3b:0f:3d:54:5b:54:5a:10:19:3e:a2:cd:f9:b7:81:d2: 94:c3:d1:40:52:2f:5b:c4:08:8a:a4:57:1a:06:82:3f:67:ca: e5:c3:fa:6f:67:06:c0:df:fd:f8:df:fa:c9:4a:17:dd:62:cf: 7a:d8:5e:b0:c2:ee:49:fa:06:1e:81:de:30:8c:8e:2a:3c:e9: c0:2b:6c:d6:e1:40:00:de:9c:ca:b7:e4:db:fc:7a:22:6b:21: 4b:86:79:54:fa:49:43:2e:5a:eb:71:d4:62:fc:91:be:92:c1: 80:5b:ad:22:33:b0:88:3f:3a:ae:2f:bc:e5:9d:aa:e7:32:8c: 56:32:6b:0b:7e:d6:55:22:69:08:57:2f:9f:1b:b8:31:dd:2f: d0:fe:00:9f:b9:01:a7:b1:9a:09:3a:5c:62:51:1d:d4:c5:eb: b9:0a:61:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUwNTE0MTc1MzUzWhcNMjUwNTIxMTc1MzUzWjAYMRYwFAYD VQQDEw02ODI0ZDhiMS1hMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqRtb7IU+vAmFcDvpkLxubrGH6/tGOchPqGI/oS1rQVlZLsc0CBGn17XSQi9 0rXJmA2fDYDWx2pmPNW6pBpnE1kpzRzkBcME62QojIyshlfVlg19ka3YUJs29jYY ZV3IaWb36lmxnY4qU2YNuBE4OCeSwMeORaJwE+kCFJZmlnvBJlsvX4bi6HoC+CtW wmExkz/kPcMDqCYxpmUzWokn+dj8AHbp5W5t0qF9+IYooLkeWOxnbtK9DAi1O23O RnFZXJob87DViho7p527F+jFtP5PsJsSQFts7ReT9mktcCqM8hIG8pqCUFlFvRNH rmsmNGDLGZ9ansFhbbvLx9gbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs1BpEi iHtc/RarkAC3on71MZX/MB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRhMdGOZ4sCFXrtqqLCzP4/nurjJgooT56e9B3hr0bY6cptPRjckT3 ji1m5ztIS6QVuFLsOIVj7AzWO5UiwvJcTKJV7Pfg1Akvepw+HSrUpHH/u96s60Jy 2XT5RzsPPVRbVFoQGT6izfm3gdKUw9FAUi9bxAiKpFcaBoI/Z8rlw/pvZwbA3/34 3/rJShfdYs962F6wwu5J+gYegd4wjI4qPOnAK2zW4UAA3pzKt+Tb/HoiayFLhnlU +klDLlrrcdRi/JG+ksGAW60iM7CIPzquL7zlnarnMoxWMmsLftZVImkIVy+fG7gx 3S/Q/gCfuQGnsZoJOlxiUR3Uxeu5CmGq -----END CERTIFICATE-----Generated at Fri May 16 13:54:53 2025 by rpki-client