$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft File: LIi8YKOEeXk7VUcMN37SPqAtByI.mft (raw, json) Hash identifier: otsWhaXFhuG5tK6DrKNmMwCNulYReK8wBdKUY8u/p00= Subject key identifier: 68:C0:38:D4:20:EA:05:3E:C5:65:9F:0D:6C:23:7C:52:1C:AB:67:69 Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 Certificate issuer: /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft Manifest number: 0184 Signing time: Thu 15 May 2025 03:04:41 +0000 Manifest this update: Thu 15 May 2025 03:04:41 +0000 Manifest next update: Thu 22 May 2025 03:04:41 +0000 Files and hashes: 1: LIi8YKOEeXk7VUcMN37SPqAtByI.crl (hash: 2PnbxRwlo1UF1pepQ5XMKEl1by8NP/1XmhVI9mvsn7k=) 2: 97EFA28EE5A911ED80EF757BC4F9AE02.roa (hash: AWrudQQgzJLS7MSlB50m43MehkidwQ5Ce89Ne/Grvwo=) 3: ED0DECA6E5A611EDADDD1074C4F9AE02.roa (hash: z3xacBjovMyDRqTM7g6iTpB77mlZVh09tcUD0xiN+xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5114, serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722 Validity Not Before: May 15 03:04:41 2025 GMT Not After : May 22 03:04:41 2025 GMT Subject: CN=682559c9-8153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:f0:c2:de:a5:fa:79:aa:5f:19:0d:9d:48: cf:43:35:f8:6a:e1:c0:cf:b4:24:c6:c1:2c:84:ec: f4:12:f9:83:7d:e3:d6:e6:51:57:6f:34:a5:1d:92: 3c:11:dc:92:d9:86:f9:65:2d:ef:c7:cb:8b:95:d2: 2b:ac:f5:8b:6d:c9:7c:1c:9c:29:00:89:de:f7:a8: 2c:03:be:2e:9c:65:d6:64:9a:e3:8b:ac:66:9b:96: 6c:f8:5d:40:26:a0:bf:7d:ac:7c:7b:4c:5c:22:26: 24:b3:48:5d:61:98:6b:70:ba:e6:5f:a9:36:a2:22: b3:88:eb:fc:53:a2:26:42:73:55:f7:dd:f8:c0:47: 70:63:8e:33:d0:af:92:63:fa:e2:1f:ea:4b:c3:6d: 8f:8d:b3:df:fd:49:2a:e8:a4:af:3b:b3:56:23:9b: 50:8c:55:53:92:b9:d3:98:41:db:ca:ad:e8:0d:8a: 66:61:4c:4f:b8:b2:d6:40:b1:4c:57:e5:4b:b6:9f: ce:de:43:fd:5e:c7:14:af:21:65:a0:8b:be:6f:fa: 11:27:e0:02:45:08:f6:c1:68:42:74:51:b6:2d:a8: fe:ef:23:b9:71:e7:97:1f:8a:63:e1:9c:0f:85:6a: de:10:e8:b3:eb:1a:17:a9:c8:16:43:a7:67:a7:ed: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:38:D4:20:EA:05:3E:C5:65:9F:0D:6C:23:7C:52:1C:AB:67:69 X509v3 Authority Key Identifier: keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:43:58:ae:5c:63:76:1b:5e:5b:c0:b4:19:9c:7c:c4:ce:84: c7:da:c7:8d:fc:18:83:b3:0f:61:9c:f6:67:bb:64:b2:ea:e5: b5:04:db:dd:c5:0d:c5:bd:33:5e:71:c3:1f:da:1f:02:4a:40: 8b:6a:f3:ed:a8:10:7f:a2:d6:bc:68:3f:7d:67:6f:5f:e2:ed: 39:f4:b7:a7:e3:59:1d:b7:dc:94:88:e7:8e:f1:e3:5a:c4:f2: 1f:b7:8e:7a:d6:9a:14:2a:09:60:9b:db:aa:ea:99:6b:9e:e7: 3c:1f:a5:4b:f4:4f:20:07:c4:dd:08:cc:48:2a:88:d4:dc:a6: cd:a9:4f:c2:5f:96:fe:aa:ca:0c:48:e8:6c:52:d4:b5:f9:71: dd:4d:71:96:69:53:2e:41:f2:f6:ac:6c:8f:2a:4e:b1:6a:9f: fb:8b:06:ba:a4:69:4f:c4:40:45:18:de:53:be:95:66:61:79: e9:41:d7:d5:8f:08:3d:d4:b6:1e:56:64:c0:56:cf:99:77:91: cc:13:df:a7:81:6b:8f:57:7d:02:47:3a:35:a4:0b:ea:a8:04: e8:64:19:dd:29:ba:45:69:80:80:9c:e7:26:39:15:44:90:d5: 41:ae:1c:8b:02:0b:2d:c7:94:ba:81:fb:99:54:8a:42:34:79: 29:49:69:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxMTQxMTAvBgNVBAUTKDJDODhCQzYwQTM4NDc5NzkzQjU1NDcwQzM3N0VEMjNF QTAyRDA3MjIwHhcNMjUwNTE1MDMwNDQxWhcNMjUwNTIyMDMwNDQxWjAYMRYwFAYD VQQDEw02ODI1NTljOS04MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xLwwt6l+nmqXxkNnUjPQzX4auHAz7QkxsEshOz0EvmDfePW5lFXbzSlHZI8 EdyS2Yb5ZS3vx8uLldIrrPWLbcl8HJwpAIne96gsA74unGXWZJrji6xmm5Zs+F1A JqC/fax8e0xcIiYks0hdYZhrcLrmX6k2oiKziOv8U6ImQnNV9934wEdwY44z0K+S Y/riH+pLw22PjbPf/Ukq6KSvO7NWI5tQjFVTkrnTmEHbyq3oDYpmYUxPuLLWQLFM V+VLtp/O3kP9XscUryFloIu+b/oRJ+ACRQj2wWhCdFG2Laj+7yO5ceeXH4pj4ZwP hWreEOiz6xoXqcgWQ6dnp+3hxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjAONQg 6gU+xWWfDWwjfFIcq2dpMB8GA1UdIwQYMBaAFCyIvGCjhHl5O1VHDDd+0j6gLQci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTExNC8zNEUxOUU4OEU1 QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVYazdWVWNNTjM3U1BxQXRC eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJaThZS09FZVhrN1ZVY01OMzdTUHFBdEJ5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVY azdWVWNNTjM3U1BxQXRCeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVQ1iuXGN2G15bwLQZnHzEzoTH2seN/BiDsw9hnPZnu2Sy6uW1BNvd xQ3FvTNeccMf2h8CSkCLavPtqBB/ota8aD99Z29f4u059Len41kdt9yUiOeO8eNa xPIft4561poUKglgm9uq6plrnuc8H6VL9E8gB8TdCMxIKojU3KbNqU/CX5b+qsoM SOhsUtS1+XHdTXGWaVMuQfL2rGyPKk6xap/7iwa6pGlPxEBFGN5TvpVmYXnpQdfV jwg91LYeVmTAVs+Zd5HME9+ngWuPV30CRzo1pAvqqAToZBndKbpFaYCAnOcmORVE kNVBrhyLAgstx5S6gfuZVIpCNHkpSWkS -----END CERTIFICATE-----Generated at Thu May 15 23:23:40 2025 by rpki-client