$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: 2IRWP584ImhtIDtrskaZuzbmikSJameRmQ03X3hUcXE= Subject key identifier: F7:CE:AB:1B:FC:8F:CB:CE:11:0B:07:FD:D0:9D:CF:F5:40:93:5F:32 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: B3 Signing time: Sun 11 May 2025 04:47:07 +0000 Manifest this update: Sun 11 May 2025 04:47:06 +0000 Manifest next update: Sun 18 May 2025 04:47:06 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: Bm9AjerErjGMX6NtuskapDWspHjl40bKDcLBBVtcuPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: May 11 04:47:06 2025 GMT Not After : May 18 04:47:06 2025 GMT Subject: CN=68202bca-1159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:3b:e1:d3:f0:60:81:ac:ed:81:e7:51:66: ef:3a:1d:67:5f:94:e7:da:3b:14:2d:0f:c0:71:fb: 7a:c7:6c:6a:9b:6e:22:75:da:82:ec:ed:f1:13:86: 3e:ad:cb:f3:eb:fd:e0:ec:03:df:8e:14:1a:ff:93: 6d:1d:2c:19:38:8d:fa:7e:c5:f9:1d:dd:2d:44:cd: cd:f9:19:b3:20:80:3d:17:31:c1:fd:31:55:46:4a: 8b:17:dc:86:d4:cc:e0:43:89:9d:e1:e5:bc:04:75: 1c:2e:f5:de:41:af:75:6b:cf:f9:d7:00:19:12:78: a5:04:c8:a5:77:a0:0e:4d:79:67:09:15:98:4c:69: 10:4d:aa:2c:d0:0e:6a:4e:a0:74:6f:e5:64:f8:23: 45:e2:ac:ac:99:ec:d9:e7:98:fb:ba:6e:ee:c8:7b: 00:59:11:c5:d3:d0:4f:8f:59:8e:1f:24:c1:4b:99: 52:a3:31:8c:63:b2:69:06:0b:f5:80:b6:b7:6f:f3: 63:fd:79:92:49:13:d0:0e:f5:fe:70:ff:2a:c0:72: ba:3d:54:e0:d7:f6:c5:cd:10:cd:d9:55:d4:a5:ac: fe:8f:a2:fb:2d:ea:48:89:46:b2:1f:3f:d8:bf:fe: 55:78:61:6e:ec:21:5b:70:78:2b:7a:56:13:d0:3a: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:AB:1B:FC:8F:CB:CE:11:0B:07:FD:D0:9D:CF:F5:40:93:5F:32 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ec:46:60:d2:c0:87:7b:91:1f:81:b3:0f:4d:98:9a:a2:bf: 3e:77:fa:c1:86:44:f8:68:9f:b7:4b:97:9c:cb:1f:b8:b6:15: ac:9b:a2:8e:7a:a7:a4:1f:25:10:c8:cb:fe:83:87:18:7a:20: 90:3d:db:63:ad:de:61:2b:e7:2d:72:e1:74:b2:ff:31:07:0e: d5:96:b7:43:60:f5:96:1b:ae:27:91:0e:33:e1:b1:b9:9f:42: 24:02:12:30:df:e0:4a:f3:0b:87:95:ae:e3:b5:5e:da:f8:5c: 75:d2:35:66:54:98:e2:6a:41:f0:94:24:3f:23:55:78:02:e1: cd:47:92:29:2f:eb:65:23:2f:38:20:10:99:4b:0d:32:f0:49: a3:fd:0e:70:8b:f6:a1:50:96:37:e3:c5:34:41:dd:72:01:4c: af:f9:79:d0:e3:2c:0f:d5:94:b9:57:2e:98:51:a7:68:9a:93: 01:6c:eb:d9:bc:54:a3:d1:41:af:36:e2:f2:e3:36:b7:c7:b3: 86:67:47:c7:14:dd:5c:ad:26:f7:b5:9c:75:09:7a:7a:ff:c0: 44:3f:f7:e5:41:73:57:a2:e0:ab:fc:39:78:91:a9:53:26:c4: 3d:f3:b9:10:66:e3:f7:f1:d2:e2:ef:7f:45:20:ee:85:b8:d9: 64:d6:d5:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwNTExMDQ0NzA2WhcNMjUwNTE4MDQ0NzA2WjAYMRYwFAYD VQQDEw02ODIwMmJjYS0xMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkk74dPwYIGs7YHnUWbvOh1nX5Tn2jsULQ/Acft6x2xqm24iddqC7O3xE4Y+ rcvz6/3g7APfjhQa/5NtHSwZOI36fsX5Hd0tRM3N+RmzIIA9FzHB/TFVRkqLF9yG 1MzgQ4md4eW8BHUcLvXeQa91a8/51wAZEnilBMild6AOTXlnCRWYTGkQTaos0A5q TqB0b+Vk+CNF4qysmezZ55j7um7uyHsAWRHF09BPj1mOHyTBS5lSozGMY7JpBgv1 gLa3b/Nj/XmSSRPQDvX+cP8qwHK6PVTg1/bFzRDN2VXUpaz+j6L7LepIiUayHz/Y v/5VeGFu7CFbcHgrelYT0Do17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfOqxv8 j8vOEQsH/dCdz/VAk18yMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe7EZg0sCHe5EfgbMPTZiaor8+d/rBhkT4aJ+3S5ecyx+4thWsm6KO eqekHyUQyMv+g4cYeiCQPdtjrd5hK+ctcuF0sv8xBw7VlrdDYPWWG64nkQ4z4bG5 n0IkAhIw3+BK8wuHla7jtV7a+Fx10jVmVJjiakHwlCQ/I1V4AuHNR5IpL+tlIy84 IBCZSw0y8Emj/Q5wi/ahUJY348U0Qd1yAUyv+XnQ4ywP1ZS5Vy6YUadompMBbOvZ vFSj0UGvNuLy4za3x7OGZ0fHFN1crSb3tZx1CXp6/8BEP/flQXNXouCr/Dl4kalT JsQ987kQZuP38dLi739FIO6FuNlk1tUl -----END CERTIFICATE-----Generated at Mon May 12 14:09:40 2025 by rpki-client