$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: kaQb2X7i8r3Mok+MoWaarzopq0osTSSYBAqJz91RxAg= Subject key identifier: D4:9F:11:F0:A1:08:92:D1:90:5C:24:BB:B1:D7:7F:B8:D1:02:36:DA Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: 4E Signing time: Tue 13 May 2025 06:31:39 +0000 Manifest this update: Tue 13 May 2025 06:31:38 +0000 Manifest next update: Tue 20 May 2025 06:31:38 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: MkUek1bM88LImDxtkf+oLzaBjMpKhOeoXJ9bj63f4JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: May 13 06:31:38 2025 GMT Not After : May 20 06:31:38 2025 GMT Subject: CN=6822e74a-5bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:90:1c:9d:31:9f:c2:61:97:2b:9e:12:fa: fa:34:2f:6a:6f:c9:48:78:4b:dd:a3:11:45:e3:5c: d6:23:00:d8:3c:9f:4b:aa:bf:3b:d4:aa:42:72:3e: 53:77:cf:a9:c6:44:8d:bd:cb:b1:26:ab:c6:c4:bb: d2:ab:c0:5e:bb:a0:54:be:9d:2f:df:f2:88:51:13: 00:ca:c8:c9:19:71:6c:1e:67:3d:67:7f:2c:9d:9f: ae:b1:4f:62:cd:df:e6:e5:77:53:5d:54:48:9f:e0: 68:07:e8:0c:15:65:44:5f:07:4b:3b:e5:66:e0:83: c4:ce:82:15:6e:71:66:31:9a:8a:ba:cf:bd:8c:a4: 4d:d6:ee:c0:bb:b0:b3:4e:d1:22:fe:5e:76:1e:a7: 14:39:09:da:b0:af:17:46:b3:39:f0:36:df:14:26: 35:75:80:e7:3d:3f:57:64:ce:7d:e7:74:c8:fa:2f: 5a:1d:93:24:73:d9:46:15:a5:d1:0c:2f:a9:47:a0: 00:8b:61:7e:30:4d:da:e7:c0:9b:c5:77:9d:82:20: d6:46:76:b4:83:63:62:a7:76:1c:35:e0:9e:55:fa: 5a:87:2d:c9:0b:dd:7f:9b:3e:81:8f:13:31:e4:c5: e0:80:90:02:cb:1b:e0:98:e3:d6:94:ad:70:42:b8: 18:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:11:F0:A1:08:92:D1:90:5C:24:BB:B1:D7:7F:B8:D1:02:36:DA X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b7:67:13:0a:88:4b:de:6a:30:fc:fe:1e:ca:89:74:ff:09: 10:25:33:42:8f:9b:26:b1:32:e0:5f:de:40:0c:27:5f:f3:34: 2a:11:0d:a4:70:93:74:f1:78:f3:7f:ce:4d:36:a7:48:e7:f9: 80:5b:b4:b7:01:2b:23:39:58:02:db:63:ae:3a:dc:a7:a7:93: 4e:da:68:55:ba:39:2c:b5:d2:e7:01:d2:04:a6:45:bf:d8:56: 46:bd:18:c2:5c:66:d4:ce:29:61:42:2c:e4:47:00:cf:79:16: a0:3d:14:fa:e4:38:2f:ed:da:f4:97:9c:fa:0b:3d:7c:42:9b: 41:3e:f8:26:3c:22:69:76:44:6e:c9:30:26:aa:ff:78:ac:36: aa:65:13:8f:74:44:07:7d:8d:a0:88:90:42:8a:35:67:bc:b8: 83:4d:0a:0c:9e:83:1d:ef:9b:30:8b:3b:fa:33:57:82:f6:98: 4b:84:76:cc:76:bd:9b:f7:fd:ee:0b:19:f4:48:c0:c0:9f:47: 91:04:25:61:89:eb:4b:78:a8:64:44:0b:e9:c0:fe:ec:3a:00: 12:a0:a7:52:0d:df:35:1f:61:0f:bd:88:30:5b:af:af:20:c0: b4:8e:bf:2c:4b:64:d7:d2:3f:90:cc:aa:d6:f1:87:81:65:8f: bf:0f:cd:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDM4QjExMC8GA1UEBRMoMkY2QjFFN0UxNDAxREUwMEFDOEVFREI3QTg1OTBEMDNE QzU0MEY3ODAeFw0yNTA1MTMwNjMxMzhaFw0yNTA1MjAwNjMxMzhaMBgxFjAUBgNV BAMTDTY4MjJlNzRhLTViZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYyJAcnTGfwmGXK54S+vo0L2pvyUh4S92jEUXjXNYjANg8n0uqvzvUqkJyPlN3 z6nGRI29y7Emq8bEu9KrwF67oFS+nS/f8ohREwDKyMkZcWweZz1nfyydn66xT2LN 3+bld1NdVEif4GgH6AwVZURfB0s75Wbgg8TOghVucWYxmoq6z72MpE3W7sC7sLNO 0SL+XnYepxQ5CdqwrxdGsznwNt8UJjV1gOc9P1dkzn3ndMj6L1odkyRz2UYVpdEM L6lHoACLYX4wTdrnwJvFd52CINZGdrSDY2Kndhw14J5V+lqHLckL3X+bPoGPEzHk xeCAkALLG+CY49aUrXBCuBiDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1J8R8KEI ktGQXCS7sdd/uNECNtowHwYDVR0jBBgwFoAUL2sefhQB3gCsju23qFkNA9xUD3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMzhCL0ExQUIyQUJDQkE4 OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDJzZWZoUUIzZ0NzanUyM3FGa05BOXhVRDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MzhCL0ExQUIyQUJDQkE4OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dD c2p1MjNxRmtOQTl4VUQzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKW3ZxMKiEveajD8/h7KiXT/CRAlM0KPmyaxMuBf3kAMJ1/zNCoRDaRw k3TxePN/zk02p0jn+YBbtLcBKyM5WALbY6463Kenk07aaFW6OSy10ucB0gSmRb/Y Vka9GMJcZtTOKWFCLORHAM95FqA9FPrkOC/t2vSXnPoLPXxCm0E++CY8Iml2RG7J MCaq/3isNqplE490RAd9jaCIkEKKNWe8uINNCgyegx3vmzCLO/ozV4L2mEuEdsx2 vZv3/e4LGfRIwMCfR5EEJWGJ60t4qGREC+nA/uw6ABKgp1IN3zUfYQ+9iDBbr68g wLSOvyxLZNfSP5DMqtbxh4Flj78PzV0= -----END CERTIFICATE-----Generated at Thu May 15 00:31:29 2025 by rpki-client