$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: erx9GiWIlTUNaoFEYqdzq3xv1ZsGlMX5FEyWSKdZCBI= Subject key identifier: 82:3D:13:E7:A7:4D:D3:B7:98:7E:C6:26:B0:2F:12:66:D6:E2:92:E9 Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0F61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 1612 Signing time: Fri 16 May 2025 17:49:00 +0000 Manifest this update: Fri 16 May 2025 17:48:59 +0000 Manifest next update: Fri 23 May 2025 17:48:59 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: l8OEhLlgqNQWjlRGKfuW6f4EdBQWwH3RWFL8H9zorRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: May 16 17:48:59 2025 GMT Not After : May 23 17:48:59 2025 GMT Subject: CN=68277a8b-5e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:58:c5:3e:76:6c:22:5c:08:ea:17:61:4c:26: c9:4c:91:8d:df:a4:c7:10:90:d5:d3:7c:c9:cb:d0: 30:1e:6a:0c:84:92:77:18:95:e5:95:ed:8e:45:dd: 8b:c0:32:6e:59:49:57:83:28:e8:16:b0:e8:08:bf: c3:9e:31:b5:7d:8e:6c:76:92:ae:da:76:10:8b:6a: f8:90:e7:4b:04:3d:1c:b4:14:e8:f6:06:7e:ac:8e: 55:62:91:06:8d:b8:21:12:7a:27:30:02:75:1e:6c: 40:6d:ae:9f:99:f6:5c:15:8d:d0:3e:6e:35:42:85: d1:ed:88:03:64:01:7a:f5:ba:89:76:57:20:ba:27: 6b:68:5e:e4:2a:23:c4:76:56:25:57:5e:f5:5d:57: b2:1e:33:61:44:6e:6f:77:50:dd:0d:60:09:b1:91: 83:86:a3:d5:94:cc:ea:49:53:2e:a3:0e:dc:fe:02: 7c:d3:ca:ef:e5:ed:88:bc:fd:94:ca:99:66:4d:7e: cf:0b:2a:ca:13:9f:76:8a:33:26:32:b9:7c:b0:95: 6e:6a:59:d3:88:bb:cd:6b:d4:ca:21:5a:38:3a:d2: e3:c6:9b:77:ae:9c:3f:be:aa:6d:16:26:81:62:2c: ea:70:a6:43:a9:47:c4:5b:da:e4:1c:2c:02:2d:cc: c9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3D:13:E7:A7:4D:D3:B7:98:7E:C6:26:B0:2F:12:66:D6:E2:92:E9 X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a9:c7:dd:91:3b:33:95:87:ed:c0:e0:d3:32:35:0c:b5:e2: 02:af:3d:84:cd:f6:64:6a:ee:d5:55:cc:3e:d2:21:d3:2b:33: 06:e5:e8:7a:45:fd:fd:35:ba:32:9c:77:5d:82:55:69:95:5c: 37:79:74:4e:a1:52:ae:68:03:3d:40:68:2a:b0:3f:f3:f2:3a: c0:e8:a4:df:a1:e6:b3:ef:21:ff:74:07:6c:73:1d:59:c1:81: d4:55:cf:c0:28:92:58:b3:60:28:38:d2:54:17:ae:5c:6d:ae: e2:ea:34:d5:e8:78:0c:4c:ac:8d:8d:df:e4:80:bb:17:87:f3: 97:dd:8a:64:b8:f4:cb:01:37:e8:63:49:3a:bd:b3:d5:a0:79: 3e:48:bf:42:29:86:11:4d:97:9a:46:a3:5e:d9:be:67:da:98: f5:c1:47:35:c4:b6:ff:99:9e:8e:c6:6b:c9:2e:00:85:98:f4: d1:32:9a:be:e5:90:d0:94:22:b5:1d:f4:1b:03:cf:be:a9:96: 1a:e9:ad:66:08:0f:56:5b:c9:26:89:1d:82:9b:b3:2d:04:3f: 79:1d:80:27:98:21:db:9a:54:d9:44:bf:60:9d:dc:dd:f5:91: 6c:67:12:2f:eb:c1:28:63:42:75:32:0c:a6:05:98:40:42:15: 3a:a9:43:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUwNTE2MTc0ODU5WhcNMjUwNTIzMTc0ODU5WjAYMRYwFAYD VQQDEw02ODI3N2E4Yi01ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VjFPnZsIlwI6hdhTCbJTJGN36THEJDV03zJy9AwHmoMhJJ3GJXlle2ORd2L wDJuWUlXgyjoFrDoCL/DnjG1fY5sdpKu2nYQi2r4kOdLBD0ctBTo9gZ+rI5VYpEG jbghEnonMAJ1HmxAba6fmfZcFY3QPm41QoXR7YgDZAF69bqJdlcguidraF7kKiPE dlYlV171XVeyHjNhRG5vd1DdDWAJsZGDhqPVlMzqSVMuow7c/gJ808rv5e2IvP2U yplmTX7PCyrKE592ijMmMrl8sJVualnTiLvNa9TKIVo4OtLjxpt3rpw/vqptFiaB YizqcKZDqUfEW9rkHCwCLczJvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII9E+en TdO3mH7GJrAvEmbW4pLpMB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qcfdkTszlYftwODTMjUMteICrz2EzfZkau7VVcw+0iHTKzMG5eh6 Rf39NboynHddglVplVw3eXROoVKuaAM9QGgqsD/z8jrA6KTfoeaz7yH/dAdscx1Z wYHUVc/AKJJYs2AoONJUF65cba7i6jTV6HgMTKyNjd/kgLsXh/OX3YpkuPTLATfo Y0k6vbPVoHk+SL9CKYYRTZeaRqNe2b5n2pj1wUc1xLb/mZ6OxmvJLgCFmPTRMpq+ 5ZDQlCK1HfQbA8++qZYa6a1mCA9WW8kmiR2Cm7MtBD95HYAnmCHbmlTZRL9gndzd 9ZFsZxIv68EoY0J1MgymBZhAQhU6qUNZ -----END CERTIFICATE-----Generated at Sat May 17 09:37:25 2025 by rpki-client