$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: qcZjIaz7UYrSXoaxZQ+y7dqDQ0jfTBnJ5aH77Ic7IFI= Subject key identifier: 05:1E:6D:43:65:0B:11:FB:63:7D:A4:77:8F:0F:F7:74:AB:6B:F3:94 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0B24 Signing time: Wed 14 May 2025 19:21:21 +0000 Manifest this update: Wed 14 May 2025 19:21:20 +0000 Manifest next update: Wed 21 May 2025 19:21:20 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: d7IgeWYUWmJf1o+AE4QZvFkAdmZbDme+9nEL1ehidj8=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: LHN9DyWzlGRcwkpXqFqZ90XaKLujDGwCFAysXhBXguc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: May 14 19:21:20 2025 GMT Not After : May 21 19:21:20 2025 GMT Subject: CN=6824ed30-4c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:aa:14:40:83:eb:a8:ae:f5:95:18:de:8d: a9:ae:7b:1d:45:10:d9:7d:61:7f:a6:f1:7d:89:95: c5:dd:4a:5f:c6:82:5a:94:cf:cf:d4:f1:6c:bf:fe: 8b:03:b8:a5:f8:74:d1:dd:54:df:99:f3:80:db:9a: 72:f3:08:68:cd:04:29:78:94:81:06:93:9e:df:7f: 6f:41:9c:33:3d:fb:d4:f2:43:f7:f3:3e:c1:7e:cc: e3:84:89:47:39:8f:5c:84:24:4a:1d:10:49:b9:8c: 06:25:ef:6e:07:d0:f0:2d:1e:44:79:25:dd:a5:c4: b9:e3:ef:14:80:f8:c1:62:fb:f5:c2:34:82:aa:99: f2:5c:b9:c7:86:33:18:6c:82:86:b1:c9:f9:74:af: 69:54:c6:4e:63:c7:c8:2d:e9:dd:56:6a:45:32:92: 40:ef:e8:eb:52:f3:4f:b9:2c:be:ba:bb:98:13:c5: fa:f2:b4:f1:8b:7b:c2:cb:c1:31:1b:13:97:62:02: a3:88:7e:01:14:47:d5:46:ef:a6:e2:f8:a7:2c:c6: a7:0a:5c:9e:12:5f:3b:61:d9:87:49:d7:44:e5:5d: 38:b3:09:04:52:5d:ea:f7:9c:6e:d7:d5:aa:98:e7: 38:c4:64:ec:38:3d:2b:3a:ab:05:4c:81:c6:4f:d5: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:6D:43:65:0B:11:FB:63:7D:A4:77:8F:0F:F7:74:AB:6B:F3:94 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:27:10:3b:2d:f5:72:cb:e2:13:bd:e1:9a:0d:2d:4f:3c: 66:17:d1:4c:77:cd:e4:f9:84:72:8d:a9:39:5e:a3:aa:b4:fb: de:a7:15:23:2d:ae:84:fb:db:20:97:cb:1c:be:82:0c:dd:77: e2:ba:4b:56:b6:a4:f8:b3:74:54:ec:13:80:11:6c:24:a5:d3: 96:56:2b:54:8a:99:20:1d:3d:b8:9d:ed:a2:84:e5:5d:aa:23: 9b:2e:e1:64:9c:76:ec:9f:e1:37:a1:cf:3d:b4:4a:8b:30:8c: 88:a1:6f:67:39:6d:5f:23:78:3d:68:73:c6:8f:14:55:c0:77: 4d:ec:fd:72:5b:d8:6a:4c:c6:41:cb:c7:bc:2b:78:77:c0:e7: 21:62:55:5b:55:82:02:76:32:18:dd:f2:07:f0:be:77:9b:b9: 1e:75:4a:d2:e9:db:7e:9c:18:6a:27:e4:82:b3:2c:31:51:90: d5:da:26:ac:4e:e1:2d:62:a4:e3:76:a1:a0:1a:16:a4:f3:14: 8c:4a:38:04:b8:bf:61:c0:8d:a0:f7:d6:6d:7d:c8:e8:fa:23: 2b:06:c5:46:6c:5f:49:a3:5d:1d:6e:f0:55:f7:3a:01:59:79: 8a:32:5c:2b:3a:31:44:dc:5f:a0:7f:dc:83:8a:42:6c:a9:4b: 51:83:c1:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUwNTE0MTkyMTIwWhcNMjUwNTIxMTkyMTIwWjAYMRYwFAYD VQQDEw02ODI0ZWQzMC00Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKGqFECD66iu9ZUY3o2prnsdRRDZfWF/pvF9iZXF3UpfxoJalM/P1PFsv/6L A7il+HTR3VTfmfOA25py8whozQQpeJSBBpOe339vQZwzPfvU8kP38z7BfszjhIlH OY9chCRKHRBJuYwGJe9uB9DwLR5EeSXdpcS54+8UgPjBYvv1wjSCqpnyXLnHhjMY bIKGscn5dK9pVMZOY8fILendVmpFMpJA7+jrUvNPuSy+uruYE8X68rTxi3vCy8Ex GxOXYgKjiH4BFEfVRu+m4vinLManClyeEl87YdmHSddE5V04swkEUl3q95xu19Wq mOc4xGTsOD0rOqsFTIHGT9XSIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUebUNl CxH7Y32kd48P93Sra/OUMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyScQOy31csviE73hmg0tTzxmF9FMd83k+YRyjak5XqOqtPvepxUj La6E+9sgl8scvoIM3XfiuktWtqT4s3RU7BOAEWwkpdOWVitUipkgHT24ne2ihOVd qiObLuFknHbsn+E3oc89tEqLMIyIoW9nOW1fI3g9aHPGjxRVwHdN7P1yW9hqTMZB y8e8K3h3wOchYlVbVYICdjIY3fIH8L53m7kedUrS6dt+nBhqJ+SCsywxUZDV2ias TuEtYqTjdqGgGhak8xSMSjgEuL9hwI2g99Ztfcjo+iMrBsVGbF9Jo10dbvBV9zoB WXmKMlwrOjFE3F+gf9yDikJsqUtRg8Eo -----END CERTIFICATE-----Generated at Thu May 15 00:06:30 2025 by rpki-client