$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: oTzYPWLHaq3rc/Ou6dv6H/11jzhNZfLXENDfvt4AmTc= Subject key identifier: FC:3C:20:B4:0B:0E:AC:A9:1C:65:8E:AA:EE:72:AF:90:EC:18:57:AB Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 01A2 Signing time: Mon 05 May 2025 02:20:47 +0000 Manifest this update: Mon 05 May 2025 02:20:46 +0000 Manifest next update: Mon 12 May 2025 02:20:46 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: fS6j18dcMXFIVoBX9fCKQelpCMq/7kpSNp9BTg77ucE=) 2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=) 3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: w5eiVbjwCl7FcDiQB51RhcBa3fhBXTl0kBsUFzWTzow=) 4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: YzxhkuTIla90nMxllMuAPcH6Qo+CPshpVYgjHxiUelw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: May 5 02:20:46 2025 GMT Not After : May 12 02:20:46 2025 GMT Subject: CN=6818207e-06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:f2:66:32:c5:12:bf:8a:20:7d:4d:98:2b: 93:03:0c:b0:4f:b6:32:11:93:f9:9a:fe:37:3d:c0: 37:30:c4:3a:ea:35:0a:9e:df:8b:5a:5b:04:32:c4: 32:ad:44:4d:35:76:fc:8c:2e:0f:0b:d9:1b:c4:25: 68:5d:87:8a:b6:8d:30:7f:15:91:c2:5d:a2:bc:90: aa:38:95:2a:41:db:23:12:3b:00:30:d6:c8:56:21: 07:b7:6e:18:a9:97:7e:75:68:db:8a:47:c7:03:d9: 35:e4:82:e7:c8:af:43:6d:06:ca:b6:a3:7c:83:47: a9:24:65:6b:6a:5c:60:68:dd:21:87:1d:61:c0:5b: 23:82:75:66:72:b6:af:3e:f6:b0:6d:de:00:5e:ae: b2:c3:60:4e:09:a8:ad:4a:6a:66:c0:42:fb:7d:99: 82:87:28:1f:80:75:11:d5:0d:fc:49:a0:a2:85:29: 2b:71:0c:00:d0:25:7d:1c:7e:9c:b7:08:11:df:78: 79:24:54:6b:e1:5e:f5:d9:6f:5d:3e:f2:af:88:dd: 41:68:42:4c:c1:de:d2:a9:a0:38:d2:e1:66:0a:b7: 29:b1:d3:6d:e2:f4:77:3f:76:8b:7c:ed:6a:55:1b: 3f:88:de:cf:d2:71:bb:fd:37:80:e5:52:32:3d:d5: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3C:20:B4:0B:0E:AC:A9:1C:65:8E:AA:EE:72:AF:90:EC:18:57:AB X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f6:35:d9:31:94:a7:05:c7:3c:d9:51:09:53:a1:92:93:97: d6:a6:9c:fc:4b:69:f3:d5:24:43:b2:e9:da:82:b1:69:7d:3d: d7:f4:2d:78:e4:af:80:67:47:80:fe:ac:c3:cd:10:73:12:07: 59:d3:f4:12:8e:3a:be:cc:9c:e6:6f:75:9a:61:2f:a2:49:3b: 32:7f:92:2a:63:b0:e4:13:18:04:91:60:eb:83:23:a2:ed:d1: 49:9e:76:59:70:20:78:02:dc:2d:12:a4:90:80:30:a8:56:5b: 33:1d:a4:c2:2b:16:69:ca:55:a9:eb:55:f2:20:22:b4:c2:13: 73:9d:6e:64:0e:27:38:0e:e9:d3:79:29:a6:58:73:bc:4e:0a: 96:8b:aa:c7:8c:a1:b1:4d:2b:5a:0a:d9:9c:62:40:d1:29:2b: 62:78:57:b0:d9:f4:d6:eb:bf:ae:d8:26:07:47:12:b1:36:56: 72:88:2a:fe:b7:e4:ab:93:11:9e:e4:4f:b8:06:62:25:bb:e6: fe:30:66:e2:49:46:cc:80:4d:a1:a0:a6:19:ed:5e:17:09:0f: 5c:db:0a:ae:e3:73:87:7d:60:4a:f3:8f:2c:96:2d:d4:28:83: 5a:b5:df:ff:62:81:20:c2:b8:c1:84:7c:5a:43:09:49:67:9f: a6:9f:a6:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjUwNTA1MDIyMDQ2WhcNMjUwNTEyMDIyMDQ2WjAYMRYwFAYD VQQDEw02ODE4MjA3ZS0wNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO3yZjLFEr+KIH1NmCuTAwywT7YyEZP5mv43PcA3MMQ66jUKnt+LWlsEMsQy rURNNXb8jC4PC9kbxCVoXYeKto0wfxWRwl2ivJCqOJUqQdsjEjsAMNbIViEHt24Y qZd+dWjbikfHA9k15ILnyK9DbQbKtqN8g0epJGVralxgaN0hhx1hwFsjgnVmcrav Pvawbd4AXq6yw2BOCaitSmpmwEL7fZmChygfgHUR1Q38SaCihSkrcQwA0CV9HH6c twgR33h5JFRr4V712W9dPvKviN1BaEJMwd7SqaA40uFmCrcpsdNt4vR3P3aLfO1q VRs/iN7P0nG7/TeA5VIyPdXzPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw8ILQL DqypHGWOqu5yr5DsGFerMB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC39jXZMZSnBcc82VEJU6GSk5fWppz8S2nz1SRDsunagrFpfT3X9C14 5K+AZ0eA/qzDzRBzEgdZ0/QSjjq+zJzmb3WaYS+iSTsyf5IqY7DkExgEkWDrgyOi 7dFJnnZZcCB4AtwtEqSQgDCoVlszHaTCKxZpylWp61XyICK0whNznW5kDic4DunT eSmmWHO8TgqWi6rHjKGxTStaCtmcYkDRKStieFew2fTW67+u2CYHRxKxNlZyiCr+ t+SrkxGe5E+4BmIlu+b+MGbiSUbMgE2hoKYZ7V4XCQ9c2wqu43OHfWBK848sli3U KINatd//YoEgwrjBhHxaQwlJZ5+mn6bp -----END CERTIFICATE-----Generated at Tue May 6 22:01:22 2025 by rpki-client