$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json) Hash identifier: zCWGlR5zQqem6qjvKWLBeVEGXmKJH68IL07eDY2jkCU= Subject key identifier: 5E:A3:CE:61:87:8D:6C:56:1B:E7:0F:F4:10:03:BB:02:A8:F0:0B:08 Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft Manifest number: 0C26 Signing time: Mon 12 May 2025 18:25:37 +0000 Manifest this update: Mon 12 May 2025 18:25:37 +0000 Manifest next update: Mon 19 May 2025 18:25:37 +0000 Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: ZXiaFTHws60Bk6eWYKV1r7v4VGNpJk0uQMPsPWQFZKc=) 2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: May 12 18:25:37 2025 GMT Not After : May 19 18:25:37 2025 GMT Subject: CN=68223d21-3281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:dd:5a:cb:d2:03:9e:47:21:3c:7d:b8:90: 48:38:cf:56:56:2a:86:7c:14:48:4a:b1:81:f1:e6: 2a:64:74:85:7e:44:c7:bf:9a:ce:71:72:77:56:48: 55:f3:4c:6c:68:e1:1b:28:16:24:93:a5:d4:7b:a4: a6:88:19:06:68:0a:80:5c:d9:c4:54:97:93:5d:ee: a9:db:2e:6a:f7:d3:8a:14:16:1a:7b:aa:75:a2:ba: 5e:0b:0d:9d:bf:ac:19:77:10:01:89:d8:cb:5f:40: aa:9b:09:90:49:78:53:32:78:2e:a3:27:4e:51:5e: a7:77:6a:b7:d2:67:92:8b:fb:2f:5f:39:f2:fb:b0: 00:82:9c:a0:62:ed:90:45:a6:27:9e:9f:73:a4:90: 16:41:ff:dd:65:0a:ec:9c:4a:e9:44:80:b3:67:98: bd:bc:48:18:77:ec:38:f9:43:1a:2c:9f:41:8a:f2: 3d:90:b3:63:8b:95:46:2c:f2:5e:87:5c:29:1c:14: ee:54:28:72:bb:ea:d6:dc:b5:c3:0f:1a:e4:f4:cb: 69:e1:42:04:fb:48:87:dc:f6:ef:6a:59:78:96:b9: 84:16:5a:f5:bb:cc:1d:64:78:b3:97:3d:6c:48:9d: 6c:d7:57:ed:e8:54:96:e2:a9:7f:ab:51:bb:95:e2: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A3:CE:61:87:8D:6C:56:1B:E7:0F:F4:10:03:BB:02:A8:F0:0B:08 X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5e:22:21:04:cd:83:a4:90:31:10:3d:5c:a1:7d:d3:84:19: 7b:cb:ab:80:5a:fc:8f:2e:1a:fa:51:68:78:b0:88:e6:c7:20: 3d:b5:3c:d8:da:ee:3a:22:a3:55:10:f6:6f:b1:d9:90:eb:21: 82:cf:b2:40:63:5c:23:82:0a:80:bf:8d:5c:94:18:c7:2d:9a: 38:fd:47:1d:4a:be:f2:65:b1:0c:24:40:0e:8a:b1:19:0b:35: 80:9c:65:93:a2:48:1f:e8:6c:cd:72:4a:88:63:19:f8:40:7e: e2:25:2e:46:21:0b:ac:d8:a1:f6:86:19:04:bb:06:4b:4d:ef: 47:da:99:bf:f6:1a:b9:fa:8b:0b:6f:75:e7:32:b6:2f:b3:6a: ce:f7:0c:30:45:e2:8c:a2:47:11:19:90:e0:d0:fe:1f:81:35: e1:e0:6e:8c:21:f3:69:f9:a1:49:6e:a9:99:48:fc:53:62:d8: 64:78:12:cd:fc:e5:1a:52:ed:f3:c7:5a:fc:fa:2d:d7:e2:48: 57:e7:88:29:5d:21:e5:45:72:42:8e:cd:79:de:93:f1:e8:08: 3f:99:31:ae:aa:97:24:82:7f:41:a7:b7:5e:ba:71:9c:56:bc: b4:a4:e5:ed:08:34:52:86:31:43:85:5d:4c:67:a9:07:93:fa: b9:93:ac:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjUwNTEyMTgyNTM3WhcNMjUwNTE5MTgyNTM3WjAYMRYwFAYD VQQDEw02ODIyM2QyMS0zMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArizdWsvSA55HITx9uJBIOM9WViqGfBRISrGB8eYqZHSFfkTHv5rOcXJ3VkhV 80xsaOEbKBYkk6XUe6SmiBkGaAqAXNnEVJeTXe6p2y5q99OKFBYae6p1orpeCw2d v6wZdxABidjLX0CqmwmQSXhTMnguoydOUV6nd2q30meSi/svXzny+7AAgpygYu2Q RaYnnp9zpJAWQf/dZQrsnErpRICzZ5i9vEgYd+w4+UMaLJ9BivI9kLNji5VGLPJe h1wpHBTuVChyu+rW3LXDDxrk9Mtp4UIE+0iH3Pbvall4lrmEFlr1u8wdZHizlz1s SJ1s11ft6FSW4ql/q1G7leIg4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6jzmGH jWxWG+cP9BADuwKo8AsIMB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTZFOC83QkNBRkYwMjA5MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlk V1pHU2pWbWsyMlZCR3BhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFXiIhBM2DpJAxED1coX3ThBl7y6uAWvyPLhr6UWh4sIjmxyA9tTzY 2u46IqNVEPZvsdmQ6yGCz7JAY1wjggqAv41clBjHLZo4/UcdSr7yZbEMJEAOirEZ CzWAnGWTokgf6GzNckqIYxn4QH7iJS5GIQus2KH2hhkEuwZLTe9H2pm/9hq5+osL b3XnMrYvs2rO9wwwReKMokcRGZDg0P4fgTXh4G6MIfNp+aFJbqmZSPxTYthkeBLN /OUaUu3zx1r8+i3X4khX54gpXSHlRXJCjs153pPx6Ag/mTGuqpckgn9Bp7deunGc Vry0pOXtCDRShjFDhV1MZ6kHk/q5k6yR -----END CERTIFICATE-----Generated at Wed May 14 17:34:12 2025 by rpki-client