$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: jV6MH7YQCpTqbfuxH9JdOLqH3L4Y+4jxffOXHih4bWU= Subject key identifier: 95:01:37:60:5E:F6:1E:47:72:74:0E:D6:1E:06:D3:84:9C:03:B2:E4 Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0BA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 13AB Signing time: Sat 10 May 2025 18:43:10 +0000 Manifest this update: Sat 10 May 2025 18:43:09 +0000 Manifest next update: Sat 17 May 2025 18:43:09 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: 4QydWG38cnmRfGgeWbMGpsEZpML2hhAInki2XLng+cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: May 10 18:43:09 2025 GMT Not After : May 17 18:43:09 2025 GMT Subject: CN=681f9e3d-2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:8e:17:66:74:15:da:86:44:bc:0e:77:9f: 98:3d:ed:78:64:d9:2e:8e:0e:c0:b1:a8:54:7c:e2: 90:35:46:fb:69:88:d6:07:37:0c:58:b9:0a:56:a3: 63:c2:5e:50:9e:c7:c6:23:b5:e9:05:4a:98:87:d6: 50:31:e6:2a:00:89:4b:d1:0e:b8:ea:98:fa:6f:f0: a7:1a:84:a3:8c:96:ef:94:99:a8:73:4b:f6:6c:2d: 1e:12:83:63:6d:fd:cd:56:ad:e7:11:e3:c8:b0:03: 7f:17:72:75:48:25:22:6c:63:78:01:c9:29:57:2b: bd:19:8b:d3:79:ef:a8:07:ea:79:9f:d7:a7:1c:45: c6:e6:4d:78:74:1f:e1:71:0b:5b:1e:8d:53:88:42: 6f:06:1b:ed:5f:5b:b9:22:6c:ad:2c:d4:9c:21:fc: ee:03:d5:ea:f2:18:41:8e:11:6c:f0:5b:83:00:3e: 7f:40:31:37:3c:6a:86:ec:be:6f:5e:d3:0b:49:33: 5b:8e:da:b9:94:dc:61:4b:e1:d8:a5:a6:1f:c2:4d: 25:72:e6:c5:3f:c2:77:6f:02:93:28:4d:6c:28:59: a5:d1:03:44:4b:7f:a3:c9:7c:a4:18:27:84:b7:65: 69:f3:10:70:e6:c7:d9:ee:fb:3e:74:54:94:e4:7a: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:37:60:5E:F6:1E:47:72:74:0E:D6:1E:06:D3:84:9C:03:B2:E4 X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:1f:f8:e0:d9:5a:3a:65:0f:1c:70:e1:6b:9c:aa:e6:82: 84:42:4f:06:26:59:60:c6:fc:2b:38:7e:32:b9:23:96:fd:40: 1e:c0:71:55:65:57:72:97:3d:17:36:7d:69:06:1f:f4:7b:d8: 42:55:e8:b6:ac:c4:aa:d1:64:7d:86:2b:3a:fe:9d:fe:09:1e: 01:e9:ce:20:de:bd:1f:48:92:aa:26:f3:a8:0b:dc:aa:b6:3a: d6:76:17:1b:e7:ad:1d:80:dc:88:37:1b:c1:14:38:b9:aa:c7: 99:fc:73:17:39:7c:b6:10:18:7a:24:91:fe:f6:89:21:7c:b7: 16:ea:89:bd:09:a1:06:20:6b:a6:18:f5:45:cd:7c:7a:4d:86: 30:41:d3:47:c6:08:28:bb:da:a5:09:f7:8f:05:2f:e4:51:8a: 94:69:4e:8f:da:d8:42:99:f3:fc:04:c8:07:cb:5e:11:5e:53: 0e:5b:d4:2d:05:64:3e:4f:6a:6f:e1:67:96:fe:a1:bb:4d:99: 76:b0:b8:70:97:8e:25:bd:e7:26:79:5b:83:81:cd:c9:d9:e6: 46:f7:96:be:e8:2d:4e:ba:e1:8b:7a:6b:ca:cc:50:02:a5:6f: a6:b6:be:7a:ac:88:85:b7:9a:11:a0:f7:bf:7d:5d:b2:35:ed: cb:7b:ab:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUwNTEwMTg0MzA5WhcNMjUwNTE3MTg0MzA5WjAYMRYwFAYD VQQDEw02ODFmOWUzZC0yMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcCOF2Z0FdqGRLwOd5+YPe14ZNkujg7AsahUfOKQNUb7aYjWBzcMWLkKVqNj wl5QnsfGI7XpBUqYh9ZQMeYqAIlL0Q646pj6b/CnGoSjjJbvlJmoc0v2bC0eEoNj bf3NVq3nEePIsAN/F3J1SCUibGN4AckpVyu9GYvTee+oB+p5n9enHEXG5k14dB/h cQtbHo1TiEJvBhvtX1u5ImytLNScIfzuA9Xq8hhBjhFs8FuDAD5/QDE3PGqG7L5v XtMLSTNbjtq5lNxhS+HYpaYfwk0lcubFP8J3bwKTKE1sKFml0QNES3+jyXykGCeE t2Vp8xBw5sfZ7vs+dFSU5HqNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUBN2Be 9h5HcnQO1h4G04ScA7LkMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPR/44NlaOmUPHHDha5yq5oKEQk8GJllgxvwrOH4yuSOW/UAewHFV ZVdylz0XNn1pBh/0e9hCVei2rMSq0WR9his6/p3+CR4B6c4g3r0fSJKqJvOoC9yq tjrWdhcb560dgNyINxvBFDi5qseZ/HMXOXy2EBh6JJH+9okhfLcW6om9CaEGIGum GPVFzXx6TYYwQdNHxggou9qlCfePBS/kUYqUaU6P2thCmfP8BMgHy14RXlMOW9Qt BWQ+T2pv4WeW/qG7TZl2sLhwl44lvecmeVuDgc3J2eZG95a+6C1OuuGLemvKzFAC pW+mtr56rIiFt5oRoPe/fV2yNe3Le6vW -----END CERTIFICATE-----Generated at Mon May 12 15:47:02 2025 by rpki-client