$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: ZDE51wes3/xq1s+frrbz/xaHvGU4QKyQdZ541MRhaoE= Subject key identifier: 32:54:C6:B5:96:44:3A:72:06:A1:95:1E:A8:E9:45:7F:D7:68:79:01 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 0C Signing time: Tue 13 May 2025 07:21:52 +0000 Manifest this update: Tue 13 May 2025 07:21:51 +0000 Manifest next update: Tue 20 May 2025 07:21:51 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: d6lwlUKP8Z4jEHqPjfu6umYTgbUDDz27axublyhG0JA=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: gGLpwNDKILKj8KiWuRMqmJ+fLEpRADmW87NfmWpK6sE=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: Zrr0Zmh170T21y9iJRbERw6GVfqvG2/61KJESV309v8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: May 13 07:21:51 2025 GMT Not After : May 20 07:21:51 2025 GMT Subject: CN=6822f310-9b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:86:db:d6:4c:2c:ee:b0:f2:56:ac:0c:ad: 21:54:32:55:96:58:3d:0b:c8:1a:44:16:6c:ca:aa: 4f:27:89:30:4d:13:e9:c3:e0:6c:d9:2f:ee:d9:f4: 47:ef:5b:4d:56:79:66:43:6a:31:30:a9:7b:ef:56: 31:a2:ce:bf:66:5e:ad:c2:b1:99:10:18:96:77:48: 04:93:88:49:ad:37:82:02:b2:b2:a3:ec:a8:59:14: 14:11:86:66:b0:5a:0c:4b:67:0c:d2:68:38:5c:5b: 9f:78:7a:71:a0:cb:cf:08:e4:01:21:15:e1:da:b0: 8b:f8:b3:c3:48:4f:01:8f:f4:e3:4a:b0:cf:f0:1b: 5b:d7:64:cb:d2:65:a6:5c:a7:31:91:3b:9f:94:1a: 10:a3:66:9b:4b:13:7d:b7:09:be:80:e8:ea:0b:28: 2b:6c:28:55:58:dd:62:c7:13:c5:46:ef:9f:bc:05: d2:ac:de:24:b7:fb:36:3b:d8:a6:7d:25:1e:f2:0c: 50:6c:12:a8:c6:eb:3d:3b:e5:7c:5c:2d:47:2f:b4: 64:35:5c:15:29:47:ec:62:08:c5:6b:7e:0a:c2:ba: 72:8f:38:45:7e:b5:0e:35:b0:43:bb:cd:35:d6:b4: 9d:bc:d4:af:d3:2b:ec:e9:1b:21:0c:40:96:ef:fd: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:C6:B5:96:44:3A:72:06:A1:95:1E:A8:E9:45:7F:D7:68:79:01 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a5:0e:99:f2:c7:ef:04:18:00:bb:a5:be:3b:da:76:25:78: c9:7b:d1:fd:f8:d6:de:91:81:dd:bf:81:04:4e:4a:77:4e:1a: fe:6f:e0:54:04:ee:cc:a8:0f:dc:61:a0:2f:23:c0:da:68:b1: 62:71:77:6a:68:ae:51:35:62:e1:d4:4d:78:aa:2a:97:5d:48: 32:e1:71:ee:64:d5:96:a7:a1:4f:b7:a4:50:35:c3:39:1a:eb: 32:67:ee:49:b1:79:91:4a:d0:44:6f:11:7f:a4:fe:54:e7:50: 28:a0:fc:6f:54:93:6e:67:6b:60:f2:4e:29:28:a0:3d:d5:c7: 3a:48:ac:80:94:d1:21:f8:ec:e5:a0:aa:5f:19:8a:5a:13:23: 07:aa:e6:b4:c7:50:db:3b:0d:e7:f3:6d:b5:f2:91:5b:fc:e0: ef:83:04:be:1d:7e:7a:c0:e7:fd:b9:bf:a7:d6:47:9c:f6:03: b7:6e:a6:c4:3a:c7:72:57:1c:1b:12:b9:70:83:46:4c:b3:ca: 7b:30:01:8c:75:ef:e5:34:8a:95:bd:c7:54:ad:c9:94:dd:d3: af:3d:d6:27:c5:71:c4:8e:ba:06:03:4f:33:13:3e:71:3c:92: 82:e0:23:54:a4:c2:19:d8:6c:c9:d1:9f:b1:c6:f3:36:66:ca: e6:85:7b:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA1MTMwNzIxNTFaFw0yNTA1MjAwNzIxNTFaMBgxFjAUBgNV BAMTDTY4MjJmMzEwLTliNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2WYbb1kws7rDyVqwMrSFUMlWWWD0LyBpEFmzKqk8niTBNE+nD4GzZL+7Z9Efv W01WeWZDajEwqXvvVjGizr9mXq3CsZkQGJZ3SASTiEmtN4ICsrKj7KhZFBQRhmaw WgxLZwzSaDhcW594enGgy88I5AEhFeHasIv4s8NITwGP9ONKsM/wG1vXZMvSZaZc pzGRO5+UGhCjZptLE323Cb6A6OoLKCtsKFVY3WLHE8VG75+8BdKs3iS3+zY72KZ9 JR7yDFBsEqjG6z075XxcLUcvtGQ1XBUpR+xiCMVrfgrCunKPOEV+tQ41sEO7zTXW tJ281K/TK+zpGyEMQJbv/S1rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMlTGtZZE OnIGoZUeqOlFf9doeQEwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABClDpnyx+8EGAC7pb472nYleMl70f341t6Rgd2/gQROSndOGv5v4FQE 7syoD9xhoC8jwNposWJxd2porlE1YuHUTXiqKpddSDLhce5k1ZanoU+3pFA1wzka 6zJn7kmxeZFK0ERvEX+k/lTnUCig/G9Uk25na2DyTikooD3VxzpIrICU0SH47OWg ql8ZiloTIweq5rTHUNs7DefzbbXykVv84O+DBL4dfnrA5/25v6fWR5z2A7dupsQ6 x3JXHBsSuXCDRkyzynswAYx17+U0ipW9x1StyZTd06891ifFccSOugYDTzMTPnE8 koLgI1SkwhnYbMnRn7HG8zZmyuaFeyY= -----END CERTIFICATE-----Generated at Tue May 13 16:05:51 2025 by rpki-client