$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: mwt+AbHBUal1YmMLMqAoN8e6mTZMFjZ7ZkcQjWeD2i0= Subject key identifier: F0:EF:76:C8:FA:77:FC:0A:1E:DB:AA:24:50:BF:69:0B:A5:F0:1E:0C Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 021C Signing time: Sun 11 May 2025 01:29:29 +0000 Manifest this update: Sun 11 May 2025 01:29:28 +0000 Manifest next update: Sun 18 May 2025 01:29:28 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: pjA6ZWjW7uKCZ2WOwSYzqXwn5xyk+yb/FfgH88DFGN4=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: 4gZpKbAZ3PPZ8XY+4tRmnbJCoHSToqpiZD3Xw35DspI=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: lDaMLlKkOnOEtKB4HQw14YL4MByHOHikQc7Dy/TLNpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: May 11 01:29:28 2025 GMT Not After : May 18 01:29:28 2025 GMT Subject: CN=681ffd78-febb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:1a:69:25:14:70:db:94:5f:af:62:d0:63: 9f:22:ae:18:aa:20:70:3f:17:67:d3:15:36:10:1f: ff:b1:40:f3:65:10:8f:b6:ab:08:6c:ae:13:0b:1d: 0b:71:e2:f0:1e:83:ed:e3:0c:b9:79:6a:7b:7a:ad: 02:46:96:bb:99:e5:3e:51:2c:35:5d:b6:bb:3f:40: df:0a:53:4c:47:92:16:be:6b:94:49:3f:50:72:01: 05:e3:da:d5:06:f5:08:5e:46:e6:af:1e:44:e4:75: 37:24:67:cb:f4:7f:53:01:35:a4:ae:50:bf:e7:36: b6:c3:71:fd:f0:b2:48:f3:45:1a:27:bf:a8:9c:2f: 29:13:2e:72:b4:e0:cf:55:6c:c4:95:14:23:62:a7: 82:50:81:a7:ad:ae:4b:a2:53:3f:16:8d:44:d8:7a: a4:df:7c:46:af:fc:76:3d:c9:2e:18:51:14:13:ac: 37:ea:ae:ea:4e:72:25:b0:f7:b8:87:2b:e5:7f:d1: ff:1a:b3:d8:e3:ce:75:f4:6b:52:51:d4:f0:91:94: eb:e6:dc:f5:d1:7f:28:54:64:c2:24:70:5d:7f:cd: c1:2d:9c:07:2c:a6:63:d8:29:08:f7:b4:f8:5d:d5: e4:45:96:61:5f:c2:ad:17:3c:db:f0:c8:32:9a:d2: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EF:76:C8:FA:77:FC:0A:1E:DB:AA:24:50:BF:69:0B:A5:F0:1E:0C X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:97:b9:22:d6:5f:8c:ac:92:01:d7:7d:5d:14:3a:ad:0f:06: 26:a6:b1:80:b2:7a:78:c1:25:25:80:bb:1d:e0:d0:cf:09:60: a2:f7:a5:91:10:a1:9e:66:d6:7f:ef:ab:9f:04:18:e2:7e:98: 7e:d5:68:54:9b:d6:02:15:da:98:5e:09:1b:7f:80:c9:d5:10: 60:d5:2c:b2:e5:e3:11:5e:6a:90:41:1e:b5:85:96:96:d9:a1: 78:1e:0d:c5:64:64:36:e6:dc:4b:88:7e:63:ef:54:5a:cf:b7: 76:62:3f:da:34:43:30:60:09:1e:30:bb:1e:4b:e4:d1:77:f1: d5:c0:69:97:17:4e:45:f3:5c:09:68:7a:93:92:20:b4:ae:47: f4:5f:dd:ac:61:45:4c:0e:f8:f9:77:c1:f7:e7:c7:c0:13:97: bc:45:6e:46:83:d2:72:aa:51:af:48:e2:4b:c4:2b:31:91:9b: 05:62:74:ae:a5:c4:37:40:85:47:70:02:9d:a7:68:47:6b:ed: 46:30:fd:9d:c5:dd:f2:87:f9:0e:48:c7:f4:ba:64:59:f2:ce: db:6c:72:66:8d:68:df:ea:f9:7c:ca:8f:3c:4c:b4:c9:f8:8f: 14:d7:20:3f:49:f2:7d:ff:51:49:3a:7b:b5:26:01:73:3c:6e: 73:15:9c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjUwNTExMDEyOTI4WhcNMjUwNTE4MDEyOTI4WjAYMRYwFAYD VQQDEw02ODFmZmQ3OC1mZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8saaSUUcNuUX69i0GOfIq4YqiBwPxdn0xU2EB//sUDzZRCPtqsIbK4TCx0L ceLwHoPt4wy5eWp7eq0CRpa7meU+USw1Xba7P0DfClNMR5IWvmuUST9QcgEF49rV BvUIXkbmrx5E5HU3JGfL9H9TATWkrlC/5za2w3H98LJI80UaJ7+onC8pEy5ytODP VWzElRQjYqeCUIGnra5LolM/Fo1E2Hqk33xGr/x2PckuGFEUE6w36q7qTnIlsPe4 hyvlf9H/GrPY48519GtSUdTwkZTr5tz10X8oVGTCJHBdf83BLZwHLKZj2CkI97T4 XdXkRZZhX8KtFzzb8MgymtLt5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDvdsj6 d/wKHtuqJFC/aQul8B4MMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBal7ki1l+MrJIB131dFDqtDwYmprGAsnp4wSUlgLsd4NDPCWCi96WR EKGeZtZ/76ufBBjifph+1WhUm9YCFdqYXgkbf4DJ1RBg1Syy5eMRXmqQQR61hZaW 2aF4Hg3FZGQ25txLiH5j71Raz7d2Yj/aNEMwYAkeMLseS+TRd/HVwGmXF05F81wJ aHqTkiC0rkf0X92sYUVMDvj5d8H358fAE5e8RW5Gg9JyqlGvSOJLxCsxkZsFYnSu pcQ3QIVHcAKdp2hHa+1GMP2dxd3yh/kOSMf0umRZ8s7bbHJmjWjf6vl8yo88TLTJ +I8U1yA/SfJ9/1FJOnu1JgFzPG5zFZxz -----END CERTIFICATE-----Generated at Sun May 11 21:51:48 2025 by rpki-client