$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: 1ek/m/7XJS3yIxEjF5gVvzmf+TVX7CAy3DEPU75d+/4= Subject key identifier: 58:44:C4:20:01:A7:B3:33:D0:0A:1C:4D:28:A9:E7:A1:DF:AF:66:91 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 0158 Signing time: Thu 15 May 2025 03:31:19 +0000 Manifest this update: Thu 15 May 2025 03:31:19 +0000 Manifest next update: Thu 22 May 2025 03:31:19 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: 1XvQqZjfzqHz8GnTLuQpF5Dkg90L2QchJBLD+cYG+j0=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: May 15 03:31:19 2025 GMT Not After : May 22 03:31:19 2025 GMT Subject: CN=68256007-5b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:24:41:ca:c7:9e:60:06:72:9a:66:51:e6: da:71:9a:8c:95:96:fa:84:8b:69:ec:52:e6:4c:7c: e1:a3:fd:64:1b:b3:7a:17:40:30:b6:9d:f5:e1:5f: 6b:dd:cb:ce:cf:db:8a:dd:5b:ad:c3:2b:54:a6:da: da:a6:62:22:56:aa:ae:e6:6f:8e:fd:2e:5c:8c:6b: 2c:7b:66:d4:77:a4:9f:07:0d:3d:b2:de:7a:b9:fb: 9a:28:06:59:a8:eb:52:8d:1f:61:df:8d:62:85:2e: 6e:47:bd:aa:74:1b:32:06:e9:d0:5d:ba:2f:54:b0: 30:b9:c5:0b:21:74:cc:c3:32:8d:c0:2d:27:99:10: c4:6a:de:21:48:20:b8:dc:1b:60:c5:d7:27:09:1f: 9e:bb:2e:95:dd:ac:e9:4a:a1:28:a6:0e:db:1a:67: 0a:53:23:47:42:6c:ee:07:bc:9b:6b:6c:6f:c9:c9: 33:31:9c:15:2a:5d:22:b4:8f:55:a0:8e:d3:b0:bc: 36:8e:a8:15:dc:68:97:b3:96:2b:c1:88:61:05:8e: b7:7a:60:e2:e8:e4:d1:a1:ee:75:26:77:2e:30:14: 9c:e1:1b:bc:38:cc:07:9c:ea:91:69:15:77:d0:5a: f5:3b:83:69:8a:72:93:1e:30:7b:b2:d8:6c:40:fb: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:44:C4:20:01:A7:B3:33:D0:0A:1C:4D:28:A9:E7:A1:DF:AF:66:91 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:76:e8:50:94:2c:56:de:aa:76:20:62:15:fb:cd:17:2c:05: 15:e0:4b:0e:d9:c6:b2:29:42:7f:03:6d:e6:3f:46:8c:13:80: 77:32:65:83:31:5f:3a:df:eb:a6:76:60:a1:61:60:8d:ac:64: 64:46:83:55:a4:cc:1c:6d:2c:65:5a:64:79:30:e9:56:2e:ff: 68:a1:c3:80:eb:db:c1:08:66:66:b6:f8:5e:fa:fd:89:2f:87: 05:97:13:1b:8c:87:78:6c:51:2a:cf:09:cb:c1:55:46:cf:ca: 48:ca:00:2e:ff:ac:d5:39:46:7d:c5:cf:6a:4e:00:1f:c2:dc: 52:2d:c2:bb:49:d6:5f:2a:d6:3d:45:a6:e4:0d:0a:b9:19:f9: bc:90:73:ba:3f:1b:0d:87:3b:1e:30:ed:3b:0a:d8:2c:ec:47: 23:01:44:21:27:a3:aa:5b:1b:1a:7b:f8:fc:cd:88:a9:7c:b4: 82:5c:6b:37:92:03:f8:bc:18:8f:25:42:30:ad:43:aa:2e:26: 87:33:78:c8:f1:59:75:fb:4b:94:21:a3:83:71:4b:e5:9b:39: 7e:ef:8e:f4:75:08:f0:e7:f8:86:6d:e8:c4:65:ab:17:89:af: 6e:4f:65:1e:4e:7b:a4:39:55:06:63:64:c2:56:45:77:04:67: 03:5b:3d:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNTE1MDMzMTE5WhcNMjUwNTIyMDMzMTE5WjAYMRYwFAYD VQQDEw02ODI1NjAwNy01YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9IkQcrHnmAGcppmUebacZqMlZb6hItp7FLmTHzho/1kG7N6F0Awtp314V9r 3cvOz9uK3VutwytUptrapmIiVqqu5m+O/S5cjGsse2bUd6SfBw09st56ufuaKAZZ qOtSjR9h341ihS5uR72qdBsyBunQXbovVLAwucULIXTMwzKNwC0nmRDEat4hSCC4 3BtgxdcnCR+euy6V3azpSqEopg7bGmcKUyNHQmzuB7yba2xvyckzMZwVKl0itI9V oI7TsLw2jqgV3GiXs5YrwYhhBY63emDi6OTRoe51JncuMBSc4Ru8OMwHnOqRaRV3 0Fr1O4NpinKTHjB7sthsQPtbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhExCAB p7Mz0AocTSip56Hfr2aRMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnduhQlCxW3qp2IGIV+80XLAUV4EsO2cayKUJ/A23mP0aME4B3MmWD MV863+umdmChYWCNrGRkRoNVpMwcbSxlWmR5MOlWLv9oocOA69vBCGZmtvhe+v2J L4cFlxMbjId4bFEqzwnLwVVGz8pIygAu/6zVOUZ9xc9qTgAfwtxSLcK7SdZfKtY9 RabkDQq5Gfm8kHO6PxsNhzseMO07Ctgs7EcjAUQhJ6OqWxsae/j8zYipfLSCXGs3 kgP4vBiPJUIwrUOqLiaHM3jI8Vl1+0uUIaODcUvlmzl+7470dQjw5/iGbejEZasX ia9uT2UeTnukOVUGY2TCVkV3BGcDWz0t -----END CERTIFICATE-----Generated at Thu May 15 22:26:01 2025 by rpki-client