$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft File: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft (raw, json) Hash identifier: mhZ4SixWhpgbddhbmSqaGI5twR3R/EXL0ZSlVMigM0M= Subject key identifier: D8:FF:83:9F:4B:EF:C6:51:D6:1A:33:E3:88:9F:AF:33:2E:24:F7:93 Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft Manifest number: 012C Signing time: Thu 03 Apr 2025 03:48:30 +0000 Manifest this update: Thu 03 Apr 2025 03:48:29 +0000 Manifest next update: Thu 10 Apr 2025 03:48:29 +0000 Files and hashes: 1: 1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl (hash: 1s9+u4kWAeLs4EzPemJVCrYk0mIzOkJ/4yHvL6YxL6Q=) 2: 3FE30722468C11EE9462EC3AC4F9AE02.roa (hash: o+8Fy4IhkWW7G4Uk/EsnJxZOcEEm8/z0XbRWxhegY4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C2E1 Validity Not Before: Apr 3 03:48:29 2025 GMT Not After : Apr 10 03:48:29 2025 GMT Subject: CN=67ee050d-bc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:19:a2:2c:53:ce:05:51:31:28:dd:19:dc: e6:09:0e:b5:27:22:77:41:7c:b7:57:69:a0:c5:d5: 7e:d4:13:52:a6:00:57:8e:eb:b0:70:91:bf:49:38: 5a:29:7b:81:99:50:05:b9:31:c3:66:bc:a3:d6:d2: d8:73:e7:7d:31:94:5f:1d:34:d1:93:c1:95:43:2e: 58:31:db:6b:a2:f3:f9:17:62:b6:05:7b:a1:e6:72: f7:78:0b:f6:13:26:89:77:75:fa:22:fa:1f:39:83: 46:ca:db:d9:96:4e:ce:05:1f:10:1d:2e:c7:1f:95: 20:f6:66:f4:59:8a:50:48:95:5b:90:42:6e:cc:ec: ec:ed:1f:b2:da:f3:bf:90:14:ed:64:5f:47:5a:46: 09:6b:6c:65:04:df:c3:d0:57:b9:aa:4f:52:7b:25: 87:b6:54:a3:30:66:a0:10:ee:84:e7:ed:b9:0b:44: f3:cf:66:cc:24:f1:df:7b:5f:4e:f8:c8:4a:f3:73: e3:cd:f1:1d:ef:1e:f4:e6:9b:d4:cc:1b:2f:1b:98: 05:c6:ff:fc:8f:37:84:5f:ab:12:70:02:04:f6:7a: b7:44:31:81:d3:31:07:e3:85:d8:42:a3:18:4f:a7: 29:6a:00:a1:c3:d2:f2:2b:14:a5:ff:a0:0a:f4:e7: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FF:83:9F:4B:EF:C6:51:D6:1A:33:E3:88:9F:AF:33:2E:24:F7:93 X509v3 Authority Key Identifier: keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4d:b8:5b:a5:cd:58:18:2a:16:fa:d1:a6:43:86:86:7d:02: 0a:24:d1:6f:ab:0e:dc:af:46:2e:5b:3e:b3:fd:f5:7f:30:a6: 6b:2b:68:c8:ed:1e:bd:42:8f:10:d1:9a:74:94:44:cd:17:85: d3:c9:8c:09:7f:a7:0e:b2:71:e3:4c:4c:aa:80:67:55:4a:d7: 85:c2:f4:17:26:4b:5a:03:37:49:11:71:75:86:e9:d5:10:54: ed:2b:cc:91:6c:88:bd:69:54:16:4c:02:9d:7d:90:f0:67:8a: 71:6b:de:b8:e9:d2:1e:66:37:6a:57:e8:57:0c:69:cf:f3:94: 10:fe:ce:ab:b7:06:f3:21:95:e5:df:de:31:d2:c1:23:06:df: 59:0e:16:e6:57:d9:c6:97:66:ae:0a:b7:e0:91:33:f5:8c:da: ed:77:42:f2:bb:09:9b:2d:41:bd:2a:99:14:04:22:b1:a7:36: 36:db:51:1f:b8:06:6a:87:7d:9e:ef:18:a1:48:a0:bb:e7:4a: 0f:c7:d3:c7:01:5a:e5:ea:3d:20:a1:26:09:e3:fc:45:42:2b: bd:83:ee:6c:d7:b8:1b:26:0a:11:f6:5f:e1:b1:c0:3a:27:98: 7a:a2:c4:d6:e1:0f:19:56:00:bd:4f:3d:44:66:c9:75:20:b7: ec:df:54:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz NDUzQThGNTIwHhcNMjUwNDAzMDM0ODI5WhcNMjUwNDEwMDM0ODI5WjAYMRYwFAYD VQQDEw02N2VlMDUwZC1iYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AcZoixTzgVRMSjdGdzmCQ61JyJ3QXy3V2mgxdV+1BNSpgBXjuuwcJG/STha KXuBmVAFuTHDZryj1tLYc+d9MZRfHTTRk8GVQy5YMdtrovP5F2K2BXuh5nL3eAv2 EyaJd3X6IvofOYNGytvZlk7OBR8QHS7HH5Ug9mb0WYpQSJVbkEJuzOzs7R+y2vO/ kBTtZF9HWkYJa2xlBN/D0Fe5qk9SeyWHtlSjMGagEO6E5+25C0Tzz2bMJPHfe19O +MhK83PjzfEd7x705pvUzBsvG5gFxv/8jzeEX6sScAIE9nq3RDGB0zEH44XYQqMY T6cpagChw9LyKxSl/6AK9Od1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj/g59L 78ZR1hoz44ifrzMuJPeTMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2 OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzJFMS85MDQ3RUYwNDQ2OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYt c0syUzZ6OEtmSzgwVTZqMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUTbhbpc1YGCoW+tGmQ4aGfQIKJNFvqw7cr0YuWz6z/fV/MKZrK2jI 7R69Qo8Q0Zp0lETNF4XTyYwJf6cOsnHjTEyqgGdVSteFwvQXJktaAzdJEXF1hunV EFTtK8yRbIi9aVQWTAKdfZDwZ4pxa9646dIeZjdqV+hXDGnP85QQ/s6rtwbzIZXl 394x0sEjBt9ZDhbmV9nGl2auCrfgkTP1jNrtd0LyuwmbLUG9KpkUBCKxpzY221Ef uAZqh32e7xihSKC750oPx9PHAVrl6j0goSYJ4/xFQiu9g+5s17gbJgoR9l/hscA6 J5h6osTW4Q8ZVgC9Tz1EZsl1ILfs31RK -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:22 2025 by rpki-client