$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: FS2Vm0Z3YLIJ0YwpIh5IQyJeKw0JQ3qD0Jykhpqva18= Subject key identifier: E1:FB:ED:CC:8E:0B:21:1F:7F:B8:67:62:35:EE:0F:7E:2B:40:F0:5C Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0B14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0B0C Signing time: Fri 04 Apr 2025 19:22:38 +0000 Manifest this update: Fri 04 Apr 2025 19:22:37 +0000 Manifest next update: Fri 11 Apr 2025 19:22:37 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: i525uoSGMR8Byzur+b2vmno84qgkGywRWN59JoqtwMw=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: YBDDFTyuQNBpFqBokEWPqRZhpMARMTl/5hq7JGaNUzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340 Validity Not Before: Apr 4 19:22:37 2025 GMT Not After : Apr 11 19:22:37 2025 GMT Subject: CN=67f0317d-0f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:58:28:61:a7:8d:62:89:d8:45:f6:5d:e9:68: 90:32:7c:30:f5:2a:0a:9b:4b:27:b8:56:91:3b:bd: fb:a6:91:22:bd:69:c2:d6:03:65:86:cd:9f:b8:71: 4d:95:d9:41:1f:41:32:9c:a0:6a:93:c7:39:53:de: 3e:6e:64:f4:94:ac:3c:85:c1:05:30:71:ab:8d:06: b4:bd:d4:0b:23:93:46:c6:b6:a5:e6:8d:5f:27:9a: ec:a3:d0:57:eb:96:8f:6a:0c:42:1c:ef:f3:1e:20: c9:3b:ed:31:5a:dd:f7:bb:d5:58:68:77:2a:80:98: 5d:f0:36:1e:9f:b2:35:5d:e0:3d:9c:be:24:b2:05: fa:39:d0:04:52:c5:ad:8c:f8:c1:d3:87:c7:ca:cc: 44:00:e2:09:43:30:6c:c5:3e:f5:e5:30:cb:89:b1: 81:fd:fd:bf:2d:16:f0:ae:2f:09:af:90:e8:99:ca: 17:37:ba:37:74:17:fe:74:7b:7f:25:39:40:3d:b3: 0a:d3:d0:32:2f:63:ea:8d:be:02:78:fc:78:7a:ed: b3:a2:da:27:7f:8d:4a:b0:59:d6:0e:19:c6:ac:d8: ff:43:bf:e3:48:32:e3:ed:70:98:e9:38:4b:0d:ab: 84:5d:24:61:7a:84:28:62:12:15:9d:2f:53:06:dd: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FB:ED:CC:8E:0B:21:1F:7F:B8:67:62:35:EE:0F:7E:2B:40:F0:5C X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8b:c1:56:68:70:ff:7b:eb:e3:ff:39:76:69:94:db:a2:35: 68:aa:c8:9a:bb:d9:b5:69:8b:59:50:f6:10:f2:7d:17:96:fc: cb:c4:8f:71:0f:7f:a7:e5:d4:b7:e2:fb:68:fd:15:63:0b:76: d1:bf:a6:f2:17:7e:55:b0:36:c3:5f:cd:4c:0c:e2:a5:e0:6b: e2:9a:cd:9e:18:45:c5:78:89:6a:a7:0d:07:05:73:10:09:35: 63:14:19:68:70:87:1e:88:8e:f1:97:08:6c:6f:2c:50:4d:9d: 3d:ad:f1:7a:72:38:2a:a7:b3:e1:3e:43:b3:5c:ea:ab:94:a0: ba:07:d2:22:bd:b1:23:2e:5b:d3:a6:df:80:4e:eb:6c:14:e5: 92:5b:a7:60:b8:cc:75:d6:eb:1f:0f:b6:21:9a:99:0c:9c:85: 0a:60:00:b7:71:f9:8e:5f:6b:3e:8c:c7:45:80:10:34:8a:51: 18:98:69:d2:05:2e:06:ea:09:72:0a:8f:99:38:29:3d:05:24: 4b:dc:fc:25:38:76:95:af:2e:97:0c:1c:7b:4d:41:05:d1:31: 75:52:83:e7:fe:9e:04:8e:d6:41:c8:4c:42:d5:7c:b4:05:1b: 92:81:95:69:5f:7e:96:72:ba:30:b1:b2:44:37:7c:b7:83:7e: 1a:f0:12:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjUwNDA0MTkyMjM3WhcNMjUwNDExMTkyMjM3WjAYMRYwFAYD VQQDEw02N2YwMzE3ZC0wZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FgoYaeNYonYRfZd6WiQMnww9SoKm0snuFaRO737ppEivWnC1gNlhs2fuHFN ldlBH0EynKBqk8c5U94+bmT0lKw8hcEFMHGrjQa0vdQLI5NGxral5o1fJ5rso9BX 65aPagxCHO/zHiDJO+0xWt33u9VYaHcqgJhd8DYen7I1XeA9nL4ksgX6OdAEUsWt jPjB04fHysxEAOIJQzBsxT715TDLibGB/f2/LRbwri8Jr5DomcoXN7o3dBf+dHt/ JTlAPbMK09AyL2Pqjb4CePx4eu2zotonf41KsFnWDhnGrNj/Q7/jSDLj7XCY6ThL DauEXSRheoQoYhIVnS9TBt3HuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH77cyO CyEff7hnYjXuD34rQPBcMB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAai8FWaHD/e+vj/zl2aZTbojVoqsiau9m1aYtZUPYQ8n0XlvzLxI9x D3+n5dS34vto/RVjC3bRv6byF35VsDbDX81MDOKl4Gvims2eGEXFeIlqpw0HBXMQ CTVjFBlocIceiI7xlwhsbyxQTZ09rfF6cjgqp7PhPkOzXOqrlKC6B9IivbEjLlvT pt+ATutsFOWSW6dguMx11usfD7YhmpkMnIUKYAC3cfmOX2s+jMdFgBA0ilEYmGnS BS4G6glyCo+ZOCk9BSRL3PwlOHaVry6XDBx7TUEF0TF1UoPn/p4EjtZByExC1Xy0 BRuSgZVpX36WcrowsbJEN3y3g34a8BKS -----END CERTIFICATE-----Generated at Sat Apr 5 19:26:45 2025 by rpki-client