$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft File: lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft (raw, json) Hash identifier: rFxliwcMM94232NXk0A86k/xSjKTO/LGnjJ48rCAI0g= Subject key identifier: 70:7C:F2:0C:0C:E5:A9:4D:AA:C3:45:DD:B1:F9:E1:FE:3C:FB:AD:D8 Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 Certificate issuer: /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft Manifest number: 065A Signing time: Fri 28 Mar 2025 22:51:57 +0000 Manifest this update: Fri 28 Mar 2025 22:51:57 +0000 Manifest next update: Fri 04 Apr 2025 22:51:57 +0000 Files and hashes: 1: lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl (hash: TCC59m0hgNI+9PAY1+JrJ/FkXNrW6xzUoJS00v0Lcdw=) 2: 1019A190866411EF9319811DC4F9AE02.roa (hash: wtwiKt+4TVHusZZf8INhP5+WjxvjhIvi80rOozxsOjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91211D4 Validity Not Before: Mar 28 22:51:57 2025 GMT Not After : Apr 4 22:51:57 2025 GMT Subject: CN=67e7280d-846b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:47:ec:f3:49:99:35:85:42:4b:ef:15:93: 3a:32:1f:e3:5e:e4:19:57:bb:4c:9a:6f:20:63:4a: 3a:aa:ff:8f:89:2b:69:b0:c0:27:39:93:1e:46:e6: c7:63:48:42:36:07:d4:05:b6:54:d7:b3:e8:f3:f4: e1:78:95:b0:5d:52:4a:30:df:7c:a2:0e:a7:ce:7d: d1:ff:79:38:6b:2e:79:c1:8a:38:d9:ab:92:27:cd: 49:bc:07:4b:d4:04:a8:0a:d0:19:fb:02:60:2f:ca: f4:8f:2a:d8:1f:31:5f:c1:39:21:53:60:69:2e:ee: d8:7b:4d:4f:a8:06:85:62:93:b5:03:11:72:ad:05: 05:f8:50:ff:20:8e:0e:81:75:9e:20:c7:66:e3:1f: 78:27:8b:41:c5:05:8f:ce:0e:86:fe:3e:5c:8e:d9: 68:bf:8d:6c:f9:6c:e5:b2:96:69:33:1d:53:ae:4b: 0c:27:48:5c:47:00:4f:97:c5:d0:4a:c0:7e:57:3b: aa:1d:b5:f6:42:7d:87:69:de:f6:d8:f2:ce:30:e0: 57:88:2d:6b:9b:d1:3a:c9:fd:e3:ce:a3:5a:24:9c: 91:9a:98:cb:b4:97:2f:5f:a1:80:95:7b:75:74:d0: d8:e4:3d:a9:cb:13:98:13:9b:3a:a9:ae:85:c6:c6: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:F2:0C:0C:E5:A9:4D:AA:C3:45:DD:B1:F9:E1:FE:3C:FB:AD:D8 X509v3 Authority Key Identifier: keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a5:0f:bc:17:b7:b0:0f:6c:06:5c:6a:47:1b:47:19:fd:48: 3e:1d:61:aa:7d:9a:91:05:80:a8:a1:fb:44:fc:95:44:87:09: 56:b6:8f:fb:0f:90:0b:70:d9:a0:04:19:08:d4:69:74:be:fc: d5:60:64:96:8b:6d:56:65:fc:67:05:11:8f:42:a8:b4:b0:a8: f5:f4:eb:e5:2a:19:9b:bf:ab:aa:63:44:4f:6f:99:d0:66:08: 21:c4:a8:07:27:ac:eb:f4:d0:b7:1c:5a:05:82:39:52:71:2c: 20:41:d3:52:05:68:d9:8d:08:d6:5d:f1:82:cb:9a:f9:d9:c9: 6f:6c:57:33:f2:c0:2c:a3:71:3c:9e:34:e8:8a:dd:c1:8e:90: 33:13:c6:a2:2e:e5:d1:1a:7f:3a:bc:26:8e:1b:70:5d:6d:2c: b3:70:68:ad:b8:63:94:ee:16:1c:42:c7:19:9f:71:6a:7a:b1: a1:2b:4a:18:23:d4:7e:9a:43:ce:6c:e9:50:11:f0:fb:b4:3c: 8c:c3:13:45:b7:6d:e1:68:29:b2:8f:8b:97:ae:e2:80:b4:58: 4d:b9:fd:af:13:20:26:ce:4e:dc:50:bb:21:c2:67:4b:bd:19: 53:32:78:a1:93:2d:ca:b1:a0:8f:3c:d4:2d:4b:ba:3a:ab:08: b3:25:af:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExRDQxMTAvBgNVBAUTKDk2OEQyQUFBNjE2OENCNDk2OTQ0QTcyNzAxOEFGQjQy QTI2RTMxRTEwHhcNMjUwMzI4MjI1MTU3WhcNMjUwNDA0MjI1MTU3WjAYMRYwFAYD VQQDEw02N2U3MjgwZC04NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsphH7PNJmTWFQkvvFZM6Mh/jXuQZV7tMmm8gY0o6qv+PiStpsMAnOZMeRubH Y0hCNgfUBbZU17Po8/TheJWwXVJKMN98og6nzn3R/3k4ay55wYo42auSJ81JvAdL 1ASoCtAZ+wJgL8r0jyrYHzFfwTkhU2BpLu7Ye01PqAaFYpO1AxFyrQUF+FD/II4O gXWeIMdm4x94J4tBxQWPzg6G/j5cjtlov41s+WzlspZpMx1TrksMJ0hcRwBPl8XQ SsB+VzuqHbX2Qn2Had722PLOMOBXiC1rm9E6yf3jzqNaJJyRmpjLtJcvX6GAlXt1 dNDY5D2pyxOYE5s6qa6FxsZe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB88gwM 5alNqsNF3bH54f48+63YMB8GA1UdIwQYMBaAFJaNKqphaMtJaUSnJwGK+0KibjHh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTFENC9BOUY0OTY1Mjg2 Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kwbHBSS2NuQVlyN1FxSnVN ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvMHFxbUZveTBscFJLY25BWXI3UXFKdU1lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTFENC9BOUY0OTY1Mjg2Q0QxMUVCQTRBRkY2MDlDNEY5QUUwMi9sbzBxcW1Gb3kw bHBSS2NuQVlyN1FxSnVNZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXpQ+8F7ewD2wGXGpHG0cZ/Ug+HWGqfZqRBYCooftE/JVEhwlWto/7 D5ALcNmgBBkI1Gl0vvzVYGSWi21WZfxnBRGPQqi0sKj19OvlKhmbv6uqY0RPb5nQ ZgghxKgHJ6zr9NC3HFoFgjlScSwgQdNSBWjZjQjWXfGCy5r52clvbFcz8sAso3E8 njToit3BjpAzE8aiLuXRGn86vCaOG3BdbSyzcGituGOU7hYcQscZn3FqerGhK0oY I9R+mkPObOlQEfD7tDyMwxNFt23haCmyj4uXruKAtFhNuf2vEyAmzk7cULshwmdL vRlTMnihky3KsaCPPNQtS7o6qwizJa8N -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:05 2025 by rpki-client