$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft File: lvQuGfadWWoDGJIVkKF91TIz5ZU.mft (raw, json) Hash identifier: H6b5Nik8GMKQas7akJY5hMTcfz0Kz7ATwwst+2RKtjI= Subject key identifier: 0D:09:16:B4:47:AD:7D:29:B5:03:F4:48:F7:62:EA:AD:AA:3D:39:83 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft Manifest number: 07BB Signing time: Sun 20 Apr 2025 21:01:05 +0000 Manifest this update: Sun 20 Apr 2025 21:01:05 +0000 Manifest next update: Sun 27 Apr 2025 21:01:05 +0000 Files and hashes: 1: lvQuGfadWWoDGJIVkKF91TIz5ZU.crl (hash: y5PIhLTSfYqhSs+DRmeXKbpNhtD3ZBftxJqMzczQrEk=) 2: C2D9F4BCD24311EF92066413C4F9AE02.roa (hash: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM=) 3: 9D594A509FFB11EF9E614409C4F9AE02.roa (hash: fpSWb3+1/or+BPPYOQwZNVSa0gpgbLnYUKAHGw/tdCA=) 4: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (hash: iRd1/ZHW+2xlwhXyNjL/uUSU9QGRKaTGijCT9xr8AHM=) 5: 7F81B29AD24311EFA5E5B012C4F9AE02.roa (hash: bBRIJf+7fUSvuqh5dd6ayigZtBMms6tUQ/qVmqSY6fs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Apr 20 21:01:05 2025 GMT Not After : Apr 27 21:01:05 2025 GMT Subject: CN=68056091-fc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:0a:8c:d8:ec:72:7d:56:c9:f0:2f:e6:5a: 8d:7f:fb:19:77:9d:60:72:ae:23:cb:4f:2c:0e:f1: 2d:6e:bc:7a:f8:a9:93:d9:9c:14:c5:77:4c:fe:82: 1d:c0:1b:a0:29:bc:7a:0e:b3:d6:0d:4d:cb:b4:3a: 14:e1:dd:cb:fe:01:7f:2c:bd:46:71:c4:67:a4:d2: 1e:6e:84:78:e8:d8:b9:5e:58:8c:5e:df:59:52:58: b8:98:83:de:24:3c:24:37:60:9a:6d:0e:d4:1a:52: 78:a8:9d:30:4b:10:6b:f3:73:b0:63:b4:a7:cf:4e: 1c:7e:30:ba:3c:90:71:cb:ab:2a:44:64:96:74:65: fe:0b:f7:a3:45:50:ed:76:e5:6b:b4:ae:2e:16:8f: ea:19:e8:34:93:87:da:65:34:2c:51:a2:d0:1f:9e: 14:3f:9a:61:7b:fa:98:fb:66:26:d8:ce:33:bf:0c: 6a:2e:14:3b:6b:7b:02:10:e8:1d:d5:fa:09:f6:3f: 59:68:14:34:de:05:47:e5:35:66:d8:d9:3f:aa:74: c6:f1:d4:51:38:6b:1c:2b:8d:7f:0a:f7:dd:f1:46: 25:c9:e0:31:40:1d:6b:88:2f:5f:4a:f6:72:4a:91: 63:a6:c6:3f:58:32:90:bd:d0:95:28:8b:34:f7:a7: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:09:16:B4:47:AD:7D:29:B5:03:F4:48:F7:62:EA:AD:AA:3D:39:83 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:de:f1:81:6c:a7:5b:36:02:70:ff:d7:01:85:00:66:f8:bf: 03:fb:c1:87:c5:9c:e0:a2:24:3e:c0:86:72:20:a7:c9:2a:f5: 48:0d:f2:63:8c:23:8a:c8:40:71:86:21:ae:de:c3:9a:a0:1e: c9:2e:19:c6:93:1b:97:d7:1a:4a:ba:45:d1:1a:c5:19:ff:1a: 13:80:da:6f:94:8b:55:2a:80:3e:a8:7e:60:d8:67:2d:43:2c: b6:1a:34:54:2c:6b:30:63:ee:07:f7:43:91:21:5a:b8:6b:f7: ae:35:86:b0:21:d8:63:ad:cc:3a:3e:b3:fc:cf:dc:0a:dc:44: a9:ab:52:3a:15:1d:ae:bc:f3:09:56:d7:e6:d5:6a:bf:23:b7: 20:59:a1:ba:fc:df:db:78:21:e8:11:fd:58:f8:08:64:e7:8e: 73:d3:9e:2d:ea:e1:dd:43:7f:ae:53:ee:08:03:dc:5c:6e:49: 78:ab:7f:0c:f4:b4:a0:c5:52:fe:08:ad:44:16:ab:3e:11:8c: 44:d3:d1:a2:9a:ab:30:97:57:de:3f:0d:e7:90:b9:23:aa:ab: d4:e2:ee:3c:67:58:20:a3:6b:1d:f8:e5:82:a3:52:53:58:3f: 6f:c6:cf:a2:29:fa:71:c3:0d:20:32:c1:69:71:26:84:9a:31: 5e:ff:71:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwNDIwMjEwMTA1WhcNMjUwNDI3MjEwMTA1WjAYMRYwFAYD VQQDEw02ODA1NjA5MS1mYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArloKjNjscn1WyfAv5lqNf/sZd51gcq4jy08sDvEtbrx6+KmT2ZwUxXdM/oId wBugKbx6DrPWDU3LtDoU4d3L/gF/LL1GccRnpNIeboR46Ni5XliMXt9ZUli4mIPe JDwkN2CabQ7UGlJ4qJ0wSxBr83OwY7Snz04cfjC6PJBxy6sqRGSWdGX+C/ejRVDt duVrtK4uFo/qGeg0k4faZTQsUaLQH54UP5phe/qY+2Ym2M4zvwxqLhQ7a3sCEOgd 1foJ9j9ZaBQ03gVH5TVm2Nk/qnTG8dRROGscK41/Cvfd8UYlyeAxQB1riC9fSvZy SpFjpsY/WDKQvdCVKIs096dEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0JFrRH rX0ptQP0SPdi6q2qPTmDMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTc2RC85M0QxN0NEMDA2QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdX b0RHSklWa0tGOTFUSXo1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj3vGBbKdbNgJw/9cBhQBm+L8D+8GHxZzgoiQ+wIZyIKfJKvVIDfJj jCOKyEBxhiGu3sOaoB7JLhnGkxuX1xpKukXRGsUZ/xoTgNpvlItVKoA+qH5g2Gct Qyy2GjRULGswY+4H90ORIVq4a/euNYawIdhjrcw6PrP8z9wK3ESpq1I6FR2uvPMJ Vtfm1Wq/I7cgWaG6/N/beCHoEf1Y+Ahk545z054t6uHdQ3+uU+4IA9xcbkl4q38M 9LSgxVL+CK1EFqs+EYxE09Gimqswl1fePw3nkLkjqqvU4u48Z1ggo2sd+OWCo1JT WD9vxs+iKfpxww0gMsFpcSaEmjFe/3H+ -----END CERTIFICATE-----Generated at Tue Apr 22 16:48:08 2025 by rpki-client