$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: +oO8+mun1Pa4B+QtIQSeOm3T4vQ0iiM0YlhYBNUfw7w= Subject key identifier: AA:12:A5:19:04:01:B2:5A:0F:5B:F0:33:6D:09:5E:46:CA:F6:3D:A6 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 0190 Signing time: Thu 03 Apr 2025 02:48:10 +0000 Manifest this update: Thu 03 Apr 2025 02:48:10 +0000 Manifest next update: Thu 10 Apr 2025 02:48:10 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: j3va9XYQE9dxJNTv5Hpdr7ShQk4ghg9P6mssELiun/Q=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431 Validity Not Before: Apr 3 02:48:10 2025 GMT Not After : Apr 10 02:48:10 2025 GMT Subject: CN=67edf6ea-5405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:76:ca:c4:0a:89:d3:2d:c1:5f:b2:1a:a2: 3d:8a:90:fd:48:01:44:31:7b:38:d7:ca:0d:ef:6c: f8:bf:ba:3c:65:2a:b3:51:07:42:f7:34:49:fe:09: 0a:2e:d6:30:60:11:a8:01:0b:96:e7:3f:05:0b:cb: 51:c8:89:56:17:35:5a:8a:19:70:69:e1:27:08:18: a9:ed:6b:71:37:f5:4d:7a:d4:a8:0a:a6:b8:c8:66: 5f:2e:aa:2a:da:68:99:46:1c:ff:4a:ef:aa:a5:40: d0:e3:f3:77:f4:bb:3d:53:b2:4e:55:b7:09:25:9e: 55:bf:ff:48:0b:73:8c:2c:41:3f:bf:20:f0:49:88: 35:e6:c3:e2:ff:7a:e0:1d:50:c5:e1:bb:d9:cc:3a: 9e:6a:a1:8b:63:17:83:d9:86:43:f2:fa:0c:5f:4a: 0a:c0:ce:37:72:cd:19:0a:67:95:bd:15:fa:cb:63: 7b:e8:ce:d5:c2:67:75:b1:d7:24:b3:d5:44:92:a6: 3b:d6:b5:4d:29:8d:6e:e5:fa:85:58:d3:37:e7:dd: 47:0f:66:06:ff:d9:d0:a1:88:a7:f9:54:15:53:cf: dc:22:9a:b0:f6:ea:f2:e2:1f:a1:af:d9:c4:fb:2d: 84:9a:6a:32:91:17:e6:46:3c:7a:42:e6:ee:bf:51: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:A5:19:04:01:B2:5A:0F:5B:F0:33:6D:09:5E:46:CA:F6:3D:A6 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:7a:b4:39:0e:e2:40:d0:30:56:22:1e:c2:57:8c:4d:fd: 70:da:8d:f8:68:7b:8c:a9:5e:a3:c0:d4:3b:35:2e:72:73:73: bd:00:fa:af:27:53:8e:1a:c5:aa:fa:5b:89:4f:27:e8:e6:ae: 84:0a:46:08:ce:4f:08:cc:bf:59:b2:c2:f0:a6:7d:8c:02:21: 6c:ca:4d:9e:31:cc:4b:7d:49:47:b7:d3:69:9b:fc:b8:fe:72: f0:94:fc:86:86:72:81:21:0d:b5:cb:06:92:2c:87:24:95:56: 34:47:6a:db:9e:90:3c:85:40:93:0a:14:80:5b:99:24:5b:65: 19:91:9f:d8:56:2e:c7:42:1a:0f:7a:e6:32:9d:7c:90:02:e6: e8:18:81:98:7e:7a:ba:f3:a2:83:9b:0e:d4:a7:2f:20:87:4a: 5c:27:dd:f2:30:52:26:2b:c1:c7:de:ca:7a:a5:85:a9:bf:25: d1:a1:7b:7e:d7:1e:e3:a1:fb:66:bd:b9:cc:9d:3c:ee:f7:86: 12:31:32:53:77:b5:eb:b6:20:81:b4:c0:30:96:2e:49:0b:55: 0e:97:3f:ee:a1:57:fc:27:9a:f3:25:6d:63:03:09:d5:ad:5e: b6:7f:2c:2b:3f:5e:80:75:8a:dd:8b:16:f4:5d:f9:38:1e:0f: 5e:8c:a0:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNDAzMDI0ODEwWhcNMjUwNDEwMDI0ODEwWjAYMRYwFAYD VQQDEw02N2VkZjZlYS01NDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxx2ysQKidMtwV+yGqI9ipD9SAFEMXs418oN72z4v7o8ZSqzUQdC9zRJ/gkK LtYwYBGoAQuW5z8FC8tRyIlWFzVaihlwaeEnCBip7WtxN/VNetSoCqa4yGZfLqoq 2miZRhz/Su+qpUDQ4/N39Ls9U7JOVbcJJZ5Vv/9IC3OMLEE/vyDwSYg15sPi/3rg HVDF4bvZzDqeaqGLYxeD2YZD8voMX0oKwM43cs0ZCmeVvRX6y2N76M7Vwmd1sdck s9VEkqY71rVNKY1u5fqFWNM3591HD2YG/9nQoYin+VQVU8/cIpqw9ury4h+hr9nE +y2EmmoykRfmRjx6Qubuv1H9NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoSpRkE AbJaD1vwM20JXkbK9j2mMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0Xq0OQ7iQNAwViIewleMTf1w2o34aHuMqV6jwNQ7NS5yc3O9APqv J1OOGsWq+luJTyfo5q6ECkYIzk8IzL9ZssLwpn2MAiFsyk2eMcxLfUlHt9Npm/y4 /nLwlPyGhnKBIQ21ywaSLIcklVY0R2rbnpA8hUCTChSAW5kkW2UZkZ/YVi7HQhoP euYynXyQAuboGIGYfnq686KDmw7Upy8gh0pcJ93yMFImK8HH3sp6pYWpvyXRoXt+ 1x7joftmvbnMnTzu94YSMTJTd7XrtiCBtMAwli5JC1UOlz/uoVf8J5rzJW1jAwnV rV62fywrP16AdYrdixb0Xfk4Hg9ejKDp -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:53 2025 by rpki-client