$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft File: lSOtJeytXMUl7ELp7B2uT9_YYFc.mft (raw, json) Hash identifier: CUZ9cNsqujcw/KlQOeuX9+0eUAfp0OVSEkjOj75fpvk= Subject key identifier: 78:FD:53:05:E8:BC:2E:CB:BB:BC:05:49:5A:C4:1B:7E:F9:6D:B1:1D Authority key identifier: 95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 Certificate issuer: /CN=A912A3C4/serialNumber=9523AD25ECAD5CC525EC42E9EC1DAE4FDFD86057 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft Manifest number: 08BA Signing time: Sun 06 Apr 2025 20:14:43 +0000 Manifest this update: Sun 06 Apr 2025 20:14:42 +0000 Manifest next update: Sun 13 Apr 2025 20:14:42 +0000 Files and hashes: 1: lSOtJeytXMUl7ELp7B2uT9_YYFc.crl (hash: gl3Wj6Ko6Fv/h5c7wKMoOHbnmTzFp4oDsavJJrePgZM=) 2: 518ED8E0B10511EAA4771B5BC4F9AE02.roa (hash: /AfMDdlUI8cvlyQqr8rioborDgBP3t18ByLX0Pcso10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3C4 Validity Not Before: Apr 6 20:14:42 2025 GMT Not After : Apr 13 20:14:42 2025 GMT Subject: CN=67f2e0b2-3ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:d6:9d:e5:75:8b:de:d6:99:e2:0c:20:74: b7:71:c6:a8:7d:cb:ec:8b:bb:4e:a1:79:b7:c2:c0: 53:14:ad:53:de:7a:2f:ee:3d:49:1b:1f:eb:f2:df: 3d:a8:57:c7:96:03:f0:f5:84:05:ee:74:15:ad:90: db:43:1b:0e:fc:2f:33:a5:13:9e:73:a8:56:a1:7c: 24:c6:84:0b:59:cb:bc:2b:2d:dd:0a:a7:15:70:e7: e8:44:4e:26:a6:08:71:c1:e8:d0:00:66:01:cb:87: 25:f1:9d:fb:a8:3d:24:5e:fa:62:d8:36:86:d0:01: ed:b0:43:33:b0:18:2a:72:70:e3:d8:b4:14:78:1a: b0:61:c6:f6:f7:7f:fe:04:ed:48:5d:f2:f1:e7:45: b5:96:04:a7:43:21:e5:22:14:a7:7a:c7:2d:70:97: 60:4f:71:99:0d:e2:80:6a:65:e8:eb:64:d5:62:de: 29:ee:63:c6:3e:cd:9e:97:ab:b2:f6:01:85:be:c8: 78:f6:26:e5:54:57:23:83:ab:19:41:7d:a1:14:dc: fa:fb:57:48:31:d1:72:70:17:d4:ee:29:fc:86:79: d8:52:fe:28:89:0b:e6:be:53:bb:f1:6b:e8:ef:bc: 93:2a:d6:71:bf:f9:15:9c:0c:a5:a5:65:21:54:45: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:53:05:E8:BC:2E:CB:BB:BC:05:49:5A:C4:1B:7E:F9:6D:B1:1D X509v3 Authority Key Identifier: keyid:95:23:AD:25:EC:AD:5C:C5:25:EC:42:E9:EC:1D:AE:4F:DF:D8:60:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSOtJeytXMUl7ELp7B2uT9_YYFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/3EE64C1AB10411EAA384165AC4F9AE02/lSOtJeytXMUl7ELp7B2uT9_YYFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:05:70:ea:d9:17:f3:60:de:66:a8:ab:72:4d:ff:b2:61:23: dc:50:45:6c:59:15:f8:82:75:db:9b:d7:b0:99:ec:e8:0e:e7: 40:3f:33:89:59:57:a5:99:86:52:d5:0f:ca:46:57:eb:d1:7c: 00:85:27:29:7e:c3:90:b8:e7:4f:2f:c5:0a:86:19:95:22:c2: 7a:c3:69:dd:9f:5b:0d:cb:92:87:62:6b:1a:15:b0:2b:68:48: 9b:44:89:a3:70:8d:35:ae:42:a2:f6:ee:f0:57:c1:87:fe:48: ab:d5:ff:50:46:59:03:e2:18:9a:27:a9:c2:c7:89:e0:7e:31: 9c:b6:d1:f9:57:c0:89:bd:72:d0:88:c2:70:78:2c:5d:e5:09: 30:e5:1d:5d:a6:d5:f1:04:ab:c3:a4:e2:42:81:de:51:ef:a5: e5:11:37:b0:fa:23:85:1d:6c:23:e3:90:87:f2:9e:da:2a:1e: 90:0e:e1:c7:d4:6a:57:68:68:0d:8f:9c:c8:de:4f:94:4e:fb: 2a:0a:b1:87:e8:a6:b6:6b:a4:e0:ff:04:77:51:88:ce:0a:54: 13:c7:25:63:10:40:e9:6f:c5:c8:94:31:75:5b:6b:0e:59:6d: 8b:ea:d0:cf:2b:a4:d6:87:57:e4:37:eb:69:fb:86:ff:a6:b2: f1:80:6d:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQzQxMTAvBgNVBAUTKDk1MjNBRDI1RUNBRDVDQzUyNUVDNDJFOUVDMURBRTRG REZEODYwNTcwHhcNMjUwNDA2MjAxNDQyWhcNMjUwNDEzMjAxNDQyWjAYMRYwFAYD VQQDEw02N2YyZTBiMi0zZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vnWneV1i97WmeIMIHS3ccaofcvsi7tOoXm3wsBTFK1T3nov7j1JGx/r8t89 qFfHlgPw9YQF7nQVrZDbQxsO/C8zpROec6hWoXwkxoQLWcu8Ky3dCqcVcOfoRE4m pghxwejQAGYBy4cl8Z37qD0kXvpi2DaG0AHtsEMzsBgqcnDj2LQUeBqwYcb293/+ BO1IXfLx50W1lgSnQyHlIhSnesctcJdgT3GZDeKAamXo62TVYt4p7mPGPs2el6uy 9gGFvsh49iblVFcjg6sZQX2hFNz6+1dIMdFycBfU7in8hnnYUv4oiQvmvlO78Wvo 77yTKtZxv/kVnAylpWUhVEXcjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj9UwXo vC7Lu7wFSVrEG375bbEdMB8GA1UdIwQYMBaAFJUjrSXsrVzFJexC6ewdrk/f2GBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNDNC8zRUU2NEMxQUIx MDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhNVWw3RUxwN0IydVQ5X1lZ RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTT3RKZXl0WE1VbDdFTHA3QjJ1VDlfWVlGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNDNC8zRUU2NEMxQUIxMDQxMUVBQTM4NDE2NUFDNEY5QUUwMi9sU090SmV5dFhN VWw3RUxwN0IydVQ5X1lZRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjBXDq2RfzYN5mqKtyTf+yYSPcUEVsWRX4gnXbm9ewmezoDudAPzOJ WVelmYZS1Q/KRlfr0XwAhScpfsOQuOdPL8UKhhmVIsJ6w2ndn1sNy5KHYmsaFbAr aEibRImjcI01rkKi9u7wV8GH/kir1f9QRlkD4hiaJ6nCx4ngfjGcttH5V8CJvXLQ iMJweCxd5Qkw5R1dptXxBKvDpOJCgd5R76XlETew+iOFHWwj45CH8p7aKh6QDuHH 1GpXaGgNj5zI3k+UTvsqCrGH6Ka2a6Tg/wR3UYjOClQTxyVjEEDpb8XIlDF1W2sO WW2L6tDPK6TWh1fkN+tp+4b/prLxgG3t -----END CERTIFICATE-----Generated at Mon Apr 7 03:11:25 2025 by rpki-client