$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: mmxWFhnwBgkpMkBdJXN+n0m2jpC7LB6/AKNLNTMTBeU= Subject key identifier: 5E:32:97:63:DB:53:A1:34:78:91:34:61:14:0A:11:F1:03:5A:42:F0 Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 0619 Signing time: Fri 28 Mar 2025 23:01:30 +0000 Manifest this update: Fri 28 Mar 2025 23:01:29 +0000 Manifest next update: Fri 04 Apr 2025 23:01:29 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: aFQR2TcLnh8RvvVvk/f7V5WUeYnE55ijvVftpTs7L2g=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: c2XK07fkTtqrWcB4fZ5IJUYP88fXxA7EytLu8uCG7Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635 Validity Not Before: Mar 28 23:01:29 2025 GMT Not After : Apr 4 23:01:29 2025 GMT Subject: CN=67e72a49-5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:32:4f:89:34:bc:f0:a5:0a:dd:d2:42:00: c6:2c:2e:ef:be:9a:b3:9e:0d:4d:79:49:d9:a4:6b: 40:86:25:09:eb:49:fc:ea:33:90:71:36:5a:e5:c1: dc:fd:3f:4d:d3:c2:fc:19:b5:4d:33:9f:16:da:ef: 4a:20:5d:c7:7a:35:13:79:fc:b0:53:f2:fe:7c:ed: db:e0:4a:cd:49:30:a2:7d:0e:41:36:93:bf:5b:00: c1:66:8b:8a:6b:79:bb:73:d0:78:e9:7b:a9:45:5b: 63:97:11:38:f7:d6:45:92:b7:1e:a5:9c:90:bd:de: af:81:f6:ac:cf:61:b7:02:f1:ea:d2:60:08:76:43: d4:a4:3b:ad:bd:d1:47:6d:78:40:22:97:33:b3:14: 4a:c1:ab:c4:2c:9e:a7:7b:33:dd:61:89:fb:2a:f0: bb:e9:e4:6c:5c:98:55:48:c8:f2:9c:6b:18:d5:38: 88:8c:84:dd:24:4d:cd:66:01:6e:8e:bd:9b:53:b7: f6:3a:64:c7:49:ad:83:71:07:c4:f3:5d:47:6d:a8: 04:b7:3b:e1:f7:36:f8:ff:1c:8d:e2:d4:2b:31:dc: c5:37:73:25:de:ce:3e:9d:a6:a4:63:52:dc:b2:8a: 60:26:ff:66:9e:f6:4c:48:5c:b4:ae:a9:ea:a2:be: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:97:63:DB:53:A1:34:78:91:34:61:14:0A:11:F1:03:5A:42:F0 X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a7:46:74:a5:6e:c2:92:77:9c:13:ed:f1:bc:02:3f:4f:b0: e4:eb:d3:17:42:d1:9f:73:68:fc:40:39:16:80:e9:ce:1e:0b: b7:d3:35:2d:fc:41:8d:0d:49:15:6c:70:65:85:5b:cd:51:2b: 6e:15:d4:26:1e:b6:b7:d4:43:bc:84:29:9f:89:9c:1c:8e:74: 50:b0:83:88:a7:20:69:d2:b7:63:45:c6:ab:6d:de:52:56:de: c0:78:db:2c:8a:95:fa:ea:e9:47:d0:f3:bc:e4:50:71:9a:92: 3c:78:ba:f0:1e:e3:b1:ae:4f:4e:0f:4b:ab:27:a7:d7:9c:a7: 1d:e5:d9:f8:a7:83:b6:d1:ef:5b:f7:39:1b:e0:7f:e4:c0:65: f8:76:48:9c:0d:d7:ce:c3:fc:ff:22:f8:0c:92:7e:cb:61:c8: 1f:c4:3c:d4:32:43:ea:fd:5b:b8:96:84:d1:89:ed:81:98:cb: b1:ed:41:de:4c:f0:0c:ad:dc:d2:10:14:5f:8e:44:1d:1a:48: 24:05:fb:dd:33:8a:44:b0:fe:da:bd:19:96:10:49:0a:aa:5e: 04:4c:64:89:d9:10:59:cb:a4:67:bd:51:f8:83:ee:50:0e:5f: c8:87:77:69:64:8a:df:e0:71:2c:a5:b4:15:bc:8a:5c:18:3d: 90:4f:8a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUwMzI4MjMwMTI5WhcNMjUwNDA0MjMwMTI5WjAYMRYwFAYD VQQDEw02N2U3MmE0OS01NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAQyT4k0vPClCt3SQgDGLC7vvpqzng1NeUnZpGtAhiUJ60n86jOQcTZa5cHc /T9N08L8GbVNM58W2u9KIF3HejUTefywU/L+fO3b4ErNSTCifQ5BNpO/WwDBZouK a3m7c9B46XupRVtjlxE499ZFkrcepZyQvd6vgfasz2G3AvHq0mAIdkPUpDutvdFH bXhAIpczsxRKwavELJ6nezPdYYn7KvC76eRsXJhVSMjynGsY1TiIjITdJE3NZgFu jr2bU7f2OmTHSa2DcQfE811HbagEtzvh9zb4/xyN4tQrMdzFN3Ml3s4+naakY1Lc sopgJv9mnvZMSFy0rqnqor7MmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4yl2Pb U6E0eJE0YRQKEfEDWkLwMB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJp0Z0pW7CknecE+3xvAI/T7Dk69MXQtGfc2j8QDkWgOnOHgu30zUt /EGNDUkVbHBlhVvNUStuFdQmHra31EO8hCmfiZwcjnRQsIOIpyBp0rdjRcarbd5S Vt7AeNssipX66ulH0PO85FBxmpI8eLrwHuOxrk9OD0urJ6fXnKcd5dn4p4O20e9b 9zkb4H/kwGX4dkicDdfOw/z/IvgMkn7LYcgfxDzUMkPq/Vu4loTRie2BmMux7UHe TPAMrdzSEBRfjkQdGkgkBfvdM4pEsP7avRmWEEkKql4ETGSJ2RBZy6RnvVH4g+5Q Dl/Ih3dpZIrf4HEspbQVvIpcGD2QT4pl -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:28 2025 by rpki-client