$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: kANa1uD2aVttaDAieiFht5zgGMuiupmmtyAzj8OE1BM= Subject key identifier: AC:7C:94:56:3E:19:F9:D6:BC:CD:87:22:87:C1:55:72:CA:B6:8F:71 Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 03E9 Signing time: Thu 03 Apr 2025 00:32:16 +0000 Manifest this update: Thu 03 Apr 2025 00:32:15 +0000 Manifest next update: Thu 10 Apr 2025 00:32:15 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: Hwr3vuf/zJEO8oFRrEpzORQ1aI1xygCeKd3SkonxR14=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9 Validity Not Before: Apr 3 00:32:15 2025 GMT Not After : Apr 10 00:32:15 2025 GMT Subject: CN=67edd710-f8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:71:de:d1:70:94:d5:3b:f5:42:f5:7e:da: 58:4e:67:32:08:af:a3:84:1b:19:01:5a:e9:1e:ea: 07:64:9e:fb:72:f5:12:b2:c5:eb:d6:32:d3:b3:b7: b6:49:ce:fa:f7:10:6e:fb:ee:c7:d6:4a:8c:7c:ab: 20:d7:a3:74:61:da:ad:96:ba:18:76:15:a7:ee:0f: 68:32:d9:e0:b9:e0:06:2a:06:72:38:cc:fd:3c:81: 68:8b:c2:51:07:27:85:09:b6:10:7a:0a:73:62:a1: 8b:64:be:df:62:cc:8a:e5:46:3a:a5:5f:02:02:cd: 5c:4d:51:25:0a:42:eb:75:a0:3c:69:d6:16:b6:ff: be:95:1b:43:9c:58:34:c0:bd:20:8f:cf:d3:95:0a: fd:61:81:a8:3e:7d:4c:76:9c:f6:24:b9:0f:6c:28: f5:45:8e:32:bb:68:0c:51:92:3b:7d:e3:3c:75:70: 98:0f:e1:98:fb:0f:ec:5d:64:3a:8a:38:a8:75:49: 37:65:fd:51:55:03:67:86:94:5e:7e:ce:07:4b:73: aa:74:fe:4b:cc:05:37:91:d8:f7:e6:ba:38:35:03: d4:e6:16:8d:b1:66:cb:52:65:70:f9:c0:85:30:45: 7d:3e:c8:c7:a9:e6:60:f6:12:56:7a:fc:e7:6f:86: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7C:94:56:3E:19:F9:D6:BC:CD:87:22:87:C1:55:72:CA:B6:8F:71 X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:9b:40:d8:8e:de:27:5e:3f:95:1d:41:48:83:09:63:59: f7:bb:28:13:ec:a8:ff:1c:ea:3f:d9:fa:57:6c:48:e2:d1:7e: 5f:94:78:f7:8d:94:cd:b2:bd:79:65:90:01:5a:55:fc:23:43: d8:e3:f5:a5:c2:c1:21:d7:59:5f:8c:e5:d1:d0:39:c2:9e:40: e6:1c:5d:84:23:fa:af:bf:06:f7:0e:a4:38:08:01:3f:51:07: b1:8a:7d:a8:66:06:c9:10:e7:2f:3c:c1:59:5d:99:ac:cf:96: 0f:a8:14:68:ba:f4:58:75:48:dc:eb:f4:dc:3f:e9:ff:06:d0: 56:ca:56:3e:46:f4:d3:1a:5f:7e:e8:c5:7c:68:77:c5:db:a1: 11:dd:4d:0b:ca:76:1f:88:8e:46:12:e7:0a:19:9e:6d:6b:69: 5c:3d:40:97:8e:72:d4:34:75:52:67:79:a6:6d:4d:b5:93:84: a3:f4:c4:bb:c6:ae:f5:c9:cd:32:b3:bd:db:8d:76:0c:1b:ce: ed:11:82:a4:46:13:15:ab:95:be:f9:65:5e:90:0b:95:3f:b8: f1:41:58:a1:b9:f0:02:6a:8e:02:b9:c7:e1:5e:3a:f7:ba:84: 4b:02:cd:ab:fa:55:88:88:a0:e9:ce:27:bb:5b:ab:0b:c2:9c: 01:a6:47:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUwNDAzMDAzMjE1WhcNMjUwNDEwMDAzMjE1WjAYMRYwFAYD VQQDEw02N2VkZDcxMC1mOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAFx3tFwlNU79UL1ftpYTmcyCK+jhBsZAVrpHuoHZJ77cvUSssXr1jLTs7e2 Sc769xBu++7H1kqMfKsg16N0YdqtlroYdhWn7g9oMtngueAGKgZyOMz9PIFoi8JR ByeFCbYQegpzYqGLZL7fYsyK5UY6pV8CAs1cTVElCkLrdaA8adYWtv++lRtDnFg0 wL0gj8/TlQr9YYGoPn1Mdpz2JLkPbCj1RY4yu2gMUZI7feM8dXCYD+GY+w/sXWQ6 ijiodUk3Zf1RVQNnhpRefs4HS3OqdP5LzAU3kdj35ro4NQPU5haNsWbLUmVw+cCF MEV9PsjHqeZg9hJWevznb4YGTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKx8lFY+ GfnWvM2HIofBVXLKto9xMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq9ptA2I7eJ14/lR1BSIMJY1n3uygT7Kj/HOo/2fpXbEji0X5flHj3 jZTNsr15ZZABWlX8I0PY4/WlwsEh11lfjOXR0DnCnkDmHF2EI/qvvwb3DqQ4CAE/ UQexin2oZgbJEOcvPMFZXZmsz5YPqBRouvRYdUjc6/TcP+n/BtBWylY+RvTTGl9+ 6MV8aHfF26ER3U0LynYfiI5GEucKGZ5ta2lcPUCXjnLUNHVSZ3mmbU21k4Sj9MS7 xq71yc0ys73bjXYMG87tEYKkRhMVq5W++WVekAuVP7jxQVihufACao4CucfhXjr3 uoRLAs2r+lWIiKDpzie7W6sLwpwBpkeV -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:55 2025 by rpki-client