$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: ul1OMU93NaACAm9TironQTDTKONvhw9hJSSQap5hkSk= Subject key identifier: 57:7A:68:7B:87:9E:3A:2C:63:1D:BA:62:DC:91:DF:CE:C8:CF:6F:45 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0616 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 0607 Signing time: Wed 02 Apr 2025 22:55:15 +0000 Manifest this update: Wed 02 Apr 2025 22:55:15 +0000 Manifest next update: Wed 09 Apr 2025 22:55:15 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: 7bERRDV1w5PKdOKj4nr3DZteR3jMH9+rp2N7pZEJwGU=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: YhkBn/J1JdTWK5hPkNAkFpEw4Az5dw82JJQnUVEN+2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3 Validity Not Before: Apr 2 22:55:15 2025 GMT Not After : Apr 9 22:55:15 2025 GMT Subject: CN=67edc053-148c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:1c:09:b4:01:c6:0d:33:16:10:f8:e4:cc: ec:b8:35:dd:91:c1:b6:25:55:95:58:9f:4a:b7:5e: 3d:26:52:83:80:d0:3b:23:bf:09:ff:3c:2c:1f:3d: bc:2a:9f:f2:b2:c6:01:39:51:bf:86:81:52:2c:8d: 47:3e:93:57:24:e9:3c:61:90:79:4c:17:6f:11:7a: ee:c3:bb:45:28:65:db:bc:ba:4d:77:54:72:80:3e: 6e:ec:b0:9e:76:7d:e2:79:0e:46:53:08:c4:9c:61: 47:50:d6:51:bc:b8:ce:6c:59:3e:4d:1e:3d:be:03: 9e:0b:4b:ca:26:17:5f:cc:f7:a5:95:d9:6d:fb:03: 0c:3b:3b:f8:6d:7a:88:84:10:05:d5:70:a9:74:37: 3b:a4:24:8d:48:aa:fd:1d:43:52:79:3c:5a:ec:a0: 69:d8:b9:bd:7c:81:e4:e5:fc:a8:ae:23:2f:cc:7c: 21:94:f7:de:2d:78:67:6d:17:b8:18:0e:eb:53:8d: 02:02:b2:d0:d2:c9:e9:f7:a2:57:dd:d0:d8:ac:f5: 4a:9b:b8:28:b6:f4:aa:41:19:a1:d0:1e:bc:88:52: 82:68:e4:94:97:2f:a7:68:dc:d5:7c:e6:1d:82:89: 24:c6:81:dc:dd:f6:61:36:0e:7a:6a:89:68:55:06: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:68:7B:87:9E:3A:2C:63:1D:BA:62:DC:91:DF:CE:C8:CF:6F:45 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ff:0a:49:d6:0f:da:57:e3:23:4a:ba:07:c4:69:1d:a9:35: f6:45:f0:c0:83:e6:1b:a7:93:42:7f:c6:bf:90:c8:24:56:f4: c3:fc:50:41:a0:85:96:4d:de:57:cd:32:76:13:f9:02:3b:f6: 3e:8b:92:c6:83:e0:db:62:f4:16:8a:3c:60:5c:87:c7:b1:16: b5:35:50:e2:8b:a0:69:49:08:9f:16:f9:ef:2d:bd:d3:62:34: 4c:b7:7d:0e:a9:0a:59:7f:ee:c2:eb:69:3c:22:fc:ca:ad:b5: 73:45:7e:93:55:e5:68:5e:d0:65:3f:33:d3:eb:1c:88:00:4f: 95:e9:a3:b8:16:13:24:b2:7c:72:63:71:9c:88:a4:f8:0d:f7: 17:66:ed:78:bc:55:c4:f6:46:cb:b3:c3:bf:7d:b7:48:82:b2: 3d:16:c7:e3:b2:62:d0:04:03:29:b1:08:52:bb:b5:8f:3f:35: cd:3b:48:6a:86:99:13:4d:b1:65:87:81:3d:cb:54:4a:bd:7d: 3f:30:c6:30:be:3c:39:a4:15:ce:39:d7:ae:7f:5b:4e:05:53: 81:51:63:65:54:fd:70:1b:33:93:a2:be:d9:f5:e2:bd:9e:b9: 62:ca:6d:91:b1:06:72:89:58:57:3c:f2:52:0d:56:53:d2:70: a0:bc:76:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNDAyMjI1NTE1WhcNMjUwNDA5MjI1NTE1WjAYMRYwFAYD VQQDEw02N2VkYzA1My0xNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjgcCbQBxg0zFhD45MzsuDXdkcG2JVWVWJ9Kt149JlKDgNA7I78J/zwsHz28 Kp/yssYBOVG/hoFSLI1HPpNXJOk8YZB5TBdvEXruw7tFKGXbvLpNd1RygD5u7LCe dn3ieQ5GUwjEnGFHUNZRvLjObFk+TR49vgOeC0vKJhdfzPelldlt+wMMOzv4bXqI hBAF1XCpdDc7pCSNSKr9HUNSeTxa7KBp2Lm9fIHk5fyoriMvzHwhlPfeLXhnbRe4 GA7rU40CArLQ0snp96JX3dDYrPVKm7gotvSqQRmh0B68iFKCaOSUly+naNzVfOYd gokkxoHc3fZhNg56aoloVQZlJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd6aHuH njosYx26YtyR387Iz29FMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC/wpJ1g/aV+MjSroHxGkdqTX2RfDAg+Ybp5NCf8a/kMgkVvTD/FBB oIWWTd5XzTJ2E/kCO/Y+i5LGg+DbYvQWijxgXIfHsRa1NVDii6BpSQifFvnvLb3T YjRMt30OqQpZf+7C62k8IvzKrbVzRX6TVeVoXtBlPzPT6xyIAE+V6aO4FhMksnxy Y3GciKT4DfcXZu14vFXE9kbLs8O/fbdIgrI9FsfjsmLQBAMpsQhSu7WPPzXNO0hq hpkTTbFlh4E9y1RKvX0/MMYwvjw5pBXOOdeuf1tOBVOBUWNlVP1wGzOTor7Z9eK9 nrliym2RsQZyiVhXPPJSDVZT0nCgvHYf -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:23 2025 by rpki-client