$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: N67DP795PhiurTm3Qm3fl6uXeHqNvz6zmWSxigyYHRM= Subject key identifier: AF:84:F8:04:1E:C9:B8:52:34:FB:EE:3D:02:BA:E9:AB:AF:13:F9:F2 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B17 Signing time: Fri 04 Apr 2025 19:22:06 +0000 Manifest this update: Fri 04 Apr 2025 19:22:05 +0000 Manifest next update: Fri 11 Apr 2025 19:22:05 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: oGvNMVIND+G60KvnyuWtCtFwPTT7neGb7cDmCa/i+Zs=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA Validity Not Before: Apr 4 19:22:05 2025 GMT Not After : Apr 11 19:22:05 2025 GMT Subject: CN=67f0315e-c464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:9b:08:83:ef:7f:01:ca:a0:e4:80:f6:ff: 96:de:fc:9e:6a:0e:fb:f1:55:83:d3:67:c6:01:e3: 16:74:28:fd:3f:1e:90:4d:19:7b:a1:ba:fa:67:e9: 53:0c:64:05:6a:b1:0c:ca:07:4c:d1:76:4b:77:f5: bb:ff:32:22:78:37:46:cf:ea:09:c1:89:e4:21:6f: d6:9f:6a:07:c9:57:f0:4c:7b:d8:0e:7d:3e:70:47: a6:9c:e4:45:86:86:d5:86:a9:9a:41:52:29:a2:b3: 6f:8c:41:62:63:47:de:61:5d:25:a0:15:e8:c1:76: 92:ed:c3:03:52:37:02:c4:b8:f8:65:12:ae:28:b9: c1:ab:2e:f1:ec:7a:51:bc:c7:2a:36:f1:23:5f:1b: 3c:40:73:1f:67:e8:7e:85:5d:35:ac:91:50:25:79: ac:7d:63:0d:10:b7:d2:81:33:f0:ab:cc:87:1a:d2: 11:fe:47:ca:fd:5e:97:6d:d7:c9:68:6b:58:25:a5: 73:d8:70:22:57:eb:d0:dc:db:61:f4:ee:29:9b:b7: 27:57:c6:82:55:6e:df:6b:29:6f:bc:64:77:b9:90: 9e:a7:be:6f:45:f1:c4:1b:65:c1:c4:94:ef:32:82: 35:48:cb:8b:48:fe:2e:b8:cb:19:bf:fd:34:32:3c: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:F8:04:1E:C9:B8:52:34:FB:EE:3D:02:BA:E9:AB:AF:13:F9:F2 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:60:6e:ea:be:91:57:4e:44:41:07:f1:47:a9:39:4c:d9:87: 25:75:bb:a1:05:99:be:29:f4:e3:73:02:ba:01:eb:1f:cf:ab: 64:db:38:ab:ed:93:a6:c4:20:09:8c:bc:57:b7:a5:d1:ba:a2: ca:fc:4d:87:92:64:db:52:c0:4d:36:6a:74:48:20:19:b3:a6: e5:6a:7f:70:cf:f5:db:f3:92:9d:73:74:59:f8:78:e2:0e:f9: 1f:a0:66:08:10:3f:96:ce:2c:3b:fc:57:c4:18:99:0f:ba:cc: b8:3f:2f:fe:55:1d:b6:43:f1:91:d6:9d:6b:fa:3f:52:47:ba: ba:af:73:68:bb:3e:8f:ba:75:94:46:09:5e:b1:4b:94:d3:26: c3:b7:35:2d:f3:d2:ef:1e:d3:0a:11:84:2d:dd:ca:f6:5c:b3: cd:00:de:3b:c4:22:8c:11:e2:3a:ea:c0:a0:18:4a:37:4f:78: ba:02:28:a0:3b:41:37:ef:f4:07:05:17:dd:71:3e:fe:ba:fe: 88:60:22:b9:31:ca:04:f3:b4:9f:fd:20:47:44:5a:1a:54:59: 53:e3:47:03:64:e8:77:de:5e:99:7d:e1:83:6d:eb:5f:1c:38: 36:e1:b0:4c:15:df:0b:14:9b:01:df:57:4a:8c:2a:e9:ca:03: 15:67:ee:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwNDA0MTkyMjA1WhcNMjUwNDExMTkyMjA1WjAYMRYwFAYD VQQDEw02N2YwMzE1ZS1jNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmmbCIPvfwHKoOSA9v+W3vyeag778VWD02fGAeMWdCj9Px6QTRl7obr6Z+lT DGQFarEMygdM0XZLd/W7/zIieDdGz+oJwYnkIW/Wn2oHyVfwTHvYDn0+cEemnORF hobVhqmaQVIporNvjEFiY0feYV0loBXowXaS7cMDUjcCxLj4ZRKuKLnBqy7x7HpR vMcqNvEjXxs8QHMfZ+h+hV01rJFQJXmsfWMNELfSgTPwq8yHGtIR/kfK/V6XbdfJ aGtYJaVz2HAiV+vQ3Nth9O4pm7cnV8aCVW7faylvvGR3uZCep75vRfHEG2XBxJTv MoI1SMuLSP4uuMsZv/00MjzXbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+E+AQe ybhSNPvuPQK66auvE/nyMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAYG7qvpFXTkRBB/FHqTlM2YcldbuhBZm+KfTjcwK6Aesfz6tk2zir 7ZOmxCAJjLxXt6XRuqLK/E2HkmTbUsBNNmp0SCAZs6blan9wz/Xb85Kdc3RZ+Hji DvkfoGYIED+Wziw7/FfEGJkPusy4Py/+VR22Q/GR1p1r+j9SR7q6r3Nouz6PunWU RglesUuU0ybDtzUt89LvHtMKEYQt3cr2XLPNAN47xCKMEeI66sCgGEo3T3i6Aiig O0E37/QHBRfdcT7+uv6IYCK5McoE87Sf/SBHRFoaVFlT40cDZOh33l6ZfeGDbetf HDg24bBMFd8LFJsB31dKjCrpygMVZ+45 -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:56 2025 by rpki-client