$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: crAGIt1/rBjhr5aTJS0C33ZdZrGZvgH1495S72Drz9o= Subject key identifier: 5A:4C:95:CD:A2:FB:2F:0E:C9:A1:E9:E2:56:0E:CA:97:A9:9A:4B:5C Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 31 Signing time: Sat 05 Apr 2025 07:01:41 +0000 Manifest this update: Sat 05 Apr 2025 07:01:40 +0000 Manifest next update: Sat 12 Apr 2025 07:01:40 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: YEBOp2cMby3y12ANe1RRkrOKEc4ekYD5M2L0dOInxm8=) 2: 3D8B70B4E38D11EFBE901A46C4F9AE02.roa (hash: xtMQdylJd5ExIfku7HjSFZQ9NVkXk2zy2EL4rw3KqeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9 Validity Not Before: Apr 5 07:01:40 2025 GMT Not After : Apr 12 07:01:40 2025 GMT Subject: CN=67f0d555-11a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:bf:7e:0e:06:db:a1:a4:9b:fd:f9:be:03: 81:fc:c0:81:f6:1d:bb:35:bf:95:8a:39:45:da:50: 02:1c:94:99:6c:80:9d:5b:a4:39:8b:06:fb:a9:e3: 07:37:73:44:f9:9d:c5:46:4e:18:40:be:c1:00:1b: c0:a3:95:84:8e:8c:ba:24:0e:8b:64:47:f8:c6:a7: 85:aa:1a:d1:d4:74:54:00:8c:da:19:45:87:5a:96: 4f:02:10:a8:c8:3e:c3:13:89:fb:85:3e:9a:58:f5: 5c:11:26:a3:d2:b0:5b:ce:7c:76:6c:74:c5:7c:13: f2:6e:51:da:78:41:68:eb:41:a8:c9:3e:6c:20:f2: 00:3d:3f:13:2b:e1:cd:eb:e8:c5:61:c5:6f:67:52: 77:2a:11:14:46:f0:f4:dd:b4:8f:a2:2a:6d:c8:37: b6:d5:9c:21:38:9d:6b:9d:e8:c2:13:1d:f6:11:37: 82:b5:cb:51:64:57:49:28:c2:ba:09:f0:4a:21:21: ae:74:41:4d:28:4c:e4:f1:26:cd:5d:ae:58:d6:9d: 37:98:72:5e:dc:9d:31:04:95:59:1e:48:f6:58:94: a8:ab:58:60:33:f1:e2:27:00:54:d0:c7:01:e2:cb: ff:61:54:0b:b0:20:e2:31:f2:54:4b:ea:54:0f:2e: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:95:CD:A2:FB:2F:0E:C9:A1:E9:E2:56:0E:CA:97:A9:9A:4B:5C X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:52:ed:17:97:f2:1b:58:ec:b8:6d:d9:ff:77:5a:b0:fb:d8: f6:d9:2d:90:1b:5a:05:21:82:8e:cf:7e:a3:fb:f5:09:4b:cd: 79:80:ff:4b:2d:e6:b9:20:a7:a2:ad:d4:4d:30:36:49:de:27: fc:0e:d4:e3:e6:b0:72:bc:7d:f3:6b:3a:96:34:d2:02:7a:27: 4f:54:a5:da:15:ca:6f:13:ad:02:06:06:1a:57:c3:46:6b:95: db:b0:d4:e8:0a:07:44:18:4a:8f:eb:e8:c0:d2:da:aa:47:78: e1:30:08:7b:82:fc:ab:35:38:b6:15:fc:b4:2e:9b:11:88:36: 3a:54:8f:79:c5:dd:c8:b6:34:18:19:9a:fd:66:ac:ad:02:12: 27:09:b5:c0:13:0c:4d:e0:81:b6:99:88:5e:a1:37:5c:c5:2b: b6:fb:03:45:62:fa:24:dd:23:73:6b:fd:df:64:24:5b:51:80: 8e:d9:f6:eb:8d:be:e5:fe:38:b6:5e:08:68:98:60:41:4e:91: da:d7:a8:64:24:0a:cc:6f:57:38:73:06:52:14:62:c4:22:05: e7:12:48:74:d1:1b:57:43:4f:fa:7e:31:0f:89:a1:81:f6:a4: ba:fe:a0:23:68:dc:26:2b:da:72:98:92:1c:d9:2b:80:50:9b: 36:d9:83:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoOTY3Qjk3RDlFMzExMjUwRDgyOTQyRDI3RTRDNUY5MEQ5 ODEzODA1ODAeFw0yNTA0MDUwNzAxNDBaFw0yNTA0MTIwNzAxNDBaMBgxFjAUBgNV BAMTDTY3ZjBkNTU1LTExYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Kr9+DgbboaSb/fm+A4H8wIH2Hbs1v5WKOUXaUAIclJlsgJ1bpDmLBvup4wc3 c0T5ncVGThhAvsEAG8CjlYSOjLokDotkR/jGp4WqGtHUdFQAjNoZRYdalk8CEKjI PsMTifuFPppY9VwRJqPSsFvOfHZsdMV8E/JuUdp4QWjrQajJPmwg8gA9PxMr4c3r 6MVhxW9nUncqERRG8PTdtI+iKm3IN7bVnCE4nWud6MITHfYRN4K1y1FkV0kowroJ 8EohIa50QU0oTOTxJs1drljWnTeYcl7cnTEElVkeSPZYlKirWGAz8eInAFTQxwHi y/9hVAuwIOIx8lRL6lQPLqjBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWkyVzaL7 Lw7JoeniVg7Kl6maS1wwHwYDVR0jBBgwFoAUlnuX2eMRJQ2ClC0n5MX5DZgTgFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0I2MjJGQThBRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbG51WDJlTVJKUTJDbEMwbjVNWDVEWmdUZ0ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0I2MjJGQThBRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL2xudVgyZU1SSlEy Q2xDMG41TVg1RFpnVGdGZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9S7ReX8htY7Lht2f93WrD72PbZLZAbWgUhgo7PfqP79QlLzXmA/0st 5rkgp6Kt1E0wNkneJ/wO1OPmsHK8ffNrOpY00gJ6J09UpdoVym8TrQIGBhpXw0Zr lduw1OgKB0QYSo/r6MDS2qpHeOEwCHuC/Ks1OLYV/LQumxGINjpUj3nF3ci2NBgZ mv1mrK0CEicJtcATDE3ggbaZiF6hN1zFK7b7A0Vi+iTdI3Nr/d9kJFtRgI7Z9uuN vuX+OLZeCGiYYEFOkdrXqGQkCsxvVzhzBlIUYsQiBecSSHTRG1dDT/p+MQ+JoYH2 pLr+oCNo3CYr2nKYkhzZK4BQmzbZg0A= -----END CERTIFICATE-----Generated at Sun Apr 6 16:17:34 2025 by rpki-client