$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: Q7kV/Qa4+bS0BBbxKbXL9HIsEjrcPFR+nnOyQqeIdbk= Subject key identifier: 4D:D6:26:93:F5:05:6A:4B:8D:DC:7D:B1:0F:BB:E2:F3:92:93:15:99 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0217 Signing time: Thu 03 Apr 2025 01:59:57 +0000 Manifest this update: Thu 03 Apr 2025 01:59:56 +0000 Manifest next update: Thu 10 Apr 2025 01:59:56 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: Wv5X5lAgZz/GM2r/+IlqXVj5kBl85huHjlyqjoiJ/uE=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1 Validity Not Before: Apr 3 01:59:56 2025 GMT Not After : Apr 10 01:59:56 2025 GMT Subject: CN=67edeb9d-45c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:00:6e:65:ce:d7:21:00:56:26:5a:a9:5e: 06:cb:a8:7a:f8:1f:53:3a:3a:02:d1:dd:d2:25:d3: fd:a1:1a:60:a1:a8:cd:93:4a:1b:68:86:f1:e9:a6: 2b:a0:30:ed:4e:d4:29:ee:c5:b6:31:27:a5:c3:d9: 33:2d:9c:0d:1e:be:84:70:30:e7:12:4d:c3:30:f5: b6:a6:c0:be:eb:e4:11:fd:1d:0d:34:9a:cc:5a:8b: a7:f2:54:09:70:68:f3:ec:dc:fa:6b:df:82:52:0c: 97:6a:fb:da:8d:3f:38:b7:24:50:28:e6:b9:c8:1c: e8:a0:3e:0c:02:5e:a5:aa:e1:67:7c:2d:38:d0:ce: 4e:9a:d6:65:87:a7:95:24:eb:b7:83:10:ee:fe:b4: 49:d2:51:9b:b4:29:99:1f:cf:9c:57:6d:49:bf:43: 25:2a:99:3b:cf:c5:e3:96:6b:a8:68:24:cd:a4:35: c5:ca:fc:59:72:81:5f:54:70:f3:e1:c7:bc:02:db: 14:18:87:b3:a3:dd:9b:67:61:cb:65:53:2f:bc:24: d1:1e:b2:5b:4c:eb:14:0c:6b:ef:05:b7:f6:f0:e2: aa:15:06:f6:bd:3f:af:dc:72:46:9b:59:1e:5f:88: 2e:e0:41:2b:ef:e0:c8:b7:b9:8f:44:cd:7f:60:f7: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:26:93:F5:05:6A:4B:8D:DC:7D:B1:0F:BB:E2:F3:92:93:15:99 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:53:bb:42:f3:05:37:3b:e4:d0:67:2d:ae:53:1b:1c:3c:d8: 08:55:fc:c7:40:a0:3d:11:2e:ea:08:ea:81:f7:1a:c4:a1:6d: f9:f6:66:ea:6c:77:14:10:61:9c:45:bc:07:b1:e9:56:6a:57: de:bc:93:4b:c2:d6:12:a6:1f:cb:dc:21:04:d7:a8:02:0e:a4: cc:37:5f:a9:71:f2:82:d7:b0:36:78:03:56:0e:bc:c9:30:18: b8:c3:a7:35:f8:31:9d:00:c5:7b:de:18:9d:d9:e7:89:e2:64: 4a:f1:8e:8c:4b:fe:61:fa:70:95:f9:61:32:9e:09:81:2b:bb: 08:80:53:01:19:62:2d:9f:ba:21:1d:ac:bd:e2:81:f7:ed:67: 3e:0a:78:b8:b6:3c:49:08:a0:2f:41:cc:d2:a9:4e:d1:9b:30: 90:92:2f:0b:11:dc:b6:da:73:a1:a3:45:4b:66:9d:7f:c5:21: 45:d6:04:cd:31:e0:45:00:04:50:07:e6:c9:aa:3b:d3:8d:98: 06:0b:30:30:8b:b8:8e:6d:0a:e6:94:4a:3b:d5:63:4b:ff:d0: 3b:8f:91:6b:45:25:b1:ee:c0:fa:06:d0:21:ea:9e:9b:fc:6e: fb:76:2e:87:c4:67:0c:22:51:fe:8b:1b:28:30:92:cb:aa:0c: 69:8a:b6:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwNDAzMDE1OTU2WhcNMjUwNDEwMDE1OTU2WjAYMRYwFAYD VQQDEw02N2VkZWI5ZC00NWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkt4AbmXO1yEAViZaqV4Gy6h6+B9TOjoC0d3SJdP9oRpgoajNk0obaIbx6aYr oDDtTtQp7sW2MSelw9kzLZwNHr6EcDDnEk3DMPW2psC+6+QR/R0NNJrMWoun8lQJ cGjz7Nz6a9+CUgyXavvajT84tyRQKOa5yBzooD4MAl6lquFnfC040M5OmtZlh6eV JOu3gxDu/rRJ0lGbtCmZH8+cV21Jv0MlKpk7z8XjlmuoaCTNpDXFyvxZcoFfVHDz 4ce8AtsUGIezo92bZ2HLZVMvvCTRHrJbTOsUDGvvBbf28OKqFQb2vT+v3HJGm1ke X4gu4EEr7+DIt7mPRM1/YPc6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3WJpP1 BWpLjdx9sQ+74vOSkxWZMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaU7tC8wU3O+TQZy2uUxscPNgIVfzHQKA9ES7qCOqB9xrEoW359mbq bHcUEGGcRbwHselWalfevJNLwtYSph/L3CEE16gCDqTMN1+pcfKC17A2eANWDrzJ MBi4w6c1+DGdAMV73hid2eeJ4mRK8Y6MS/5h+nCV+WEyngmBK7sIgFMBGWItn7oh Hay94oH37Wc+Cni4tjxJCKAvQczSqU7RmzCQki8LEdy22nOho0VLZp1/xSFF1gTN MeBFAARQB+bJqjvTjZgGCzAwi7iObQrmlEo71WNL/9A7j5FrRSWx7sD6BtAh6p6b /G77di6HxGcMIlH+ixsoMJLLqgxpirad -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:58 2025 by rpki-client