$ rpki-client -vvf rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft File: lx1PfDIP2Y7P374A1z4CiBX-I_E.mft (raw, json) Hash identifier: rrmriz18OwR8+8DH7jkv8xhuS/RukZjn3GZf3KF0FF4= Subject key identifier: 49:02:4D:25:7C:10:4C:B0:3D:C7:15:16:82:46:0F:93:91:A1:7B:A7 Authority key identifier: 97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 Certificate issuer: /CN=A916588E/serialNumber=971D4F7C320FD98ECFDFBE00D73E028815FE23F1 Certificate serial: 254F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft Manifest number: 2540 Signing time: Fri 04 Apr 2025 15:47:51 +0000 Manifest this update: Fri 04 Apr 2025 15:47:50 +0000 Manifest next update: Fri 11 Apr 2025 15:47:50 +0000 Files and hashes: 1: lx1PfDIP2Y7P374A1z4CiBX-I_E.crl (hash: 6stEDT9gGGfsO7r3tB8mzl65mLKQsTeOyvVhaOf81g8=) 2: 77139F3054EF11E783C5A42EC4F9AE02.roa (hash: H+wCANBD5klfwreCxJGeJ4oz5YqLeKbiWBpEUR9/a3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9551 (0x254f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916588E Validity Not Before: Apr 4 15:47:50 2025 GMT Not After : Apr 11 15:47:50 2025 GMT Subject: CN=67efff26-06ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:8a:ce:95:ea:23:4c:9f:a7:2d:a0:54:62: 38:31:79:0f:6d:16:62:08:db:4d:d9:fd:b0:27:73: 6c:6e:a6:ea:63:bf:ca:24:c8:fa:cb:c7:6b:0d:76: be:1d:aa:06:38:fa:78:e2:35:34:2d:3c:bd:c2:3b: e4:80:a5:6b:72:9d:d5:83:91:72:3c:2a:0c:da:00: 27:d0:1a:a2:c5:a8:73:f0:b1:b8:ff:6d:94:00:62: b7:96:aa:7c:c3:c4:72:c8:5c:32:d9:af:ae:af:1e: 73:94:84:58:d3:83:d2:66:c7:26:5e:3b:d5:b0:95: 00:a2:cb:4c:c2:fa:36:d7:96:4c:0d:7a:9e:b6:8f: 1f:35:a9:c1:56:80:46:c6:40:25:86:30:70:0d:2a: 55:fa:0b:54:b5:ea:78:f7:44:62:6f:d8:69:c8:a4: bb:c2:69:af:d5:4e:4c:02:e9:a3:1f:7c:bb:3c:9f: 98:10:d3:78:13:c0:fe:7f:66:03:88:4c:e4:ea:1a: ab:1a:d4:37:c1:da:ef:0a:94:b6:02:94:e1:b7:1c: db:59:71:7b:e0:13:5b:15:cc:6a:15:33:b3:70:f6: cc:df:97:09:0e:f5:aa:fd:cf:15:c4:bd:fb:93:63: 43:96:fd:44:11:5d:0a:f3:6a:ff:d1:65:8b:1d:cd: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:4D:25:7C:10:4C:B0:3D:C7:15:16:82:46:0F:93:91:A1:7B:A7 X509v3 Authority Key Identifier: keyid:97:1D:4F:7C:32:0F:D9:8E:CF:DF:BE:00:D7:3E:02:88:15:FE:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lx1PfDIP2Y7P374A1z4CiBX-I_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916588E/DA8031B21A2911E5A178113AC4F9AE02/lx1PfDIP2Y7P374A1z4CiBX-I_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:54:1c:a2:4a:42:96:a2:ed:66:a0:1a:05:43:ed:83:10: 23:a1:30:cd:16:c1:54:10:41:74:b1:26:78:1a:d1:28:1d:24: 31:e7:cd:74:6c:59:8e:3e:9c:9f:5a:cb:e8:83:1e:33:69:fa: c3:a5:3e:f4:5e:12:e3:6e:cb:0e:a9:5e:da:7e:88:d2:b2:55: 5d:0d:56:1b:9b:93:76:63:f9:e3:a8:0f:76:dd:2c:56:be:9a: 75:90:55:39:78:68:95:f4:66:45:05:23:64:aa:94:0a:6e:5a: 6e:99:d3:6e:ed:91:13:e6:4d:38:8d:93:af:10:71:6c:83:32: 32:af:6d:fc:2e:b1:66:01:e1:d1:08:fb:50:32:5e:45:b2:37: 00:0f:56:bb:50:97:82:1e:df:d8:46:46:cf:b3:25:fd:a4:1c: ea:25:b4:24:0e:f7:11:4f:c6:99:34:ab:c7:7c:6f:61:f8:52: 6a:41:6f:27:78:62:b8:04:4e:25:23:c1:53:7e:32:e1:ec:1f: 69:39:0c:50:d5:8e:13:52:9d:a4:28:d8:00:96:16:e6:70:fc: 75:09:4e:2c:d7:2c:e6:c0:b8:4e:62:ae:79:08:21:cf:e2:d7: c5:ae:ca:22:b3:41:31:c5:8e:e4:40:6a:b1:b0:e5:83:d1:3e: 9e:98:36:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4OEUxMTAvBgNVBAUTKDk3MUQ0RjdDMzIwRkQ5OEVDRkRGQkUwMEQ3M0UwMjg4 MTVGRTIzRjEwHhcNMjUwNDA0MTU0NzUwWhcNMjUwNDExMTU0NzUwWjAYMRYwFAYD VQQDEw02N2VmZmYyNi0wNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1SKzpXqI0yfpy2gVGI4MXkPbRZiCNtN2f2wJ3NsbqbqY7/KJMj6y8drDXa+ HaoGOPp44jU0LTy9wjvkgKVrcp3Vg5FyPCoM2gAn0Bqixahz8LG4/22UAGK3lqp8 w8RyyFwy2a+urx5zlIRY04PSZscmXjvVsJUAostMwvo215ZMDXqeto8fNanBVoBG xkAlhjBwDSpV+gtUtep490Rib9hpyKS7wmmv1U5MAumjH3y7PJ+YENN4E8D+f2YD iEzk6hqrGtQ3wdrvCpS2ApThtxzbWXF74BNbFcxqFTOzcPbM35cJDvWq/c8VxL37 k2NDlv1EEV0K82r/0WWLHc0UFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkCTSV8 EEywPccVFoJGD5ORoXunMB8GA1UdIwQYMBaAFJcdT3wyD9mOz9++ANc+AogV/iPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTg4RS9EQTgwMzFCMjFB MjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZN1AzNzRBMXo0Q2lCWC1J X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x4MVBmRElQMlk3UDM3NEExejRDaUJYLUlfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTg4RS9EQTgwMzFCMjFBMjkxMUU1QTE3ODExM0FDNEY5QUUwMi9seDFQZkRJUDJZ N1AzNzRBMXo0Q2lCWC1JX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA24FQcokpClqLtZqAaBUPtgxAjoTDNFsFUEEF0sSZ4GtEoHSQx5810 bFmOPpyfWsvogx4zafrDpT70XhLjbssOqV7afojSslVdDVYbm5N2Y/njqA923SxW vpp1kFU5eGiV9GZFBSNkqpQKblpumdNu7ZET5k04jZOvEHFsgzIyr238LrFmAeHR CPtQMl5FsjcAD1a7UJeCHt/YRkbPsyX9pBzqJbQkDvcRT8aZNKvHfG9h+FJqQW8n eGK4BE4lI8FTfjLh7B9pOQxQ1Y4TUp2kKNgAlhbmcPx1CU4s1yzmwLhOYq55CCHP 4tfFrsois0ExxY7kQGqxsOWD0T6emDaV -----END CERTIFICATE-----Generated at Sat Apr 5 10:05:31 2025 by rpki-client