$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft File: LT7zlg0opT_PYOmNAXAy6Sjqezk.mft (raw, json) Hash identifier: CTXkujTlrKtdxf+JfYPGHYnLBel5F4puizgSJm4cJh8= Subject key identifier: 45:02:CA:D2:CB:1B:48:3E:24:6C:17:C8:D9:DA:19:F2:F6:8B:DF:65 Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft Manifest number: 06FE Signing time: Wed 02 Apr 2025 21:56:59 +0000 Manifest this update: Wed 02 Apr 2025 21:56:58 +0000 Manifest next update: Wed 09 Apr 2025 21:56:58 +0000 Files and hashes: 1: LT7zlg0opT_PYOmNAXAy6Sjqezk.crl (hash: nnGJpF00y1jxyAM9dreiSstjF35LIQkquyQ7HCaqpFs=) 2: 1C017B163B3811EBB3FC7A77C4F9AE02.roa (hash: if2Ty+xI9lsixRtkfYJ2DrsSLWOZeEaMUkbkKLpKeBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167278 Validity Not Before: Apr 2 21:56:58 2025 GMT Not After : Apr 9 21:56:58 2025 GMT Subject: CN=67edb2ab-3bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:78:e3:fb:81:1d:95:05:ca:ad:48:5d:52: 2c:1e:47:35:3d:aa:cc:ab:cd:2b:d8:3a:9f:83:13: 1f:35:0e:cf:d0:4d:3d:1a:80:3b:f6:c8:b3:5c:55: bf:58:22:ba:96:b3:a6:5d:23:0e:be:ae:a1:a7:e2: 84:90:e9:64:cf:0d:a0:c1:c7:df:7f:4e:07:e1:4a: 92:2a:29:d6:7c:dc:6c:a8:c5:85:ff:32:bb:64:63: 58:8e:4d:15:ad:27:35:9e:b2:3b:a3:9f:ca:45:a7: 53:05:57:38:2a:00:c3:4e:0a:1a:e4:e6:b1:91:82: 9f:27:49:b1:fd:81:07:7f:ba:65:62:de:77:e2:82: 5b:90:9d:a0:6c:8b:53:38:fa:8e:da:72:09:26:a8: f5:6c:dd:e8:84:8a:a8:53:82:1b:69:28:ef:b9:77: 1d:fe:db:bc:af:3c:ba:55:96:62:c2:20:37:60:b2: 2a:d5:fc:1d:c8:5e:67:61:33:35:72:b0:84:b2:26: c0:31:5f:d0:58:54:ff:d0:4d:88:72:6d:46:31:7b: 16:2f:e2:4e:2c:7c:e1:51:79:e6:b3:dd:5d:80:3d: 24:d8:57:53:27:d4:ee:1b:5c:34:de:ac:f7:5e:98: 8c:41:b4:e6:67:b4:0c:25:93:1f:be:72:c9:6e:d9: 6a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:CA:D2:CB:1B:48:3E:24:6C:17:C8:D9:DA:19:F2:F6:8B:DF:65 X509v3 Authority Key Identifier: keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a5:f2:b5:12:8f:44:3b:31:95:51:00:7b:9d:84:f0:13:d2: 5f:76:de:c7:ea:91:68:05:ef:3e:13:bb:18:0f:42:2e:b6:f2: 1f:d2:12:72:ad:92:48:dd:f7:30:d9:fa:a5:4d:46:35:ea:76: b5:2b:d7:e7:c9:8c:da:fa:20:44:65:8b:65:17:76:4c:35:cb: 82:8d:20:43:62:1c:5f:73:12:fe:cf:07:db:d7:6a:9f:3c:b7: cb:70:5b:76:be:11:b5:a6:d0:3f:1b:79:a3:3b:f5:62:e0:57: 3a:93:c2:de:19:9f:b2:de:e9:d4:c4:f4:b4:39:d7:eb:4b:ca: e1:01:38:6a:c1:78:14:55:96:81:57:7e:75:ac:e0:f5:09:68: a4:85:ae:55:63:b9:6a:e7:72:b1:64:15:7c:5f:bd:39:04:45: e6:52:5b:16:e8:fa:70:b4:aa:fe:01:e5:7b:c3:c4:a5:7c:66: 06:0b:45:45:15:27:64:ba:30:96:ed:99:cf:5a:60:2e:fa:c7: 83:8c:9d:5d:81:69:e2:d6:86:1c:ba:c4:0b:d4:49:f9:b9:f4: c3:72:2d:04:80:41:c2:de:bb:af:22:71:62:da:d5:57:09:cb: 66:14:db:94:aa:bd:59:67:7f:61:af:80:8f:fa:e4:b0:9e:ec: df:b2:52:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5 MjhFQTdCMzkwHhcNMjUwNDAyMjE1NjU4WhcNMjUwNDA5MjE1NjU4WjAYMRYwFAYD VQQDEw02N2VkYjJhYi0zYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFp44/uBHZUFyq1IXVIsHkc1ParMq80r2DqfgxMfNQ7P0E09GoA79sizXFW/ WCK6lrOmXSMOvq6hp+KEkOlkzw2gwcfff04H4UqSKinWfNxsqMWF/zK7ZGNYjk0V rSc1nrI7o5/KRadTBVc4KgDDTgoa5OaxkYKfJ0mx/YEHf7plYt534oJbkJ2gbItT OPqO2nIJJqj1bN3ohIqoU4IbaSjvuXcd/tu8rzy6VZZiwiA3YLIq1fwdyF5nYTM1 crCEsibAMV/QWFT/0E2Icm1GMXsWL+JOLHzhUXnms91dgD0k2FdTJ9TuG1w03qz3 XpiMQbTmZ7QMJZMfvnLJbtlq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUCytLL G0g+JGwXyNnaGfL2i99lMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzI3OC8yQUUwQUQ2MDNCMzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BU X1BZT21OQVhBeTZTanFlemsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCspfK1Eo9EOzGVUQB7nYTwE9Jfdt7H6pFoBe8+E7sYD0IutvIf0hJy rZJI3fcw2fqlTUY16na1K9fnyYza+iBEZYtlF3ZMNcuCjSBDYhxfcxL+zwfb12qf PLfLcFt2vhG1ptA/G3mjO/Vi4Fc6k8LeGZ+y3unUxPS0OdfrS8rhAThqwXgUVZaB V351rOD1CWikha5VY7lq53KxZBV8X705BEXmUlsW6PpwtKr+AeV7w8SlfGYGC0VF FSdkujCW7ZnPWmAu+seDjJ1dgWni1oYcusQL1En5ufTDci0EgEHC3ruvInFi2tVX CctmFNuUqr1ZZ39hr4CP+uSwnuzfslJj -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:08 2025 by rpki-client