$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: C7uHHOGnwp3sAavaUEKuRX4nJaQt29EUezrpzEmQPfU= Subject key identifier: DC:0F:13:08:F4:2F:27:67:53:6E:7D:37:20:E6:AB:AF:92:B7:FC:20 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 0291 Signing time: Thu 03 Apr 2025 01:34:44 +0000 Manifest this update: Thu 03 Apr 2025 01:34:43 +0000 Manifest next update: Thu 10 Apr 2025 01:34:43 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: jWZAeqsBvgYzktvPLzeYB9R1wfbxGTXmKwoTOq68ZTY=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2 Validity Not Before: Apr 3 01:34:43 2025 GMT Not After : Apr 10 01:34:43 2025 GMT Subject: CN=67ede5b3-4520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:08:97:8b:d3:9d:11:5b:3a:ea:82:01:98: 72:96:88:26:43:b1:ec:e0:7c:9f:a6:a5:b4:6b:3d: 4b:85:5f:28:d3:a6:5e:2f:34:e7:0f:40:79:fa:d0: f8:15:4c:bd:b8:85:62:e6:dd:ee:95:e9:13:76:e4: 7e:70:87:75:95:07:7c:8a:f4:a3:d2:2d:6d:07:8d: 69:e0:be:e6:27:69:80:e1:71:ad:8f:1e:83:2a:09: dc:2a:67:52:82:06:46:4b:2f:17:ff:2e:c6:83:5b: 2e:ad:c3:83:5c:45:2c:c9:93:af:40:64:b9:f8:24: a6:de:b8:d4:30:2c:75:7a:6e:bf:f6:38:e5:ba:3f: ec:b0:d4:41:f3:10:41:3f:28:68:ed:86:81:45:3c: 9f:29:3f:e7:e9:f6:05:b6:85:1b:2b:e0:bc:cd:d4: 32:1f:d0:7f:d7:7a:dc:40:cc:b9:c0:1a:b4:16:d1: 7a:ad:9d:83:9a:af:ce:dc:c6:43:74:b3:a9:c4:ca: d7:bc:49:29:a7:69:6a:94:e8:af:0e:5c:a6:63:7d: 6d:bf:62:f8:cb:2b:6d:fa:d3:d0:a4:40:c3:50:b7: 40:f3:67:a4:d5:15:f9:ad:86:cc:4d:ba:9f:9b:8c: 8c:f4:73:34:c0:2a:87:0b:8e:aa:8c:aa:5a:4d:b7: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0F:13:08:F4:2F:27:67:53:6E:7D:37:20:E6:AB:AF:92:B7:FC:20 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b8:2b:c1:00:e3:d0:5e:32:49:cf:ac:a4:6d:2b:ba:11:01: 6e:e0:f4:b2:c1:a3:a8:7a:dc:85:8b:d6:0d:9d:b2:4a:58:5a: be:08:11:17:26:7d:29:a9:8d:47:eb:58:e2:8a:f9:6e:44:58: ce:85:f1:bb:9a:16:b3:52:39:33:b9:bd:43:6b:a1:e2:52:1f: 2c:b7:32:a0:e1:22:79:cd:55:d3:7f:de:06:42:98:f1:20:dc: 90:60:ed:24:65:f1:85:70:38:6a:6c:2b:fd:fa:8d:f6:20:93: c8:fe:f1:50:56:d5:59:b3:ae:48:19:0b:fb:a1:dc:13:12:ed: 48:62:62:05:40:df:85:72:49:90:33:e3:01:5d:06:4e:8d:1b: e7:67:7d:e5:72:79:f6:c7:4c:45:b8:c3:1a:94:a7:84:23:84: e0:32:61:0f:db:ab:74:99:31:e1:fe:38:b3:6a:d1:4a:eb:bf: d9:74:57:04:01:da:c4:b0:4c:9f:79:6d:d4:61:8f:a8:d1:2e: 10:f4:bf:48:9c:7d:6d:18:96:db:9b:6c:a6:3c:12:5b:6f:2a: fc:82:b9:da:f7:b9:c7:a9:ed:c5:71:b6:2e:94:2b:45:e5:f3: 37:04:92:84:ec:c6:d8:43:10:03:83:5f:c6:64:bf:7f:39:21: 57:ae:7a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwNDAzMDEzNDQzWhcNMjUwNDEwMDEzNDQzWjAYMRYwFAYD VQQDEw02N2VkZTViMy00NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWsIl4vTnRFbOuqCAZhylogmQ7Hs4HyfpqW0az1LhV8o06ZeLzTnD0B5+tD4 FUy9uIVi5t3ulekTduR+cId1lQd8ivSj0i1tB41p4L7mJ2mA4XGtjx6DKgncKmdS ggZGSy8X/y7Gg1surcODXEUsyZOvQGS5+CSm3rjUMCx1em6/9jjluj/ssNRB8xBB Pyho7YaBRTyfKT/n6fYFtoUbK+C8zdQyH9B/13rcQMy5wBq0FtF6rZ2Dmq/O3MZD dLOpxMrXvEkpp2lqlOivDlymY31tv2L4yytt+tPQpEDDULdA82ek1RX5rYbMTbqf m4yM9HM0wCqHC46qjKpaTbeAmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwPEwj0 LydnU259NyDmq6+St/wgMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBauCvBAOPQXjJJz6ykbSu6EQFu4PSywaOoetyFi9YNnbJKWFq+CBEX Jn0pqY1H61jiivluRFjOhfG7mhazUjkzub1Da6HiUh8stzKg4SJ5zVXTf94GQpjx INyQYO0kZfGFcDhqbCv9+o32IJPI/vFQVtVZs65IGQv7odwTEu1IYmIFQN+FckmQ M+MBXQZOjRvnZ33lcnn2x0xFuMMalKeEI4TgMmEP26t0mTHh/jizatFK67/ZdFcE AdrEsEyfeW3UYY+o0S4Q9L9InH1tGJbbm2ymPBJbbyr8grna97nHqe3FcbYulCtF 5fM3BJKE7MbYQxADg1/GZL9/OSFXrnpt -----END CERTIFICATE-----Generated at Fri Apr 4 21:14:57 2025 by rpki-client