$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: c10HDCLl/nN5u83m2rmeuLOdQ1NtLQ3e33ztqYe107A= Subject key identifier: A4:C8:79:EA:2F:EE:D6:DF:66:C4:A3:93:B2:D8:B1:B6:1B:8E:27:0D Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 0463 Signing time: Sat 29 Mar 2025 00:25:34 +0000 Manifest this update: Sat 29 Mar 2025 00:25:34 +0000 Manifest next update: Sat 05 Apr 2025 00:25:34 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: M3qBUK65Qwb7/NGT6PxfcseeYNygpu6bfvs4Q3WnPOA=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9 Validity Not Before: Mar 29 00:25:34 2025 GMT Not After : Apr 5 00:25:34 2025 GMT Subject: CN=67e73dfe-1e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:66:24:d0:18:07:81:5c:b5:c4:50:51:a1: ed:8d:da:e6:ec:70:9f:0b:ec:4d:e4:fd:84:26:a3: d4:a9:d1:ce:75:1a:57:db:6e:af:eb:94:17:74:79: 2d:53:e2:4f:9d:9b:52:78:ca:ca:46:35:46:e0:29: e0:e6:71:f7:57:be:62:0c:61:57:50:44:05:ab:2e: db:41:4d:28:bd:30:16:fb:c4:64:5f:15:52:a9:6c: d4:34:32:d6:a2:a7:22:ea:5b:50:09:21:5a:f5:68: 30:92:ca:d0:8a:0f:64:cf:ac:e5:50:b2:57:49:da: d0:24:15:be:7c:87:b5:d8:25:bf:eb:15:02:e2:6c: f6:77:a1:23:06:70:fc:14:75:41:7b:33:67:81:7b: 51:a8:1f:5b:f1:90:07:55:d6:14:3d:98:2a:15:49: 3e:17:89:4c:0f:e0:4f:03:1d:1d:5b:2e:e1:fb:a1: 31:d8:5b:0a:3c:09:d2:db:be:35:06:ef:8f:bb:7a: a0:e4:41:ce:6c:f3:aa:09:28:99:7e:1e:d9:9f:79: e3:e9:5c:75:5c:74:3e:5e:e7:d6:01:7e:38:d9:43: 24:99:1c:7f:37:06:fb:c2:55:bf:0a:ba:67:db:91: a3:d0:5a:2c:17:ff:60:2d:9a:ef:4b:c0:a6:f0:7f: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:79:EA:2F:EE:D6:DF:66:C4:A3:93:B2:D8:B1:B6:1B:8E:27:0D X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:46:ea:0e:30:f3:51:49:43:db:21:90:43:e7:b0:3e:5a:22: 0a:21:12:17:2a:3f:75:32:3d:8f:73:d3:83:00:88:4a:2b:14: a8:06:85:cb:05:09:b2:32:46:f3:7b:49:d6:27:9a:11:2a:5f: 5e:d0:37:17:d4:b5:b7:9b:08:ba:c5:61:1c:c8:cb:6b:bb:ed: 43:9c:be:cd:71:bb:dd:e4:f7:79:33:20:53:8e:d1:c8:91:6c: 78:da:38:28:4c:e4:e1:fd:83:b1:37:5a:af:7a:e7:2f:8b:30: 0b:37:8e:61:99:2c:8f:f3:57:91:2d:0a:2c:a3:d6:b8:70:2e: a0:cb:d2:64:f5:c0:3e:ef:29:bc:93:9b:d7:10:53:83:f8:69: ac:a4:fc:a9:2a:0c:ac:02:a0:82:df:de:5d:d5:da:a0:cc:8a: 73:f5:73:0b:8d:e3:fb:95:67:6f:6b:68:e3:81:e2:62:4b:6a: a2:2e:33:58:51:3b:05:1f:69:d8:d0:4e:e3:38:5d:48:e6:aa: a5:1d:3f:6c:03:4b:3d:30:aa:43:81:f9:78:fb:ad:a3:a4:46: b8:cf:cd:9e:6d:28:4f:87:fb:f5:51:ef:9e:17:5b:31:7c:39: c8:06:9a:58:3e:09:c3:38:ae:49:ff:7d:d3:7e:64:1a:94:de: 53:2c:ba:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUwMzI5MDAyNTM0WhcNMjUwNDA1MDAyNTM0WjAYMRYwFAYD VQQDEw02N2U3M2RmZS0xZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySxmJNAYB4FctcRQUaHtjdrm7HCfC+xN5P2EJqPUqdHOdRpX226v65QXdHkt U+JPnZtSeMrKRjVG4Cng5nH3V75iDGFXUEQFqy7bQU0ovTAW+8RkXxVSqWzUNDLW oqci6ltQCSFa9WgwksrQig9kz6zlULJXSdrQJBW+fIe12CW/6xUC4mz2d6EjBnD8 FHVBezNngXtRqB9b8ZAHVdYUPZgqFUk+F4lMD+BPAx0dWy7h+6Ex2FsKPAnS2741 Bu+Pu3qg5EHObPOqCSiZfh7Zn3nj6Vx1XHQ+XufWAX442UMkmRx/Nwb7wlW/Crpn 25Gj0FosF/9gLZrvS8Cm8H8BYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTIeeov 7tbfZsSjk7LYsbYbjicNMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6RuoOMPNRSUPbIZBD57A+WiIKIRIXKj91Mj2Pc9ODAIhKKxSoBoXL BQmyMkbze0nWJ5oRKl9e0DcX1LW3mwi6xWEcyMtru+1DnL7Ncbvd5Pd5MyBTjtHI kWx42jgoTOTh/YOxN1qveucvizALN45hmSyP81eRLQoso9a4cC6gy9Jk9cA+7ym8 k5vXEFOD+GmspPypKgysAqCC395d1dqgzIpz9XMLjeP7lWdva2jjgeJiS2qiLjNY UTsFH2nY0E7jOF1I5qqlHT9sA0s9MKpDgfl4+62jpEa4z82ebShPh/v1Ue+eF1sx fDnIBppYPgnDOK5J/33TfmQalN5TLLr7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:06 2025 by rpki-client