$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: 4VzcRJqQpSvn48Q8hdhSNphJDO9RuPQCpB7VSCteaOY= Subject key identifier: 0A:04:8A:FD:3C:6B:05:A1:D6:59:DD:33:60:EC:34:53:55:09:71:B2 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: F6 Signing time: Thu 17 Apr 2025 04:05:58 +0000 Manifest this update: Thu 17 Apr 2025 04:05:57 +0000 Manifest next update: Thu 24 Apr 2025 04:05:57 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: RwYMK+PDByrvP36jzs6fszjdd3hVSsp34AUQAVmMef4=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: Apr 17 04:05:57 2025 GMT Not After : Apr 24 04:05:57 2025 GMT Subject: CN=68007e25-b4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:1a:18:a4:f7:a7:1b:60:37:fa:a4:2a:15: 55:ed:ab:44:ea:8d:2b:5d:5f:15:0c:67:0b:25:58: 5d:70:c0:aa:91:8c:04:81:74:a3:14:0a:d1:e9:33: 49:e7:fd:b3:04:52:21:21:95:62:e0:a1:de:bc:b0: e8:fe:43:37:4c:45:f6:90:ad:7e:a8:28:51:d2:e0: 95:a5:9f:e6:a7:4c:d3:69:96:45:7a:3c:66:cd:80: 58:8a:69:32:dd:34:f7:c2:4f:96:80:dc:68:fc:ea: 9f:55:ad:fb:c4:63:a1:94:1a:7c:99:d3:8b:ec:84: 9b:2d:a0:a2:d7:8c:28:46:c0:46:5b:cd:7f:53:f8: eb:ea:8c:e5:39:d0:77:33:3b:08:27:e0:3b:a4:9a: a3:51:e0:57:be:11:76:8c:b0:6e:54:45:12:f9:0e: 73:86:54:24:cd:99:9c:b7:0f:7d:6e:3d:bd:37:72: 0d:25:7b:03:e4:4d:aa:2c:f4:d8:46:a1:6f:e0:13: ba:90:66:3b:2d:47:47:e9:ef:1c:14:95:37:64:a5: 09:4c:fd:d7:61:38:f8:32:aa:69:da:fa:79:cb:a5: c4:10:27:ea:1f:a2:b7:31:de:4f:40:8a:2e:d3:41: 11:38:27:1b:de:1c:f7:79:3f:14:80:2d:95:fb:28: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:04:8A:FD:3C:6B:05:A1:D6:59:DD:33:60:EC:34:53:55:09:71:B2 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:02:f8:2b:91:66:01:7e:9c:46:7b:b1:7b:ec:76:75:15:ef: 20:d4:de:f3:f2:b8:c6:f2:0f:5a:f1:a2:82:18:f1:f1:62:bf: 57:a8:36:75:b8:df:34:eb:80:10:58:44:de:c4:76:db:61:ff: 4b:14:22:3b:10:d6:cd:c1:2d:1f:93:e9:59:c7:2c:bd:07:6f: 74:54:15:ea:28:05:3b:a1:07:57:d9:ef:c7:16:d8:58:11:b8: 77:74:61:ac:f5:70:51:e4:3d:36:c4:94:5d:96:89:e0:f6:5d: 34:30:31:0c:47:a6:f3:ac:f1:d3:2c:ca:70:06:97:95:2b:79: 27:fc:53:e7:c9:dd:84:ae:10:b8:80:49:5b:6a:16:87:24:7c: f3:5a:48:9e:3e:bf:87:fb:13:60:bd:39:c3:9d:16:55:85:97: 1d:3a:69:7e:42:97:01:73:72:83:7d:35:26:d4:68:99:00:01: f0:a0:9d:4d:56:20:51:7d:20:5a:dd:91:45:58:48:9d:3b:2d: a4:1e:ee:f0:5b:5a:c5:33:cb:4c:8d:44:5f:c4:c3:33:42:cf: 2c:e9:1c:6f:0c:cd:37:eb:63:b7:14:a1:c5:f4:c3:ab:da:40: c8:16:35:87:3c:25:16:00:7a:1b:89:f6:61:b5:e7:9f:19:dc: f5:0b:d0:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwNDE3MDQwNTU3WhcNMjUwNDI0MDQwNTU3WjAYMRYwFAYD VQQDEw02ODAwN2UyNS1iNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22AaGKT3pxtgN/qkKhVV7atE6o0rXV8VDGcLJVhdcMCqkYwEgXSjFArR6TNJ 5/2zBFIhIZVi4KHevLDo/kM3TEX2kK1+qChR0uCVpZ/mp0zTaZZFejxmzYBYimky 3TT3wk+WgNxo/OqfVa37xGOhlBp8mdOL7ISbLaCi14woRsBGW81/U/jr6ozlOdB3 MzsIJ+A7pJqjUeBXvhF2jLBuVEUS+Q5zhlQkzZmctw99bj29N3INJXsD5E2qLPTY RqFv4BO6kGY7LUdH6e8cFJU3ZKUJTP3XYTj4Mqpp2vp5y6XEECfqH6K3Md5PQIou 00EROCcb3hz3eT8UgC2V+ygbJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoEiv08 awWh1lndM2DsNFNVCXGyMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7AvgrkWYBfpxGe7F77HZ1Fe8g1N7z8rjG8g9a8aKCGPHxYr9XqDZ1 uN8064AQWETexHbbYf9LFCI7ENbNwS0fk+lZxyy9B290VBXqKAU7oQdX2e/HFthY Ebh3dGGs9XBR5D02xJRdlong9l00MDEMR6bzrPHTLMpwBpeVK3kn/FPnyd2ErhC4 gElbahaHJHzzWkiePr+H+xNgvTnDnRZVhZcdOml+QpcBc3KDfTUm1GiZAAHwoJ1N ViBRfSBa3ZFFWEidOy2kHu7wW1rFM8tMjURfxMMzQs8s6RxvDM0362O3FKHF9MOr 2kDIFjWHPCUWAHobifZhteefGdz1C9BD -----END CERTIFICATE-----Generated at Fri Apr 18 10:08:17 2025 by rpki-client