$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft File: LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json) Hash identifier: 1lfChqOtlnZy2aH28XBF3v6+8kQX2xfyAV/EEIcVCyo= Subject key identifier: 9D:56:63:51:62:BC:83:86:95:E9:3D:AE:BA:69:3B:0B:1F:B9:56:D3 Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 Certificate issuer: /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft Manifest number: A8 Signing time: Thu 03 Apr 2025 05:26:13 +0000 Manifest this update: Thu 03 Apr 2025 05:26:13 +0000 Manifest next update: Thu 10 Apr 2025 05:26:13 +0000 Files and hashes: 1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: etxay1OmCvqK3p3nL8SDaIWXEaX9foeodgY0tT8Xxg8=) 2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: IQK6AsXx68/8Lqy99fcdojdDHrbfXEtCf8HvhW7NS3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E968 Validity Not Before: Apr 3 05:26:13 2025 GMT Not After : Apr 10 05:26:13 2025 GMT Subject: CN=67ee1bf5-fbb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:21:3f:d3:59:fc:04:8b:09:98:8f:48:f8: 78:ee:50:3f:8e:e5:b0:0d:f6:b5:c8:03:f3:ee:c3: 89:f8:a2:8f:08:d4:a5:6a:22:89:f7:45:20:83:a7: ec:c1:60:f7:df:b8:3b:6c:bc:d8:92:f5:90:52:df: 7c:38:9e:cf:5c:69:48:8e:a1:7d:3f:8e:1f:cc:58: af:7b:34:72:2d:b3:2c:ba:8e:ea:85:a8:8c:bf:9a: bc:7b:9a:c3:f7:d2:8b:fe:70:9a:a4:5a:23:b9:1c: db:2b:4e:aa:1a:96:20:c8:95:64:f0:be:db:a3:03: 2c:1d:54:53:c5:08:4b:8d:4d:39:56:24:c2:a8:1d: d4:67:42:b4:67:43:5e:14:14:b1:81:fd:1c:45:f8: 3c:73:aa:2c:a8:bf:6c:6e:d4:d9:76:b1:48:69:0b: 84:21:bf:5f:b8:a4:5c:04:98:d8:15:c2:ac:dc:6a: f5:68:ca:67:fd:bb:0a:35:8a:ab:60:70:81:f5:ae: 9f:f0:63:bc:db:02:02:26:ff:12:fe:f0:79:b1:c0: 6a:07:ed:74:4e:5a:5e:3d:42:60:d3:53:10:72:3d: 22:68:cf:83:6c:60:22:81:56:96:42:5a:a9:71:ae: a0:59:40:67:8e:9f:da:8b:f3:61:76:a3:35:94:69: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:56:63:51:62:BC:83:86:95:E9:3D:AE:BA:69:3B:0B:1F:B9:56:D3 X509v3 Authority Key Identifier: keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:bf:ba:1a:0a:d8:ee:fa:dc:97:1e:6b:03:56:0a:f1:7a: e4:68:5c:bc:c6:79:6f:eb:d4:12:ab:e4:2f:8f:8f:8e:95:7e: e8:b4:67:c2:d9:f0:90:86:eb:07:e8:a6:03:21:53:22:fc:33: 4f:82:77:d5:7c:b4:1d:6b:0c:27:61:1c:89:5f:75:4e:80:31: 68:2c:78:ea:3e:a4:b1:54:77:b2:b2:9a:df:a0:07:87:3a:60: cb:d4:6e:05:d0:a8:38:96:7c:66:50:34:b8:6b:77:38:a3:14: 99:68:19:97:55:4d:5b:13:54:ef:2e:ea:08:b9:93:95:bc:bb: c5:a9:72:b2:46:ec:c5:1d:e9:d4:89:a3:60:95:3f:39:9b:94: bd:34:6a:00:11:ee:96:81:51:43:c5:08:14:01:07:ff:2e:79: ac:54:4a:81:4c:9c:62:d2:2a:15:43:dd:4f:f7:3b:c4:8d:dd: 97:7f:e3:2e:c6:b7:3b:a5:58:8a:33:be:f9:c3:50:51:54:cd: 90:09:e8:bb:79:0a:eb:ed:fd:ad:ac:c0:16:b9:fd:20:4f:a3: 2e:0b:28:6c:3f:f2:a8:6f:b9:09:ef:3a:53:f7:3a:78:0c:c1: f3:93:9d:4b:4a:a5:c0:dc:64:41:6f:dd:65:4a:67:6f:c1:51: 5f:b7:d1:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NjgxMTAvBgNVBAUTKDJFMDUyQjM3MDExMzMxMkFBOTg4M0Q5N0VEQUQyMzBD QTE2NjIxNjIwHhcNMjUwNDAzMDUyNjEzWhcNMjUwNDEwMDUyNjEzWjAYMRYwFAYD VQQDEw02N2VlMWJmNS1mYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOYhP9NZ/ASLCZiPSPh47lA/juWwDfa1yAPz7sOJ+KKPCNSlaiKJ90Ugg6fs wWD337g7bLzYkvWQUt98OJ7PXGlIjqF9P44fzFivezRyLbMsuo7qhaiMv5q8e5rD 99KL/nCapFojuRzbK06qGpYgyJVk8L7bowMsHVRTxQhLjU05ViTCqB3UZ0K0Z0Ne FBSxgf0cRfg8c6osqL9sbtTZdrFIaQuEIb9fuKRcBJjYFcKs3Gr1aMpn/bsKNYqr YHCB9a6f8GO82wICJv8S/vB5scBqB+10TlpePUJg01MQcj0iaM+DbGAigVaWQlqp ca6gWUBnjp/ai/NhdqM1lGkhYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1WY1Fi vIOGlek9rrppOwsfuVbTMB8GA1UdIwQYMBaAFC4FKzcBEzEqqYg9l+2tIwyhZiFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk2OC8yQkEyRUMwRTE2 OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1TcXBpRDJYN2EwakRLRm1J V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnVXJOd0VUTVNxcGlEMlg3YTBqREtGbUlXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk2OC8yQkEyRUMwRTE2OTkxMUVGQkE0MEM5MkFDNEY5QUUwMi9MZ1VyTndFVE1T cXBpRDJYN2EwakRLRm1JV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6TL+6GgrY7vrclx5rA1YK8XrkaFy8xnlv69QSq+Qvj4+OlX7otGfC 2fCQhusH6KYDIVMi/DNPgnfVfLQdawwnYRyJX3VOgDFoLHjqPqSxVHeysprfoAeH OmDL1G4F0Kg4lnxmUDS4a3c4oxSZaBmXVU1bE1TvLuoIuZOVvLvFqXKyRuzFHenU iaNglT85m5S9NGoAEe6WgVFDxQgUAQf/LnmsVEqBTJxi0ioVQ91P9zvEjd2Xf+Mu xrc7pViKM775w1BRVM2QCei7eQrr7f2trMAWuf0gT6MuCyhsP/Kob7kJ7zpT9zp4 DMHzk51LSqXA3GRBb91lSmdvwVFft9HK -----END CERTIFICATE-----Generated at Fri Apr 4 21:09:21 2025 by rpki-client