$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft File: lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json) Hash identifier: 0en1CxQpmBx1HAe1oeR893UnrUZXmA2i6ucOB+9lOgc= Subject key identifier: 7B:A7:08:D5:AF:4E:A1:0B:3D:52:02:06:02:0F:C9:6D:97:D0:75:E5 Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 Certificate issuer: /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft Manifest number: AB Signing time: Thu 03 Apr 2025 05:24:33 +0000 Manifest this update: Thu 03 Apr 2025 05:24:33 +0000 Manifest next update: Thu 10 Apr 2025 05:24:33 +0000 Files and hashes: 1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: QyhVEKK08YysTJpfXD5W3t4OHn6GWZzO3SQZI+JfBdY=) 2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: zjHSWjEAJbElSjtvgLzBTS12ZS/2A0buXGVs+XwBcIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F69 Validity Not Before: Apr 3 05:24:33 2025 GMT Not After : Apr 10 05:24:33 2025 GMT Subject: CN=67ee1b91-7713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:82:2f:45:55:e5:35:f2:32:31:3e:37:e6: c4:af:d9:31:e7:3c:b8:9d:f1:b0:b4:31:a5:c3:e4: d8:95:fe:a0:78:64:e0:3f:cd:b4:29:ea:d1:4d:46: f4:c4:06:45:40:40:10:24:43:3a:27:78:22:ee:37: 54:ae:9d:26:91:6a:88:a5:28:8f:a2:07:84:c5:f3: ce:46:45:2f:50:f7:b9:40:6e:e6:9e:5a:ec:64:18: 13:a7:55:dd:cc:9b:bd:e3:bf:dd:ca:b8:cd:b8:2b: 11:3f:90:1f:33:af:77:5f:20:90:1d:22:27:bd:d0: 14:37:55:b1:c1:80:d6:7c:35:82:82:c7:de:75:7e: b2:56:eb:8a:12:e7:bb:d1:01:14:3c:ae:9a:e5:03: 6a:32:16:5a:0e:84:38:1b:c7:eb:c0:11:59:9f:ff: 05:7e:57:15:00:84:90:68:a8:45:7c:23:4a:0d:4d: 8a:43:3f:f2:f7:46:a0:35:4c:75:5c:5b:ba:75:d4: ff:97:fd:9b:58:0d:94:4b:17:59:47:20:07:af:ec: 72:db:94:a1:4e:56:61:d1:a1:18:21:d3:30:b9:8a: 89:6f:c6:57:61:68:d8:2a:ea:ca:dc:e0:a2:4b:51: 33:06:00:71:21:82:15:47:57:38:93:95:cc:bb:8e: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A7:08:D5:AF:4E:A1:0B:3D:52:02:06:02:0F:C9:6D:97:D0:75:E5 X509v3 Authority Key Identifier: keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ed:a2:e6:be:67:12:24:5b:fe:e4:a6:d2:37:1b:df:db:e6: b7:d3:46:16:59:4d:3f:c5:55:fc:b3:d5:dc:ca:94:f8:3b:e5: e7:c6:9f:f6:61:fb:a3:72:db:ba:ec:b5:8c:5e:0b:6b:92:fb: 7a:bc:b8:cb:3f:f0:d1:98:fa:a8:9c:7d:62:c3:14:6e:62:58: 50:83:78:a4:fd:64:97:08:43:e6:66:24:3b:e2:cb:2c:9e:ad: 51:d4:6d:4c:e4:30:14:4b:d4:06:6d:3c:53:47:99:f8:af:a7: 79:18:25:21:e5:95:d9:9e:38:a6:c0:ec:db:35:6b:3a:86:8f: e9:d2:88:01:4b:9d:43:c1:36:b6:19:fb:fe:a0:24:13:fc:40: db:c7:b7:0d:c1:46:88:fa:23:d6:e0:86:23:4c:10:70:04:80: f2:cb:0b:69:6b:8f:ea:b7:23:f3:d9:01:88:b2:a2:cc:07:20: b6:b4:34:c2:63:0d:51:53:d8:3b:2e:5d:03:92:13:b4:4f:8b: 53:db:19:97:d7:a9:29:4f:e1:4f:9e:1f:0f:d9:4c:ad:d4:f2: 14:11:d8:ac:51:02:27:97:b2:1e:f1:ba:24:48:45:2e:2f:cc: a9:1f:fb:9d:2c:2b:af:44:17:7a:3b:1b:0f:88:c3:0e:f7:1f: dc:18:59:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNjkxMTAvBgNVBAUTKDk2QzYyQTA3OUQyRTdEOEU3QTk5NUQyMEY0MjI5RDgy NjkzOThFNjkwHhcNMjUwNDAzMDUyNDMzWhcNMjUwNDEwMDUyNDMzWjAYMRYwFAYD VQQDEw02N2VlMWI5MS03NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4maCL0VV5TXyMjE+N+bEr9kx5zy4nfGwtDGlw+TYlf6geGTgP820KerRTUb0 xAZFQEAQJEM6J3gi7jdUrp0mkWqIpSiPogeExfPORkUvUPe5QG7mnlrsZBgTp1Xd zJu947/dyrjNuCsRP5AfM693XyCQHSInvdAUN1WxwYDWfDWCgsfedX6yVuuKEue7 0QEUPK6a5QNqMhZaDoQ4G8frwBFZn/8FflcVAISQaKhFfCNKDU2KQz/y90agNUx1 XFu6ddT/l/2bWA2USxdZRyAHr+xy25ShTlZh0aEYIdMwuYqJb8ZXYWjYKurK3OCi S1EzBgBxIYIVR1c4k5XMu44JxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHunCNWv TqELPVICBgIPyW2X0HXlMB8GA1UdIwQYMBaAFJbGKgedLn2OepldIPQinYJpOY5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY2OS82NkEwQURBMjEx MjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZNTZtVjBnOUNLZGdtazVq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xzWXFCNTB1Zlk1Nm1WMGc5Q0tkZ21rNWptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY2OS82NkEwQURBMjExMjkxMUVGODA2MzVCMjdDNEY5QUUwMi9sc1lxQjUwdWZZ NTZtVjBnOUNLZGdtazVqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi7aLmvmcSJFv+5KbSNxvf2+a300YWWU0/xVX8s9XcypT4O+Xnxp/2 Yfujctu67LWMXgtrkvt6vLjLP/DRmPqonH1iwxRuYlhQg3ik/WSXCEPmZiQ74sss nq1R1G1M5DAUS9QGbTxTR5n4r6d5GCUh5ZXZnjimwOzbNWs6ho/p0ogBS51DwTa2 Gfv+oCQT/EDbx7cNwUaI+iPW4IYjTBBwBIDyywtpa4/qtyPz2QGIsqLMByC2tDTC Yw1RU9g7Ll0DkhO0T4tT2xmX16kpT+FPnh8P2Uyt1PIUEdisUQInl7Ie8bokSEUu L8ypH/udLCuvRBd6OxsPiMMO9x/cGFm4 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:23 2025 by rpki-client