$ rpki-client -vvf rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft File: LV39FidW7eBIu98_mMTBWrxfvZg.mft (raw, json) Hash identifier: d4OCb/tt0tcxpuIedxmsglFLqbAwKdYkSog7BgQIX44= Subject key identifier: 32:76:71:95:BB:35:75:DD:49:BB:FE:D4:B1:E4:0D:C5:88:4D:4A:22 Authority key identifier: 2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98 Certificate issuer: /CN=A918A626/serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft Manifest number: 018E Signing time: Mon 21 Apr 2025 02:27:57 +0000 Manifest this update: Mon 21 Apr 2025 02:27:56 +0000 Manifest next update: Mon 28 Apr 2025 02:27:56 +0000 Files and hashes: 1: LV39FidW7eBIu98_mMTBWrxfvZg.crl (hash: 5ztUp/yAlj7DpfQLY0T961poqfgXW4w2S29eswixkAw=) 2: 9554A1DABC9311ED9A95EC18C4F9AE02.roa (hash: tdiT5Pj4H5/sdu2riOGkLRsNazThR/Jtxol14iAExBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A626, serialNumber=2D5DFD162756EDE048BBDF3F98C4C15ABC5FBD98 Validity Not Before: Apr 21 02:27:56 2025 GMT Not After : Apr 28 02:27:56 2025 GMT Subject: CN=6805ad2d-8d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:b3:dd:a3:3e:c1:8f:85:1f:8b:16:37:15: 27:b7:03:df:7f:e8:f0:2a:78:e0:62:1f:e1:86:47: 5a:97:d2:2f:15:78:e0:cb:59:a9:e9:d2:07:04:0d: fd:d4:10:bb:37:34:10:c7:fb:84:9b:14:fa:3c:c6: 28:6a:b6:cf:46:dc:41:d8:c1:b5:9e:b9:6c:88:6a: 78:78:af:e9:c9:6f:75:8d:db:e0:f1:63:16:d0:a3: 9e:bf:84:c8:66:c1:97:90:52:a6:08:65:86:64:38: 67:b5:a6:0c:5c:29:03:2a:4a:15:46:68:04:69:74: c5:91:db:8a:34:b0:a3:fb:37:4e:f9:dd:d8:be:a8: e6:9a:23:e6:84:a3:ee:b9:11:f3:8a:3d:d3:2e:57: 1e:76:26:1a:42:6a:6c:18:ce:65:02:d2:69:9c:22: 0a:b4:d1:81:c2:b8:ec:27:77:d1:5c:cb:75:ef:e1: fa:e3:57:47:09:07:88:1f:6d:a7:6b:ba:56:e5:5f: d1:8a:73:31:c1:0f:fb:68:ed:ba:73:7b:84:86:06: c1:06:44:95:d4:46:af:49:a6:57:5d:ce:64:88:3d: 53:be:b0:3e:bb:a4:93:30:1f:68:87:ed:65:89:91: ab:ca:d6:b8:d4:c6:5e:ea:3c:6d:3f:ff:98:a2:b1: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:71:95:BB:35:75:DD:49:BB:FE:D4:B1:E4:0D:C5:88:4D:4A:22 X509v3 Authority Key Identifier: keyid:2D:5D:FD:16:27:56:ED:E0:48:BB:DF:3F:98:C4:C1:5A:BC:5F:BD:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LV39FidW7eBIu98_mMTBWrxfvZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A626/0BF4A1FEBC9011ED96FAC680C4F9AE02/LV39FidW7eBIu98_mMTBWrxfvZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:57:40:e0:bb:8b:8d:1d:e0:da:24:83:f6:a3:c7:89:46: b1:74:90:96:e7:a8:56:f4:ef:d2:4f:ca:f3:d6:51:fc:a4:5f: ab:94:0a:4e:b6:e0:8f:bf:ec:3a:04:0c:dd:50:3d:91:60:78: a6:80:88:26:03:31:2b:1a:46:ff:30:ff:24:07:ed:dc:97:bd: ae:98:83:a6:5f:65:ae:4c:9e:2b:33:4c:69:54:07:d7:2a:a1: 9d:03:68:3b:69:58:b9:33:91:92:02:cf:ae:4c:91:1f:ec:33: 42:e8:62:43:f9:b4:3c:a8:84:86:e4:29:11:1c:13:09:0c:a2: da:6d:8d:67:4e:82:c3:8c:bc:8c:5f:0a:54:6f:10:a6:26:7d: 32:cf:03:88:f6:cb:c3:44:c2:3e:94:e8:71:a3:3a:cb:1a:3b: 38:9a:51:5c:3e:50:2b:07:c2:b9:17:08:79:ce:54:ed:d1:b4: 4d:18:1a:65:1c:ba:37:15:09:9f:b1:11:62:27:96:db:54:49: 88:65:ae:7d:55:47:12:f6:7d:f9:9b:36:13:58:8f:a7:d8:92: 34:b2:9c:90:16:7e:b7:b5:0a:8d:f2:bc:22:fd:8d:15:d3:01: ac:b8:5e:b8:19:84:c1:fd:9d:d6:59:df:1a:cd:85:b1:da:66: d6:49:19:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2MjYxMTAvBgNVBAUTKDJENURGRDE2Mjc1NkVERTA0OEJCREYzRjk4QzRDMTVB QkM1RkJEOTgwHhcNMjUwNDIxMDIyNzU2WhcNMjUwNDI4MDIyNzU2WjAYMRYwFAYD VQQDEw02ODA1YWQyZC04ZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8qz3aM+wY+FH4sWNxUntwPff+jwKnjgYh/hhkdal9IvFXjgy1mp6dIHBA39 1BC7NzQQx/uEmxT6PMYoarbPRtxB2MG1nrlsiGp4eK/pyW91jdvg8WMW0KOev4TI ZsGXkFKmCGWGZDhntaYMXCkDKkoVRmgEaXTFkduKNLCj+zdO+d3YvqjmmiPmhKPu uRHzij3TLlcediYaQmpsGM5lAtJpnCIKtNGBwrjsJ3fRXMt17+H641dHCQeIH22n a7pW5V/RinMxwQ/7aO26c3uEhgbBBkSV1EavSaZXXc5kiD1TvrA+u6STMB9oh+1l iZGryta41MZe6jxtP/+YorGIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ2cZW7 NXXdSbv+1LHkDcWITUoiMB8GA1UdIwQYMBaAFC1d/RYnVu3gSLvfP5jEwVq8X72Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTYyNi8wQkY0QTFGRUJD OTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdlQkl1OThfbU1UQldyeGZ2 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWMzlGaWRXN2VCSXU5OF9tTVRCV3J4ZnZaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTYyNi8wQkY0QTFGRUJDOTAxMUVEOTZGQUM2ODBDNEY5QUUwMi9MVjM5RmlkVzdl Qkl1OThfbU1UQldyeGZ2WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+FdA4LuLjR3g2iSD9qPHiUaxdJCW56hW9O/ST8rz1lH8pF+rlApO tuCPv+w6BAzdUD2RYHimgIgmAzErGkb/MP8kB+3cl72umIOmX2WuTJ4rM0xpVAfX KqGdA2g7aVi5M5GSAs+uTJEf7DNC6GJD+bQ8qISG5CkRHBMJDKLabY1nToLDjLyM XwpUbxCmJn0yzwOI9svDRMI+lOhxozrLGjs4mlFcPlArB8K5Fwh5zlTt0bRNGBpl HLo3FQmfsRFiJ5bbVEmIZa59VUcS9n35mzYTWI+n2JI0spyQFn63tQqN8rwi/Y0V 0wGsuF64GYTB/Z3WWd8azYWx2mbWSRl1 -----END CERTIFICATE-----Generated at Tue Apr 22 12:43:08 2025 by rpki-client