$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: /iVbQWWTB3joGxr7CRItgLosWk+NvDq6kqNn9EEFI80= Subject key identifier: 50:B1:8F:13:97:EE:DE:EA:81:00:D1:34:65:A4:00:54:1B:9C:17:7B Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: 96 Signing time: Thu 03 Apr 2025 05:37:19 +0000 Manifest this update: Thu 03 Apr 2025 05:37:19 +0000 Manifest next update: Thu 10 Apr 2025 05:37:19 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: FrrsJUGmEBrzV9ZvfmNMJOzc/Fh+qRB329WmCvLuEoE=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: hYjHUfvRUA2oxqxU9L94pcxlxZdbw5TFQJ8mDVWiXNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA Validity Not Before: Apr 3 05:37:19 2025 GMT Not After : Apr 10 05:37:19 2025 GMT Subject: CN=67ee1e8f-a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:c0:23:44:34:89:a3:62:0d:44:9e:32:a2: 38:47:4d:3e:21:ec:5a:ab:96:fc:da:8e:29:67:26: a3:12:b1:42:2b:73:8c:94:9e:da:44:e8:67:71:e4: 36:96:98:04:78:46:f4:83:40:ea:47:58:17:f0:9e: b6:f6:4f:69:4b:46:68:2a:47:3a:51:c0:8a:bb:82: da:3f:c2:90:3c:fa:c4:2b:ce:a5:f2:d6:53:10:5f: c7:98:2c:e4:23:e8:f3:a0:27:94:28:44:c1:96:6e: 25:9a:6d:d4:3c:86:d4:fe:ae:fb:8d:86:93:b6:70: 77:40:5d:95:85:ca:32:db:61:70:b4:a2:f6:6a:27: a1:24:30:18:03:cf:db:04:b9:c7:ed:78:5f:2a:0f: 1b:f6:17:c5:32:c7:05:e4:a7:bc:e7:7d:25:67:ee: 9f:f9:6a:d6:bf:3c:23:61:f7:f8:98:96:6a:e1:0a: 4b:3f:cc:10:46:f3:48:50:59:26:fb:8f:b2:ff:67: dc:94:d7:92:52:23:4c:6f:67:0a:df:fe:7e:30:d1: 6c:a4:2d:cb:41:e6:8e:30:88:07:59:35:da:d2:d8: 52:3a:a7:ea:00:54:fe:80:28:e0:21:4f:08:d0:12: 01:99:11:56:6f:1c:90:1f:18:71:23:93:5e:e2:34: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B1:8F:13:97:EE:DE:EA:81:00:D1:34:65:A4:00:54:1B:9C:17:7B X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0b:02:0f:8b:78:f7:d0:20:fd:3e:43:6d:56:15:2e:89:3f: fa:3b:a2:03:db:da:6c:80:3f:b0:9a:dd:a2:db:d6:7b:ad:1d: fb:8a:47:d8:51:c8:c6:c9:e4:58:1a:63:2b:2b:e7:2f:b2:d4: 9f:92:06:36:db:d8:46:51:a0:a7:6b:8d:ac:14:d6:55:02:a5: 45:b8:bd:81:06:f6:3b:d8:30:8c:8f:60:f8:1e:0d:74:41:f6: 66:0f:42:d7:2e:11:af:55:3c:cf:73:5b:35:8f:9a:ae:a5:e6: ce:be:26:d8:95:25:92:b4:1d:f5:31:28:1a:4c:18:df:12:78: e9:19:71:c1:6d:5d:b7:32:9a:95:bf:93:f2:69:78:da:d3:3c: aa:73:34:69:34:73:4d:1b:ac:86:65:72:a0:50:bf:45:e8:91: e0:25:b3:19:29:fd:ad:46:c5:c9:cb:c6:d3:1f:56:d2:18:c5: 4e:0f:f4:db:4d:d0:bd:1b:41:ef:4b:0a:5e:11:47:2d:19:23: c6:82:98:bf:8d:a7:4b:7e:5d:27:97:ea:ee:ec:39:55:06:f7: 94:99:c1:dc:cd:cc:d1:d1:a3:dd:a9:3f:1e:87:ad:42:91:fa: 46:39:16:37:db:83:a3:a3:91:e7:50:ea:95:36:f1:69:e9:4a: d8:97:12:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwNDAzMDUzNzE5WhcNMjUwNDEwMDUzNzE5WjAYMRYwFAYD VQQDEw02N2VlMWU4Zi1hOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg7AI0Q0iaNiDUSeMqI4R00+Iexaq5b82o4pZyajErFCK3OMlJ7aROhnceQ2 lpgEeEb0g0DqR1gX8J629k9pS0ZoKkc6UcCKu4LaP8KQPPrEK86l8tZTEF/HmCzk I+jzoCeUKETBlm4lmm3UPIbU/q77jYaTtnB3QF2Vhcoy22FwtKL2aiehJDAYA8/b BLnH7XhfKg8b9hfFMscF5Ke8530lZ+6f+WrWvzwjYff4mJZq4QpLP8wQRvNIUFkm +4+y/2fclNeSUiNMb2cK3/5+MNFspC3LQeaOMIgHWTXa0thSOqfqAFT+gCjgIU8I 0BIBmRFWbxyQHxhxI5Ne4jQOGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCxjxOX 7t7qgQDRNGWkAFQbnBd7MB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYCwIPi3j30CD9PkNtVhUuiT/6O6ID29psgD+wmt2i29Z7rR37ikfY UcjGyeRYGmMrK+cvstSfkgY229hGUaCna42sFNZVAqVFuL2BBvY72DCMj2D4Hg10 QfZmD0LXLhGvVTzPc1s1j5qupebOvibYlSWStB31MSgaTBjfEnjpGXHBbV23MpqV v5PyaXja0zyqczRpNHNNG6yGZXKgUL9F6JHgJbMZKf2tRsXJy8bTH1bSGMVOD/Tb TdC9G0HvSwpeEUctGSPGgpi/jadLfl0nl+ru7DlVBveUmcHczczR0aPdqT8eh61C kfpGORY324Ojo5HnUOqVNvFp6UrYlxJU -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:16 2025 by rpki-client