$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: qgQhzU4Ao/xkEDBefrKrULQ8aSzFWrNZ6+ySLNXHUlc= Subject key identifier: D5:6F:18:C8:0D:14:2E:30:C3:DE:43:16:E8:01:45:32:DA:D0:C3:06 Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 06E5 Signing time: Wed 02 Apr 2025 22:00:16 +0000 Manifest this update: Wed 02 Apr 2025 22:00:15 +0000 Manifest next update: Wed 09 Apr 2025 22:00:15 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: 2eWNlIPnF5iLyG1VhcQyoYoZN+ws5EtICnaQ7p3VAik=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: 4rISf9Z0gDtlAylgqmkLRj4oHpOaisWHbdYvnEyJBHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0 Validity Not Before: Apr 2 22:00:15 2025 GMT Not After : Apr 9 22:00:15 2025 GMT Subject: CN=67edb36f-72d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:b1:b2:c2:9b:d6:c5:93:17:df:45:9c:61: c0:19:6f:0b:0a:b9:81:3b:43:a7:44:67:55:27:08: 97:2b:17:f2:4e:20:17:60:ea:b0:18:fb:d4:fe:34: fa:cd:d1:05:fa:ee:42:06:eb:22:33:3f:3b:66:39: 48:d0:01:6d:19:f8:60:a0:2e:07:93:f4:81:28:24: 4d:d7:96:67:38:2b:42:78:89:36:45:bc:2e:fc:c3: e1:20:c0:29:18:e6:9d:e5:2d:7e:a0:3d:3b:ac:2f: 8c:52:df:11:fd:cf:15:92:d3:dd:64:e8:62:53:ee: cc:e6:63:53:bb:ed:53:3b:b8:fd:4b:d6:44:17:45: 1b:c6:cc:cf:58:ab:0d:c9:4b:32:fc:cb:aa:dc:7a: 64:55:f4:cf:24:6f:19:37:ab:f5:12:be:62:16:bb: 4a:ce:e2:46:0d:0e:ce:7e:02:d7:9f:77:cc:be:fa: bd:7c:df:3e:7d:50:98:ad:83:5a:d9:76:91:72:37: dd:ce:68:f5:9f:10:9f:33:10:b1:ab:e8:30:3c:09: 65:57:26:58:b8:b1:60:df:5f:87:c0:48:c8:39:0b: 05:7f:29:04:29:db:04:f8:85:87:7c:42:c4:f7:ba: c1:21:e7:7c:96:e1:f1:ec:da:c6:c0:7c:4a:43:1f: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6F:18:C8:0D:14:2E:30:C3:DE:43:16:E8:01:45:32:DA:D0:C3:06 X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:28:2f:94:3f:18:71:30:69:88:bc:04:00:8b:8a:6c:47:ce: 6a:8a:d2:40:7e:b5:41:c6:7c:d0:f5:f5:74:3f:28:58:02:41: f9:2c:a2:f4:43:a8:38:56:84:84:fc:9b:c4:c1:63:57:4f:25: e5:45:eb:2a:49:a2:38:2e:09:fd:b6:cb:17:d6:b8:06:44:24: 2b:1a:eb:83:df:c7:99:05:10:c5:50:24:ab:7a:3a:a9:d0:d0: 85:48:28:cb:fb:88:11:c3:c6:67:79:4f:98:55:84:73:80:fc: f7:d3:9d:7b:c8:87:2d:9e:9f:d6:1c:a5:02:af:51:be:19:3e: 06:6d:a4:89:24:d0:0c:84:6d:f0:6a:0a:2a:6f:b7:a2:c8:bc: bf:b6:f0:44:7d:6a:47:fc:8c:fb:49:bf:79:28:9c:01:7b:0b: 5e:65:a8:71:5b:84:03:37:02:b0:6b:f0:06:4e:8b:eb:33:9c: 79:29:ef:b3:c4:4c:16:60:77:dd:ea:fa:88:61:bc:40:fe:57: 59:ba:2b:03:15:f6:f4:e5:b1:f3:49:5c:be:af:cd:ae:e7:8b: d7:5f:40:76:03:a1:4b:b3:c3:6f:65:dd:89:3b:df:51:ec:96: 5b:44:d7:f6:63:ce:09:3f:2a:f3:ff:0c:34:a9:db:63:9d:b0: 56:63:65:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUwNDAyMjIwMDE1WhcNMjUwNDA5MjIwMDE1WjAYMRYwFAYD VQQDEw02N2VkYjM2Zi03MmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvmxssKb1sWTF99FnGHAGW8LCrmBO0OnRGdVJwiXKxfyTiAXYOqwGPvU/jT6 zdEF+u5CBusiMz87ZjlI0AFtGfhgoC4Hk/SBKCRN15ZnOCtCeIk2Rbwu/MPhIMAp GOad5S1+oD07rC+MUt8R/c8VktPdZOhiU+7M5mNTu+1TO7j9S9ZEF0UbxszPWKsN yUsy/Muq3HpkVfTPJG8ZN6v1Er5iFrtKzuJGDQ7OfgLXn3fMvvq9fN8+fVCYrYNa 2XaRcjfdzmj1nxCfMxCxq+gwPAllVyZYuLFg31+HwEjIOQsFfykEKdsE+IWHfELE 97rBIed8luHx7NrGwHxKQx9RZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVvGMgN FC4ww95DFugBRTLa0MMGMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSKC+UPxhxMGmIvAQAi4psR85qitJAfrVBxnzQ9fV0PyhYAkH5LKL0 Q6g4VoSE/JvEwWNXTyXlResqSaI4Lgn9tssX1rgGRCQrGuuD38eZBRDFUCSrejqp 0NCFSCjL+4gRw8ZneU+YVYRzgPz30517yIctnp/WHKUCr1G+GT4GbaSJJNAMhG3w agoqb7eiyLy/tvBEfWpH/Iz7Sb95KJwBewteZahxW4QDNwKwa/AGTovrM5x5Ke+z xEwWYHfd6vqIYbxA/ldZuisDFfb05bHzSVy+r82u54vXX0B2A6FLs8NvZd2JO99R 7JZbRNf2Y84JPyrz/ww0qdtjnbBWY2VY -----END CERTIFICATE-----Generated at Fri Apr 4 21:27:38 2025 by rpki-client