$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft File: lAmAjIoyxYSU2uV00F1rsiJyw1o.mft (raw, json) Hash identifier: 5o+xFhO79SlkZHoq1nA+ZBaXLCKZrP/YR4UcHzsI0EY= Subject key identifier: 0C:8D:0A:D2:8B:9B:C4:95:C2:B7:E9:DC:40:79:A8:CE:18:B6:BC:A8 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft Manifest number: 1E54 Signing time: Fri 04 Apr 2025 16:07:13 +0000 Manifest this update: Fri 04 Apr 2025 16:07:12 +0000 Manifest next update: Fri 11 Apr 2025 16:07:12 +0000 Files and hashes: 1: lAmAjIoyxYSU2uV00F1rsiJyw1o.crl (hash: kV57lpWXKXvwoc8NIlT2pzqce7MtUfLSCNPO+xplZ8E=) 2: 45865ED62B7411EF9E28ED19C4F9AE02.roa (hash: MZ9HXgsryJcIfgtcrkLJ15mrbJcfORIsxX9xU/rSMFM=) 3: C7D60D34CC0611EC93451840C4F9AE02.roa (hash: Q2GAHBziepubGCjFA5uNZNQTPbWA4VzAokc5hIjeXbI=) 4: 4664F7042B7411EF9E28ED19C4F9AE02.roa (hash: Aa7zYmJq6heh8Y7nRX8mflbiKrA5BuJIy7DgV5gkvRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7777 (0x1e61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D Validity Not Before: Apr 4 16:07:12 2025 GMT Not After : Apr 11 16:07:12 2025 GMT Subject: CN=67f003b1-ce7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:d1:a1:89:80:48:74:27:30:9f:30:df:06: 04:64:23:92:6a:66:a7:0d:24:2d:54:ed:d9:50:b5: 89:e3:38:ca:fa:26:9c:e2:c4:6b:71:70:eb:4b:e1: b5:a8:69:58:fb:3f:f9:86:54:df:0c:19:b2:89:5d: cc:dd:d3:75:a5:05:8f:57:d9:10:b0:a0:49:36:b9: 2f:99:31:ef:2b:df:5e:ec:60:53:d9:5b:52:e5:c9: a6:63:bc:eb:e5:19:4b:4f:f6:e0:80:cc:d4:47:43: 96:30:81:d5:cf:64:6c:9c:42:95:c1:fe:8a:2a:81: 46:99:56:b8:16:ca:72:0b:78:c3:ec:f1:46:d7:c0: 98:68:63:73:85:f1:12:5a:55:db:4f:87:b1:09:75: de:4c:9c:56:4f:88:c0:5c:8c:ee:24:dd:2d:16:19: d3:56:72:9f:dd:a6:3b:2d:92:dc:41:f8:f9:23:69: 8c:18:bd:71:db:a3:e2:e6:43:61:22:18:8e:8f:94: eb:b6:16:e1:4d:b9:fe:00:ff:85:af:f5:de:e6:26: 3a:df:57:6e:95:7b:68:cc:0e:9c:dc:7e:ca:4f:9f: 3f:4e:f1:a3:93:fa:67:c6:66:fd:15:e0:36:78:c4: 9d:61:12:35:34:7c:e7:b4:f4:df:6c:08:9e:88:d9: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:0A:D2:8B:9B:C4:95:C2:B7:E9:DC:40:79:A8:CE:18:B6:BC:A8 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:da:2f:d0:47:54:d3:84:5d:cd:fc:db:22:3a:bf:85:cf:c4: 1d:ab:43:0f:93:89:0e:4d:e0:e3:12:99:36:fc:65:13:66:47: 29:2d:e2:89:b0:f6:83:25:62:f0:85:40:bc:00:3c:a0:a1:48: 14:18:ba:4b:e2:91:c6:a1:64:81:6f:ba:be:be:6c:1b:b8:61: 82:4d:1e:f1:52:07:b1:1d:cc:82:02:9f:9f:a0:67:af:8c:54: f6:57:a2:13:36:41:a7:4f:a1:6d:2d:7b:9b:d0:ca:ef:dc:5e: 81:0d:b8:eb:30:b7:a8:58:9a:2a:e4:77:e4:cb:b9:e6:c7:c1: 66:37:2a:a8:e5:0c:8b:07:b9:f9:5b:20:2e:bc:8e:e8:b0:d7: b3:88:be:c0:4f:b7:89:2b:60:8d:91:7b:c8:a4:f2:a2:b8:37: ab:c0:ad:cd:e6:ea:e4:3b:ea:bf:20:74:a3:7a:c5:3b:7b:b6: da:c4:46:64:50:0f:0d:df:2b:e7:7b:87:6c:0c:48:f4:60:7c: cd:fe:a1:f6:89:0e:5f:a8:dd:1c:f2:50:8e:3f:7a:90:ae:de: cc:72:d7:09:14:40:aa:68:6e:10:d5:5a:83:df:60:2c:12:bd: 6e:61:b2:2d:4d:85:5f:6d:36:51:c1:ab:9e:5f:1e:ff:5f:f8: 6d:1b:a9:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNDA0MTYwNzEyWhcNMjUwNDExMTYwNzEyWjAYMRYwFAYD VQQDEw02N2YwMDNiMS1jZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPrRoYmASHQnMJ8w3wYEZCOSamanDSQtVO3ZULWJ4zjK+iac4sRrcXDrS+G1 qGlY+z/5hlTfDBmyiV3M3dN1pQWPV9kQsKBJNrkvmTHvK99e7GBT2VtS5cmmY7zr 5RlLT/bggMzUR0OWMIHVz2RsnEKVwf6KKoFGmVa4FspyC3jD7PFG18CYaGNzhfES WlXbT4exCXXeTJxWT4jAXIzuJN0tFhnTVnKf3aY7LZLcQfj5I2mMGL1x26Pi5kNh IhiOj5TrthbhTbn+AP+Fr/Xe5iY631dulXtozA6c3H7KT58/TvGjk/pnxmb9FeA2 eMSdYRI1NHzntPTfbAieiNlfOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyNCtKL m8SVwrfp3EB5qM4YtryoMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Qzc3RC83RDRCRkUwNjc0OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZ U1UydVYwMEYxcnNpSnl3MW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi2i/QR1TThF3N/NsiOr+Fz8Qdq0MPk4kOTeDjEpk2/GUTZkcpLeKJ sPaDJWLwhUC8ADygoUgUGLpL4pHGoWSBb7q+vmwbuGGCTR7xUgexHcyCAp+foGev jFT2V6ITNkGnT6FtLXub0Mrv3F6BDbjrMLeoWJoq5Hfky7nmx8FmNyqo5QyLB7n5 WyAuvI7osNeziL7AT7eJK2CNkXvIpPKiuDerwK3N5urkO+q/IHSjesU7e7baxEZk UA8N3yvne4dsDEj0YHzN/qH2iQ5fqN0c8lCOP3qQrt7MctcJFECqaG4Q1VqD32As Er1uYbItTYVfbTZRwaueXx7/X/htG6lu -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:49 2025 by rpki-client