$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: 0oIp5V2OubTLAzGKVqb+m58unzPjLCZjC34+oo19MQU= Subject key identifier: 76:0B:77:F7:4A:60:E0:5E:18:D8:D4:9B:62:A7:7C:22:D8:E6:46:E2 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 349A Signing time: Fri 04 Apr 2025 14:24:30 +0000 Manifest this update: Fri 04 Apr 2025 14:24:29 +0000 Manifest next update: Fri 11 Apr 2025 14:24:29 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: DeAWpZhZn5KLb6bw2M+1f9bZs4bk5NmcrXMhPkBeKpA=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE Validity Not Before: Apr 4 14:24:29 2025 GMT Not After : Apr 11 14:24:29 2025 GMT Subject: CN=67efeb9d-290a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:00:8d:c3:d1:44:aa:7b:9d:29:02:95:97: bb:da:ad:d7:7b:a8:18:d1:f2:23:b0:6a:0f:cc:09: f5:59:e5:b3:f7:27:35:c0:6c:cd:21:1f:6d:a3:fe: f0:c1:b0:d8:5b:48:68:af:8e:90:7f:a6:00:6d:ae: a1:73:c7:2e:f6:29:d2:70:8a:47:14:ce:f3:4f:49: 7f:fc:ec:db:14:ee:0e:8c:b3:6e:25:e6:fc:e2:56: fa:e9:26:90:bf:4d:90:81:75:05:a9:bb:0e:7d:f3: 1e:f1:23:97:92:48:60:b8:99:98:09:b8:13:b2:4f: b4:a8:87:e6:c9:a7:3b:0a:1d:7f:e8:20:a4:33:c8: 59:d0:39:0e:cb:e7:de:16:9d:64:ca:2a:1a:8e:c3: 0c:ca:a1:79:4c:b5:c8:88:48:94:3e:26:27:9b:59: 61:1c:1d:5e:8f:82:88:fc:4a:5e:fb:1f:70:2a:31: f2:2a:a9:ea:ea:a1:f1:6e:b9:5e:98:98:d0:5c:f1: b8:fe:c7:0f:5e:c2:05:ff:41:79:7a:ce:07:19:5b: 53:fe:3f:5f:d7:cb:f7:03:71:09:b3:dc:7d:7d:99: e9:79:21:59:10:47:4c:5e:e2:97:53:c8:15:16:a2: ab:fd:ff:13:5f:a9:db:51:00:d3:6a:84:7d:c1:02: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0B:77:F7:4A:60:E0:5E:18:D8:D4:9B:62:A7:7C:22:D8:E6:46:E2 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fb:de:7e:86:c1:f0:61:9b:b9:12:db:6c:52:f5:84:df:84: 90:07:b7:e4:ad:a3:0f:65:31:26:48:dd:db:9a:9e:b6:35:a9: 79:54:cc:47:b1:30:0e:c3:5d:de:f6:ae:6a:c5:91:67:a7:c1: b1:2e:ce:24:8b:c7:45:e9:de:6e:c0:66:70:49:b7:ef:0d:7e: 74:63:df:78:49:fc:3a:9f:b3:b2:6b:24:f0:92:f4:66:61:1b: fb:cc:30:a1:25:3e:87:ac:9a:9f:ba:e5:a8:26:78:73:8c:fe: e4:df:e6:c5:2b:fb:0f:c9:2a:aa:5b:a3:48:7a:c1:f1:e9:c8: cb:2a:28:9c:cf:74:f9:fd:0e:bc:58:d9:33:ed:f6:17:23:5a: bb:fe:72:8a:bc:1d:53:aa:15:43:07:d1:b5:2b:ca:02:cf:50: 4a:1d:6c:1e:23:43:6b:74:52:1b:d7:5a:8a:bb:ab:0a:84:46: f2:e2:7a:0f:d0:ec:d9:cc:a7:f2:42:a9:95:37:1d:f2:ad:26: 44:9a:8e:88:b1:4b:88:57:b2:1a:9a:8c:ef:bb:24:a9:c7:1b: cc:f5:51:8e:a6:7e:96:a6:db:d5:5a:06:9d:16:9f:07:e9:3f: c2:29:6c:2f:cf:83:2c:57:5c:9a:d1:de:71:b3:fb:8a:75:ae: c4:48:1d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNDA0MTQyNDI5WhcNMjUwNDExMTQyNDI5WjAYMRYwFAYD VQQDEw02N2VmZWI5ZC0yOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygMAjcPRRKp7nSkClZe72q3Xe6gY0fIjsGoPzAn1WeWz9yc1wGzNIR9to/7w wbDYW0hor46Qf6YAba6hc8cu9inScIpHFM7zT0l//OzbFO4OjLNuJeb84lb66SaQ v02QgXUFqbsOffMe8SOXkkhguJmYCbgTsk+0qIfmyac7Ch1/6CCkM8hZ0DkOy+fe Fp1kyioajsMMyqF5TLXIiEiUPiYnm1lhHB1ej4KI/Epe+x9wKjHyKqnq6qHxbrle mJjQXPG4/scPXsIF/0F5es4HGVtT/j9f18v3A3EJs9x9fZnpeSFZEEdMXuKXU8gV FqKr/f8TX6nbUQDTaoR9wQIgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYLd/dK YOBeGNjUm2KnfCLY5kbiMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+95+hsHwYZu5EttsUvWE34SQB7fkraMPZTEmSN3bmp62Nal5VMxH sTAOw13e9q5qxZFnp8GxLs4ki8dF6d5uwGZwSbfvDX50Y994Sfw6n7OyayTwkvRm YRv7zDChJT6HrJqfuuWoJnhzjP7k3+bFK/sPySqqW6NIesHx6cjLKiicz3T5/Q68 WNkz7fYXI1q7/nKKvB1TqhVDB9G1K8oCz1BKHWweI0NrdFIb11qKu6sKhEby4noP 0OzZzKfyQqmVNx3yrSZEmo6IsUuIV7IamozvuySpxxvM9VGOpn6WptvVWgadFp8H 6T/CKWwvz4MsV1ya0d5xs/uKda7ESB0F -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:06 2025 by rpki-client