$ rpki-client -vvf rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft File: LVzM98MOtjzd6jS-g75guw4CehM.mft (raw, json) Hash identifier: 19sjufvrEKyX5N4LFbLvXpF5rnSovjJvQtVZquBNJ4s= Subject key identifier: 0D:48:17:C8:D7:1F:92:55:D5:59:0A:8F:8C:2C:CB:DC:A1:02:CF:E6 Authority key identifier: 2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 Certificate issuer: /CN=A919F10A/serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft Manifest number: 0AF0 Signing time: Mon 14 Apr 2025 19:14:50 +0000 Manifest this update: Mon 14 Apr 2025 19:14:49 +0000 Manifest next update: Mon 21 Apr 2025 19:14:49 +0000 Files and hashes: 1: LVzM98MOtjzd6jS-g75guw4CehM.crl (hash: JPlSr6P031yH9QH9lBb6Z4gTc7rjLac8hex1Q+zbH+E=) 2: AE5FD48E431911EAB8FF4125C4F9AE02.roa (hash: wUVOr7bU61HRquV+b+lva4AIoFme7G1z56Vw7wfpFH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 19:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F10A, serialNumber=2D5CCCF7C30EB63CDDEA34BE83BE60BB0E027A13 Validity Not Before: Apr 14 19:14:49 2025 GMT Not After : Apr 21 19:14:49 2025 GMT Subject: CN=67fd5ea9-c2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:ad:ef:f9:51:16:d5:99:0c:b6:46:34:f2: 27:43:87:92:f2:a2:9e:e9:2a:2b:54:1a:c3:73:eb: 43:8c:54:78:29:43:89:96:c5:63:50:43:53:05:65: ab:97:ca:09:3b:5b:07:ca:e4:08:2b:e9:dc:46:c1: 81:f6:a8:1b:fc:08:3d:07:53:fa:12:82:90:ad:2c: 18:74:40:99:54:e1:a0:0d:d4:3e:5a:57:8a:c7:c0: 56:9e:c0:f7:47:5d:89:2f:3c:34:3a:2a:19:05:3f: 82:9f:f9:10:7b:cb:7e:3f:2b:11:9f:2b:9f:e6:4a: f7:98:7f:0a:95:52:0f:b6:92:23:e5:b5:ff:92:6f: 98:b8:86:30:be:40:dc:32:81:40:1b:65:2a:cc:6e: 20:0f:16:dd:98:18:a7:26:da:11:83:ad:81:26:d8: 80:58:28:01:a2:63:0d:2d:a1:5b:a0:17:e9:8d:37: c2:bf:c1:3d:2b:96:9f:2c:8d:84:5a:e7:b7:78:5b: 3e:94:a8:bf:09:15:a6:1d:7b:9b:7a:eb:e3:c7:4e: 65:dc:89:c6:51:23:40:73:60:b0:72:ce:38:df:bb: 4e:0c:7a:56:c5:d9:4e:e1:95:00:e5:dd:ef:24:43: 24:fd:39:a5:6e:90:36:f2:e0:8c:a1:68:38:f4:22: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:17:C8:D7:1F:92:55:D5:59:0A:8F:8C:2C:CB:DC:A1:02:CF:E6 X509v3 Authority Key Identifier: keyid:2D:5C:CC:F7:C3:0E:B6:3C:DD:EA:34:BE:83:BE:60:BB:0E:02:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVzM98MOtjzd6jS-g75guw4CehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F10A/274557FE431811EAA7EC5F22C4F9AE02/LVzM98MOtjzd6jS-g75guw4CehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e0:66:fa:3e:a0:23:37:d4:0b:07:43:9e:90:bd:b7:a0:9e: 4b:3c:bc:fd:2b:d6:d0:a5:23:33:45:3b:80:3a:0f:a6:20:cf: aa:29:43:8d:22:d4:d8:79:e2:ae:7e:59:72:ba:07:58:93:38: bb:19:fa:e8:d1:f1:b1:a8:1b:94:a2:00:20:b6:2c:ea:4b:e8: b5:83:0c:47:d7:38:98:fc:72:94:2e:69:a6:2d:95:7e:c3:b6: f4:03:eb:01:f4:d6:ec:ff:a1:e0:0b:2e:e8:e2:2a:06:6e:c6: ea:f0:3f:e3:f9:a4:2b:93:71:f3:51:97:b8:0a:2f:e7:30:03: 82:d0:16:95:83:92:48:c5:b2:a0:5c:25:b3:2e:ab:fa:e4:d2: 7a:22:79:2e:87:1d:79:6c:2f:b1:e6:85:e0:58:69:1c:0b:e0: 61:a9:84:50:8f:ae:21:54:d5:0d:43:c1:c7:81:04:48:2f:1e: 55:17:fb:a3:2e:ac:0c:e4:0a:64:f0:a9:2e:6c:ab:9c:bc:19: 97:df:fa:5b:88:4f:8c:dd:69:e4:f1:96:ad:05:21:a9:60:23: ee:d0:8d:c5:3f:5c:62:4a:fc:0a:16:67:ef:58:f0:31:18:1f: 28:37:30:49:b2:e4:02:62:30:9b:38:32:d7:36:82:6e:ff:62: 61:08:51:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYxMEExMTAvBgNVBAUTKDJENUNDQ0Y3QzMwRUI2M0NEREVBMzRCRTgzQkU2MEJC MEUwMjdBMTMwHhcNMjUwNDE0MTkxNDQ5WhcNMjUwNDIxMTkxNDQ5WjAYMRYwFAYD VQQDEw02N2ZkNWVhOS1jMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a6t7/lRFtWZDLZGNPInQ4eS8qKe6SorVBrDc+tDjFR4KUOJlsVjUENTBWWr l8oJO1sHyuQIK+ncRsGB9qgb/Ag9B1P6EoKQrSwYdECZVOGgDdQ+WleKx8BWnsD3 R12JLzw0OioZBT+Cn/kQe8t+PysRnyuf5kr3mH8KlVIPtpIj5bX/km+YuIYwvkDc MoFAG2UqzG4gDxbdmBinJtoRg62BJtiAWCgBomMNLaFboBfpjTfCv8E9K5afLI2E Wue3eFs+lKi/CRWmHXubeuvjx05l3InGUSNAc2Cwcs4437tODHpWxdlO4ZUA5d3v JEMk/TmlbpA28uCMoWg49CLzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1IF8jX H5JV1VkKj4wsy9yhAs/mMB8GA1UdIwQYMBaAFC1czPfDDrY83eo0voO+YLsOAnoT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjEwQS8yNzQ1NTdGRTQz MTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3RqemQ2alMtZzc1Z3V3NENl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xWek05OE1PdGp6ZDZqUy1nNzVndXc0Q2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjEwQS8yNzQ1NTdGRTQzMTgxMUVBQTdFQzVGMjJDNEY5QUUwMi9MVnpNOThNT3Rq emQ2alMtZzc1Z3V3NENlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA54Gb6PqAjN9QLB0OekL23oJ5LPLz9K9bQpSMzRTuAOg+mIM+qKUON ItTYeeKufllyugdYkzi7Gfro0fGxqBuUogAgtizqS+i1gwxH1ziY/HKULmmmLZV+ w7b0A+sB9Nbs/6HgCy7o4ioGbsbq8D/j+aQrk3HzUZe4Ci/nMAOC0BaVg5JIxbKg XCWzLqv65NJ6Inkuhx15bC+x5oXgWGkcC+BhqYRQj64hVNUNQ8HHgQRILx5VF/uj LqwM5Apk8KkubKucvBmX3/pbiE+M3Wnk8ZatBSGpYCPu0I3FP1xiSvwKFmfvWPAx GB8oNzBJsuQCYjCbODLXNoJu/2JhCFEf -----END CERTIFICATE-----Generated at Wed Apr 16 20:18:41 2025 by rpki-client