$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft File: LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json) Hash identifier: T7QyerUpEvv2q1T4XcV78ypBtvD6HgQKeYVW5tbLcls= Subject key identifier: 54:15:AB:DD:DE:12:B7:CC:6F:A7:2D:CB:9D:F5:ED:2D:0A:B2:C4:9F Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 Certificate issuer: /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft Manifest number: 063A Signing time: Sat 12 Apr 2025 22:14:16 +0000 Manifest this update: Sat 12 Apr 2025 22:14:15 +0000 Manifest next update: Sat 19 Apr 2025 22:14:15 +0000 Files and hashes: 1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: T/h4Fx/EJOw9TE3x20iAESUG8Q0qQR6EjbVj9eW+pQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97 Validity Not Before: Apr 12 22:14:15 2025 GMT Not After : Apr 19 22:14:15 2025 GMT Subject: CN=67fae5b7-2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:91:17:96:ec:53:b2:6b:5d:36:7e:26:07: 5f:eb:b3:1c:7f:79:18:15:cd:4f:25:ab:fc:9c:10: 2a:af:fe:d9:12:24:e7:84:c6:dc:ed:d1:95:a1:c6: 5a:68:41:e4:a9:ed:b4:d9:c8:59:7a:15:88:55:53: 7d:6d:27:49:62:4d:33:e5:71:a6:aa:b1:9f:1a:b5: 3a:67:dd:2e:4e:d0:97:6c:6d:f5:c4:22:18:68:96: 60:0f:f6:71:07:3a:4a:3e:15:4c:9b:ec:7a:5e:fa: 8b:72:95:76:61:0a:20:a9:f8:0d:6d:d9:0e:0d:22: c7:4d:c5:d9:45:98:8a:89:b6:4c:49:2f:1d:3d:8a: 74:d5:18:cd:cf:4e:bd:19:af:39:e2:e4:a5:7e:8b: f4:ec:09:4b:87:f0:8e:eb:b3:2c:29:69:89:70:75: 72:07:c4:80:97:0b:69:d4:4e:14:74:40:86:c9:f6: 9f:7a:0e:1d:bf:e2:8d:f0:9f:9b:15:6a:da:84:1a: 1d:a4:98:e1:b6:7d:51:2e:2f:1d:aa:b0:cf:63:00: c5:a3:7d:16:ca:7b:ec:00:46:4e:5a:ee:68:8f:f7: 58:f9:8f:e7:b5:02:55:16:a1:62:56:dd:39:a1:95: 9d:56:a4:f0:11:5a:d7:da:40:29:b4:a2:02:c8:77: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:15:AB:DD:DE:12:B7:CC:6F:A7:2D:CB:9D:F5:ED:2D:0A:B2:C4:9F X509v3 Authority Key Identifier: keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:b2:c5:da:67:78:14:81:18:63:c7:cc:4b:ed:78:77:2a: ba:2d:80:8f:1b:aa:a1:49:a8:fb:3a:49:1c:fc:e1:10:96:78: 0a:b8:76:8d:9c:4f:e0:ef:79:fc:21:67:e2:d0:10:50:46:2e: e1:e5:f8:2d:96:d0:8a:d2:8e:33:68:77:ec:d0:63:55:e3:8d: a3:00:01:0d:82:27:b0:72:a7:e4:b4:0c:e3:22:28:5b:0e:d9: 90:a4:ce:0b:8c:7b:f5:20:ec:e4:4d:42:b5:39:b5:39:66:fe: 3a:ad:f0:4b:5b:66:7e:5e:30:a4:4d:3a:6e:c0:f8:eb:24:e2: 31:9a:28:1a:e2:42:15:f9:02:75:b6:58:79:92:45:20:98:30: 08:bf:c6:b5:27:93:82:af:d8:5e:dc:80:5d:c4:76:7d:9e:88: 08:7a:5d:db:14:9c:22:39:25:db:fe:38:ef:33:bf:1f:a6:81: 2e:3e:16:19:7b:40:bd:85:88:00:fe:76:7f:86:c9:44:83:92: d9:7b:ad:38:43:94:3c:0e:88:04:26:08:25:b4:69:0d:be:13: 7a:54:b7:58:5f:1d:db:55:02:6b:0e:f4:99:91:42:95:f9:9c: 08:87:31:ea:64:3c:88:f2:b4:28:59:51:4f:98:06:24:37:61: 16:2b:95:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKDJFMTU5NjM4Q0I3OTBGNzk0NTE3MjJFNTJBQ0VCNERB ODA1RjhCOTcwHhcNMjUwNDEyMjIxNDE1WhcNMjUwNDE5MjIxNDE1WjAYMRYwFAYD VQQDEw02N2ZhZTViNy0yMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPyRF5bsU7JrXTZ+Jgdf67Mcf3kYFc1PJav8nBAqr/7ZEiTnhMbc7dGVocZa aEHkqe202chZehWIVVN9bSdJYk0z5XGmqrGfGrU6Z90uTtCXbG31xCIYaJZgD/Zx BzpKPhVMm+x6XvqLcpV2YQogqfgNbdkODSLHTcXZRZiKibZMSS8dPYp01RjNz069 Ga854uSlfov07AlLh/CO67MsKWmJcHVyB8SAlwtp1E4UdECGyfafeg4dv+KN8J+b FWrahBodpJjhtn1RLi8dqrDPYwDFo30WynvsAEZOWu5oj/dY+Y/ntQJVFqFiVt05 oZWdVqTwEVrX2kAptKICyHdWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQVq93e ErfMb6cty5317S0KssSfMB8GA1UdIwQYMBaAFC4VljjLeQ95RRci5SrOtNqAX4uX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8wRkE1RjBEMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQzbEZGeUxsS3M2MDJvQmZp NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0xoV1dPTXQ1RDNsRkZ5TGxLczYwMm9CZmk1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8wRkE1RjBEMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi9MaFdXT010NUQz bEZGeUxsS3M2MDJvQmZpNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcLLF2md4FIEYY8fMS+14dyq6LYCPG6qhSaj7Okkc/OEQlngKuHaN nE/g73n8IWfi0BBQRi7h5fgtltCK0o4zaHfs0GNV442jAAENgiewcqfktAzjIihb DtmQpM4LjHv1IOzkTUK1ObU5Zv46rfBLW2Z+XjCkTTpuwPjrJOIxmiga4kIV+QJ1 tlh5kkUgmDAIv8a1J5OCr9he3IBdxHZ9nogIel3bFJwiOSXb/jjvM78fpoEuPhYZ e0C9hYgA/nZ/hslEg5LZe604Q5Q8DogEJggltGkNvhN6VLdYXx3bVQJrDvSZkUKV +ZwIhzHqZDyI8rQoWVFPmAYkN2EWK5W2 -----END CERTIFICATE-----Generated at Sun Apr 13 01:45:59 2025 by rpki-client