$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: ipMOgU8AUrUO21kMU37WiSTa6sQAGc6D48sRAWCuBJw= Subject key identifier: ED:9C:08:FE:DB:10:50:59:30:4A:EA:BD:14:27:CF:0F:E5:02:92:F2 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 011B Signing time: Thu 03 Apr 2025 04:00:50 +0000 Manifest this update: Thu 03 Apr 2025 04:00:50 +0000 Manifest next update: Thu 10 Apr 2025 04:00:50 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: B6vj3cHFH1TyxSe6ezkjEBBbYnU0h7RqJAl42CGhsXk=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: K2l/EtZxWeLVYqj5ycNq5EmQOfjL5aHh+ijS2CAjoJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B Validity Not Before: Apr 3 04:00:50 2025 GMT Not After : Apr 10 04:00:50 2025 GMT Subject: CN=67ee07f2-17f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:73:0a:06:77:8a:81:8d:9f:bf:46:bc:4e: 9b:b2:83:87:03:2d:f0:7a:47:8f:8d:12:13:de:98: a6:71:29:02:b3:22:4e:36:3d:40:01:78:47:b7:9a: 70:06:2e:c5:88:b7:ca:d3:be:51:99:52:f7:0c:b6: 3d:b9:60:e1:fc:99:4d:60:44:2a:2d:65:25:dc:40: 33:5e:6f:38:3c:2a:89:00:5c:3e:0c:b5:88:fb:ff: f4:46:9b:e7:0e:c9:a4:fb:a7:93:f1:7c:77:72:5a: 27:fb:13:9a:8f:44:01:ae:6c:7c:a9:3d:f4:3a:7d: 2d:58:62:5b:1d:41:9c:c8:cf:3a:25:9a:79:9e:94: 0d:b6:92:99:7e:49:ca:9e:96:b2:bf:26:ce:f3:bc: fd:b7:dd:8d:0e:07:9e:1d:c9:7b:4a:10:e8:36:23: f5:8f:21:09:e7:a2:77:30:ec:65:8a:55:7a:46:05: 66:d5:96:d6:27:8f:58:16:b4:96:3a:16:90:f3:88: 6c:a4:96:25:08:87:4f:42:2d:d7:31:b1:e5:3e:6b: da:f1:2b:ad:34:67:a3:3e:cf:c5:57:cd:b0:f4:fa: 5d:1e:ef:2d:fd:6e:9f:e0:8e:a9:4d:bc:20:c9:f2: c9:7a:a7:90:21:7f:3a:b3:2c:50:2d:dc:cf:79:2a: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9C:08:FE:DB:10:50:59:30:4A:EA:BD:14:27:CF:0F:E5:02:92:F2 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:1e:24:f7:e6:ce:9b:12:12:47:8e:f1:44:93:de:42:0d:5d: cd:90:73:7a:20:9a:7f:2c:c2:65:93:28:26:8e:e6:cd:c0:66: 06:f1:68:bc:d7:1b:7a:8e:84:91:d2:74:12:e8:d2:8f:e2:9c: 32:33:a3:3b:d3:22:b8:63:43:23:36:c8:8c:96:13:a0:07:bb: 8b:6b:ce:43:f5:6a:00:5b:e9:b7:28:b5:a4:77:4f:34:c5:f0: fc:c6:22:49:91:a5:54:7e:10:de:c5:50:8f:24:33:c5:56:f5: ef:b4:96:16:6f:3f:b9:38:18:57:58:0c:8b:23:1c:95:ba:7b: 24:6c:16:7a:31:16:72:65:0f:32:04:f6:11:9f:83:66:71:ff: 95:a4:76:d3:83:74:09:a6:ab:03:c4:ef:e1:2f:13:65:68:dd: 04:7f:ea:ab:db:a0:31:39:ac:3c:48:cf:d2:5f:7d:67:b8:8d: d1:0b:31:9a:70:cb:a6:f1:e3:7c:7e:2b:cd:a4:c1:be:45:b3: 3c:0a:0c:bc:a5:93:7f:22:9f:19:c6:11:51:5f:6d:40:03:57: ec:5e:03:39:a9:c4:17:52:5f:16:43:1e:7e:9d:76:d2:79:7a: 35:86:bb:e3:1d:d2:60:2f:16:e4:19:56:a0:6e:ff:92:2d:88: 10:c8:18:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwNDAzMDQwMDUwWhcNMjUwNDEwMDQwMDUwWjAYMRYwFAYD VQQDEw02N2VlMDdmMi0xN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT1zCgZ3ioGNn79GvE6bsoOHAy3wekePjRIT3pimcSkCsyJONj1AAXhHt5pw Bi7FiLfK075RmVL3DLY9uWDh/JlNYEQqLWUl3EAzXm84PCqJAFw+DLWI+//0Rpvn Dsmk+6eT8Xx3clon+xOaj0QBrmx8qT30On0tWGJbHUGcyM86JZp5npQNtpKZfknK npayvybO87z9t92NDgeeHcl7ShDoNiP1jyEJ56J3MOxlilV6RgVm1ZbWJ49YFrSW OhaQ84hspJYlCIdPQi3XMbHlPmva8SutNGejPs/FV82w9PpdHu8t/W6f4I6pTbwg yfLJeqeQIX86syxQLdzPeSqQMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2cCP7b EFBZMErqvRQnzw/lApLyMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+HiT35s6bEhJHjvFEk95CDV3NkHN6IJp/LMJlkygmjubNwGYG8Wi8 1xt6joSR0nQS6NKP4pwyM6M70yK4Y0MjNsiMlhOgB7uLa85D9WoAW+m3KLWkd080 xfD8xiJJkaVUfhDexVCPJDPFVvXvtJYWbz+5OBhXWAyLIxyVunskbBZ6MRZyZQ8y BPYRn4Nmcf+VpHbTg3QJpqsDxO/hLxNlaN0Ef+qr26AxOaw8SM/SX31nuI3RCzGa cMum8eN8fivNpMG+RbM8Cgy8pZN/Ip8ZxhFRX21AA1fsXgM5qcQXUl8WQx5+nXbS eXo1hrvjHdJgLxbkGVagbv+SLYgQyBgu -----END CERTIFICATE-----Generated at Fri Apr 4 21:27:38 2025 by rpki-client