$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: RWeqlfmR1CMrVbg6hJWMph18hRhYPCEDt92rb5CuE8I= Subject key identifier: C4:25:82:74:97:D1:EC:80:71:F9:41:9A:42:5B:01:61:86:2F:EE:C5 Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 01C3 Signing time: Sat 19 Apr 2025 02:23:07 +0000 Manifest this update: Sat 19 Apr 2025 02:23:06 +0000 Manifest next update: Sat 26 Apr 2025 02:23:06 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: M52IxvliOjfSbzziqjmQKslzIqITUdpYCRXnyBylVWU=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: inCWlFg4eyi3SZb4mhg7QgWhnaX3zI3I9iGqmhoauLc=) 3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: 9Oyy54xhiWuTllhGlORwlpgALp6JCiYOJTYLu9JoBj0=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: 5EKiWHDPeMiKNhe7uJ6GnZoz2bb2Ob3eC5qrY4BOvLk=) 5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Apr 19 02:23:06 2025 GMT Not After : Apr 26 02:23:06 2025 GMT Subject: CN=6803090b-b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:ce:8b:0c:a1:43:a0:f6:dd:80:50:13:b7: 0c:a8:84:a5:f5:d3:f4:6e:7b:b4:9e:91:83:56:6d: 37:d7:ee:eb:8c:71:0e:06:c3:fb:0a:f3:67:e8:06: 88:07:83:35:b8:47:88:29:f2:98:83:62:76:bc:fd: 1b:53:9b:46:0f:46:3b:a8:8a:5c:5a:b0:02:cb:af: d9:ca:45:d2:44:c0:5e:41:4d:a6:a3:37:40:6d:b9: a7:28:07:c2:e9:98:a9:b0:14:8d:19:50:16:d5:33: 00:0e:28:c5:ba:12:f4:97:bf:e7:24:ed:15:ab:26: ef:cb:cd:f3:65:f4:8b:f9:c6:27:63:0a:97:99:7f: 20:12:6e:71:e9:3e:24:fc:bb:6d:75:6a:8c:36:44: 5a:96:64:6f:e1:61:a2:ff:ea:ab:42:f9:5f:8b:1c: 15:f4:b4:27:a7:2c:ab:bb:43:cd:42:56:7c:85:7a: 6a:c7:11:48:d7:32:6f:30:a2:08:3b:03:36:61:15: 2a:fe:6f:b5:fa:e7:ec:9b:00:0b:3c:70:9f:22:1a: 76:a8:9a:1a:c0:a3:a3:32:7e:79:e0:3a:7e:55:3a: a3:34:fa:1e:57:6f:8c:f1:18:e3:2b:03:64:af:52: c4:e3:6a:0b:98:29:0d:c8:ed:1e:96:b8:3a:73:18: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:82:74:97:D1:EC:80:71:F9:41:9A:42:5B:01:61:86:2F:EE:C5 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:39:c4:8f:61:9b:43:a1:03:f2:5d:4b:05:b0:32:54:85: 9d:c7:fa:b0:d2:ac:8a:66:5e:a4:39:74:ee:14:81:c0:2a:b8: 1e:a1:48:68:9e:8d:11:ef:82:d9:d3:a5:0d:d8:10:36:c2:65: 64:2a:8f:a4:8f:27:4f:e2:c2:49:36:08:bf:12:a1:9f:8d:66: 0d:d0:9f:3c:b7:0e:46:89:ab:76:5d:55:6a:f4:c3:5c:44:02: 24:d1:9c:9c:ff:5b:e5:ca:f6:a5:cd:9b:31:48:c5:71:8a:e8: 3e:4e:4b:f4:85:88:ba:09:b0:02:4e:35:d5:07:34:eb:44:cc: 71:05:82:b3:00:c6:0d:38:8b:6f:53:af:92:ea:12:a0:4f:37: 2c:5a:5f:d1:84:6c:97:da:f3:ce:a1:1e:c1:d2:fd:45:d9:31: bb:4d:fe:1f:ba:aa:9d:55:56:06:9e:2c:00:7e:0e:ef:aa:45: 21:ee:18:d6:12:70:a4:ce:a3:f9:73:54:54:09:87:a7:9c:67: a3:b5:ce:ff:b3:7b:09:de:57:9d:cb:d4:42:73:cd:03:57:7b: 43:60:a5:96:e1:16:29:fc:9d:0d:00:ea:6d:5c:9c:95:cf:e8: 68:f4:1a:54:bf:e3:b5:22:6d:f6:d5:42:80:9e:5a:90:13:98: e9:ca:01:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUwNDE5MDIyMzA2WhcNMjUwNDI2MDIyMzA2WjAYMRYwFAYD VQQDEw02ODAzMDkwYi1iODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17nOiwyhQ6D23YBQE7cMqISl9dP0bnu0npGDVm031+7rjHEOBsP7CvNn6AaI B4M1uEeIKfKYg2J2vP0bU5tGD0Y7qIpcWrACy6/ZykXSRMBeQU2mozdAbbmnKAfC 6ZipsBSNGVAW1TMADijFuhL0l7/nJO0Vqybvy83zZfSL+cYnYwqXmX8gEm5x6T4k /LttdWqMNkRalmRv4WGi/+qrQvlfixwV9LQnpyyru0PNQlZ8hXpqxxFI1zJvMKII OwM2YRUq/m+1+ufsmwALPHCfIhp2qJoawKOjMn554Dp+VTqjNPoeV2+M8RjjKwNk r1LE42oLmCkNyO0elrg6cxjCEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQlgnSX 0eyAcflBmkJbAWGGL+7FMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK+znEj2GbQ6ED8l1LBbAyVIWdx/qw0qyKZl6kOXTuFIHAKrgeoUho no0R74LZ06UN2BA2wmVkKo+kjydP4sJJNgi/EqGfjWYN0J88tw5Giat2XVVq9MNc RAIk0Zyc/1vlyvalzZsxSMVxiug+Tkv0hYi6CbACTjXVBzTrRMxxBYKzAMYNOItv U6+S6hKgTzcsWl/RhGyX2vPOoR7B0v1F2TG7Tf4fuqqdVVYGniwAfg7vqkUh7hjW EnCkzqP5c1RUCYennGejtc7/s3sJ3ledy9RCc80DV3tDYKWW4RYp/J0NAOptXJyV z+ho9BpUv+O1Im321UKAnlqQE5jpygE3 -----END CERTIFICATE-----Generated at Sat Apr 19 08:22:11 2025 by rpki-client