$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: twtmOiDZQZ3F2BXeJ5z1KomEd6llaplR8wDQvODD0B8= Subject key identifier: 7E:FD:70:82:0E:F3:94:1F:60:09:B1:B7:A0:86:44:F0:EC:5F:19:B5 Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 06C0 Signing time: Fri 04 Apr 2025 22:16:40 +0000 Manifest this update: Fri 04 Apr 2025 22:16:39 +0000 Manifest next update: Fri 11 Apr 2025 22:16:39 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: 8mb9JpR+IjSrcscGNTvz90/KS54iOibZ+JCZd8+trFA=) 2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=) 3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85 Validity Not Before: Apr 4 22:16:39 2025 GMT Not After : Apr 11 22:16:39 2025 GMT Subject: CN=67f05a48-106a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:b3:55:41:0c:59:a7:15:fe:3b:c3:d3:1f: 68:e9:cd:f1:c1:73:c3:b3:38:76:0f:f6:44:ab:f3: f3:01:1c:f4:d6:11:91:b8:66:a9:39:3c:68:e7:57: b6:94:15:14:0a:eb:47:aa:33:50:e1:97:89:0f:91: 5b:2b:b5:41:2c:72:0c:2a:ca:b4:fc:66:e0:6e:72: 8e:03:db:59:a4:af:e6:94:da:5c:57:3e:3d:f1:d2: 68:67:db:0b:c7:48:49:96:06:7e:0e:0e:f9:8a:96: 8b:74:79:11:b6:fc:1b:36:a7:23:12:39:32:e8:76: 73:5e:d4:3e:bd:98:e6:d3:15:df:f4:21:2b:4f:80: f2:c2:5e:51:b5:7f:24:7a:b4:8e:a7:a0:69:dd:66: 94:c6:7a:8a:90:22:27:16:0b:96:b7:ee:00:7c:ea: 0c:2e:09:3f:62:e7:cc:4a:bc:2d:bd:26:f1:03:3d: 7e:38:36:5c:b6:bb:29:8d:55:15:50:b9:56:c1:16: e8:d6:b9:ac:96:15:19:1a:2d:7e:e1:85:79:d0:b0: 24:6f:48:37:5b:75:97:51:c3:da:fc:a5:d9:0c:c5: f3:70:db:af:90:25:28:47:1b:aa:65:bf:2c:d4:8f: 10:af:64:e0:77:3d:8d:58:fd:52:34:ae:94:4a:90: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:70:82:0E:F3:94:1F:60:09:B1:B7:A0:86:44:F0:EC:5F:19:B5 X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:00:40:1e:1f:e9:ee:fe:5b:5d:7a:27:0d:b7:3b:a0:db:ea: af:af:10:97:1c:9a:8d:0a:27:a0:e7:44:84:fe:3c:89:06:72: ff:92:c0:0d:40:fc:63:5c:35:e8:47:51:a3:59:dc:61:b8:f4: 67:9f:f4:44:9f:4d:d0:28:4e:fa:6e:e4:97:42:de:cd:be:07: 6f:4f:83:7d:5c:8a:11:64:46:83:47:e2:0c:38:97:71:c6:49: 8a:34:99:4d:1a:81:5c:cc:6c:5b:80:d4:5b:2f:ea:e7:e3:21: 9a:9b:10:d8:25:45:86:b9:b6:29:5b:47:1d:6d:82:36:31:35: a0:2e:1f:71:1a:a3:70:e4:3b:16:89:e3:52:c4:8c:16:92:4f: 66:aa:11:24:85:44:cf:93:b6:a5:ac:1a:c6:4b:e1:25:68:7f: 6d:f1:ca:e0:75:7f:47:aa:d8:68:71:4b:c7:a7:ba:43:11:86: 30:49:ab:8c:b6:5e:5a:d0:14:c9:8c:ed:33:ea:54:83:12:e3: 65:9d:85:99:79:a4:50:a6:52:d5:37:b1:12:64:b6:50:68:90: 01:13:6a:05:59:dc:09:b9:7c:c4:67:fc:b0:11:7e:03:41:f1: c3:aa:ce:2f:60:ea:ed:1a:9c:18:b3:7c:5e:21:6f:35:04:35: 86:e4:d3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUwNDA0MjIxNjM5WhcNMjUwNDExMjIxNjM5WjAYMRYwFAYD VQQDEw02N2YwNWE0OC0xMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhazVUEMWacV/jvD0x9o6c3xwXPDszh2D/ZEq/PzARz01hGRuGapOTxo51e2 lBUUCutHqjNQ4ZeJD5FbK7VBLHIMKsq0/GbgbnKOA9tZpK/mlNpcVz498dJoZ9sL x0hJlgZ+Dg75ipaLdHkRtvwbNqcjEjky6HZzXtQ+vZjm0xXf9CErT4Dywl5RtX8k erSOp6Bp3WaUxnqKkCInFguWt+4AfOoMLgk/YufMSrwtvSbxAz1+ODZctrspjVUV ULlWwRbo1rmslhUZGi1+4YV50LAkb0g3W3WXUcPa/KXZDMXzcNuvkCUoRxuqZb8s 1I8Qr2Tgdz2NWP1SNK6USpBwOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH79cIIO 85QfYAmxt6CGRPDsXxm1MB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPAEAeH+nu/ltdeicNtzug2+qvrxCXHJqNCieg50SE/jyJBnL/ksAN QPxjXDXoR1GjWdxhuPRnn/REn03QKE76buSXQt7NvgdvT4N9XIoRZEaDR+IMOJdx xkmKNJlNGoFczGxbgNRbL+rn4yGamxDYJUWGubYpW0cdbYI2MTWgLh9xGqNw5DsW ieNSxIwWkk9mqhEkhUTPk7alrBrGS+ElaH9t8crgdX9HqthocUvHp7pDEYYwSauM tl5a0BTJjO0z6lSDEuNlnYWZeaRQplLVN7ESZLZQaJABE2oFWdwJuXzEZ/ywEX4D QfHDqs4vYOrtGpwYs3xeIW81BDWG5NOR -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:58 2025 by rpki-client