$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: qW3dUU7jyEghyksE0HoJwXU7loFZImdfZDA8gNFoLtA= Subject key identifier: 86:0C:E1:1C:DA:E8:F4:1E:8F:92:01:DD:7D:AB:2F:7B:89:CB:69:A4 Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 18C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 18B2 Signing time: Fri 04 Apr 2025 16:32:45 +0000 Manifest this update: Fri 04 Apr 2025 16:32:44 +0000 Manifest next update: Fri 11 Apr 2025 16:32:44 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: 6KbS4qQ1e5Olpz3/3pJANKvpDPxyuQuc2Jlp/jjoH18=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: 9b8cbYORw44VvEpRgAtGCxHhf/hrQyvWwycoRACw4Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6341 (0x18c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467 Validity Not Before: Apr 4 16:32:44 2025 GMT Not After : Apr 11 16:32:44 2025 GMT Subject: CN=67f009ad-efd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b5:c6:29:56:f8:be:f7:c3:30:3f:8f:c1:bd: 19:54:23:c0:c2:40:88:54:18:08:1e:64:51:12:c3: e7:37:96:1e:bc:1d:ad:c1:73:0b:b3:21:5a:4f:34: c9:2f:8d:f7:73:31:cf:da:7c:72:1b:f2:d1:7a:21: 82:a2:56:56:70:3c:54:48:9e:1f:ea:03:93:5e:e0: 53:2e:d9:bd:26:66:81:8e:f9:ea:1d:ad:60:15:1b: b3:40:44:53:e5:36:22:43:e4:03:bb:49:3e:01:c1: ae:e1:1c:1e:16:81:72:64:a1:5b:29:43:06:16:31: 6a:0b:e0:79:d8:d4:6c:96:e2:70:e6:80:e3:6c:ec: 1c:b1:2f:37:ee:1d:d5:7a:0c:90:ef:77:68:9d:77: 2d:03:06:e2:51:27:3a:ca:a4:9f:ec:ee:31:97:54: 26:73:aa:1d:22:d1:b7:c5:03:4c:cb:1b:98:8d:56: 78:48:21:a1:9c:99:5b:40:5c:26:31:c8:10:2b:8e: 5a:a1:c4:67:6e:fc:08:82:18:bd:66:09:f8:4c:a3: ee:f1:58:71:56:c3:d7:aa:f4:22:df:74:25:05:d0: 3e:23:ab:ac:40:bc:5e:19:bd:14:a6:00:57:37:9d: ba:7d:fd:b7:03:24:f5:aa:c4:ed:c3:1c:8d:5b:50: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:E1:1C:DA:E8:F4:1E:8F:92:01:DD:7D:AB:2F:7B:89:CB:69:A4 X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:86:15:9b:4f:e2:e1:d9:0c:00:e8:b7:d0:86:6f:24:c3: 06:02:cc:d6:3f:07:b5:2f:e3:e3:2e:51:d0:42:48:da:f2:93: 01:95:18:4c:9c:85:1e:57:9f:73:e3:6c:cd:d8:4d:75:76:a3: e0:b3:34:31:45:ab:95:e7:4c:66:93:57:a4:53:0c:b5:ae:21: 49:33:e4:e6:a1:86:d4:bf:e7:28:bf:2c:fc:9b:12:45:52:56: 30:82:1a:61:59:92:83:59:65:1e:d5:c5:76:84:b2:ce:f7:00: 5a:b0:bd:d7:6a:23:ba:c6:2f:52:ef:74:e6:c2:a3:3f:8c:94: 33:0d:d4:37:98:1d:7d:0c:e5:72:6a:c8:a2:d9:84:1c:30:58: 09:8e:48:39:f3:85:5b:76:b0:9c:02:d2:54:a6:fd:17:f3:a5: 5d:7f:1d:bd:7b:8f:2f:67:ca:41:9f:97:80:5a:42:1c:3d:96: b2:82:eb:ed:e1:bb:f4:84:80:ed:b2:a7:7a:6d:dc:7a:38:75: e8:45:df:48:10:11:18:0c:a3:6a:77:96:59:fd:4c:15:d8:9d: a7:a7:46:68:ab:5e:76:19:4b:c8:f0:05:57:ee:6e:4c:4a:78: 2d:ad:55:40:ad:dc:7b:28:e3:ef:ed:64:96:1e:fb:c1:6c:dd: ce:35:7f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjUwNDA0MTYzMjQ0WhcNMjUwNDExMTYzMjQ0WjAYMRYwFAYD VQQDEw02N2YwMDlhZC1lZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bXGKVb4vvfDMD+Pwb0ZVCPAwkCIVBgIHmRREsPnN5YevB2twXMLsyFaTzTJ L433czHP2nxyG/LReiGColZWcDxUSJ4f6gOTXuBTLtm9JmaBjvnqHa1gFRuzQERT 5TYiQ+QDu0k+AcGu4RweFoFyZKFbKUMGFjFqC+B52NRsluJw5oDjbOwcsS837h3V egyQ73donXctAwbiUSc6yqSf7O4xl1Qmc6odItG3xQNMyxuYjVZ4SCGhnJlbQFwm McgQK45aocRnbvwIghi9Zgn4TKPu8VhxVsPXqvQi33QlBdA+I6usQLxeGb0UpgBX N526ff23AyT1qsTtwxyNW1AjvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYM4Rza 6PQej5IB3X2rL3uJy2mkMB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/r4YVm0/i4dkMAOi30IZvJMMGAszWPwe1L+PjLlHQQkja8pMBlRhM nIUeV59z42zN2E11dqPgszQxRauV50xmk1ekUwy1riFJM+TmoYbUv+covyz8mxJF UlYwghphWZKDWWUe1cV2hLLO9wBasL3XaiO6xi9S73TmwqM/jJQzDdQ3mB19DOVy asii2YQcMFgJjkg584VbdrCcAtJUpv0X86Vdfx29e48vZ8pBn5eAWkIcPZayguvt 4bv0hIDtsqd6bdx6OHXoRd9IEBEYDKNqd5ZZ/UwV2J2np0Zoq152GUvI8AVX7m5M SngtrVVArdx7KOPv7WSWHvvBbN3ONX9G -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:06 2025 by rpki-client