$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: YkZRiPHWfY1si8AUhMFNbAv4736m2B4V7Scn1bKhYTM= Subject key identifier: D8:81:5C:7C:2E:3D:5E:85:7C:73:B6:D1:26:2C:43:DC:C7:86:93:CE Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 0403 Signing time: Thu 03 Apr 2025 00:29:50 +0000 Manifest this update: Thu 03 Apr 2025 00:29:50 +0000 Manifest next update: Thu 10 Apr 2025 00:29:50 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: ihsSI2A3/Stv/gPz9p20Ib2Bi7u/w5b/4pwytrsnvoY=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: tNJLz/05MhN+kNpDsEpSvyxEjiBHI8/Qy5MZGniM9So=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: PeSRHrlXLPWq0OR7M6KoyLAqMUZOAeVzYm1KrZ/ISG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54 Validity Not Before: Apr 3 00:29:50 2025 GMT Not After : Apr 10 00:29:50 2025 GMT Subject: CN=67edd67e-2a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:3d:85:97:04:de:ae:ad:82:c5:bb:40:db: 00:ad:1d:e4:75:c1:06:cd:a0:f7:b2:c3:e6:36:db: 2b:ca:87:f5:a7:a7:5b:00:d1:e5:02:8f:0b:d2:5b: a6:04:48:04:b3:33:12:c8:50:ba:4a:55:8d:30:7b: 8a:c8:4e:8d:02:88:b7:8d:f2:fd:c3:bf:8c:0c:9b: eb:fb:60:51:0e:fb:ab:11:aa:7f:94:9c:36:d4:53: e9:4b:bb:b3:8c:22:ce:86:09:fc:39:a9:5d:e5:f9: 21:66:22:64:2f:16:a3:fb:9c:63:65:fa:2b:83:82: 80:ec:f3:6a:8d:db:04:b9:36:36:80:9f:9f:a4:96: 6f:24:58:b1:17:42:0a:bd:2d:8d:56:46:c2:e4:a2: df:5f:33:c4:55:ed:04:17:47:fa:48:5c:5c:76:be: 05:8b:71:e5:e6:36:ed:26:b8:f6:07:de:1f:cd:09: 2f:b2:8b:cf:c1:3f:4e:59:bc:cd:79:06:e4:3f:e0: 65:4f:76:9b:a0:f9:34:ba:d1:a3:34:90:db:23:ad: 05:e5:8c:48:41:fc:2d:e6:4a:48:f3:c1:87:3f:2d: e0:21:18:2e:1b:27:04:58:4d:df:f8:3a:0c:58:5b: 17:95:33:b8:51:d1:f5:6e:a4:da:89:84:7f:06:90: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:5C:7C:2E:3D:5E:85:7C:73:B6:D1:26:2C:43:DC:C7:86:93:CE X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:55:3d:a4:43:aa:04:55:3b:2c:6d:13:8b:09:97:3d:02:02: 53:c5:8d:7b:cf:28:3c:1a:ec:b9:34:d2:ad:4c:78:25:74:b7: c0:57:75:62:de:c9:a2:c1:ca:cb:f5:3f:b7:44:af:15:02:79: 58:3e:e4:f7:ef:cf:19:23:3b:45:65:fb:25:3a:a2:f6:5e:5b: ae:80:2f:50:14:bc:c4:a9:61:01:79:f7:c3:fe:d1:67:cc:28: 08:60:19:96:1c:cd:8d:26:8c:a6:cc:05:ce:72:a6:96:f2:c4: 96:18:d7:9b:58:d5:75:7d:e7:00:6c:ad:9d:6c:18:9e:da:a9: d4:2f:da:08:e6:f4:58:d0:75:a2:f2:58:f2:ab:1b:72:80:57: 5c:21:2b:c8:64:16:c2:10:4c:9b:9d:0a:5f:ef:b3:a8:01:d5: 3b:1a:fb:5b:a2:4a:0d:9c:6d:9a:3e:cf:17:76:d8:f6:49:55: 5b:0d:8d:4b:c4:ec:f8:b7:f1:7b:ba:98:e5:e6:b6:e0:62:8c: 56:94:27:2a:f1:bd:f7:49:00:82:df:ad:e7:34:d8:21:95:87: d2:7b:ea:3a:5e:6e:d4:25:4a:b9:93:d1:80:aa:98:00:5c:46: b0:fe:ce:15:39:ef:35:c2:11:79:5f:b0:f7:10:44:24:23:4f: a2:8b:e5:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjUwNDAzMDAyOTUwWhcNMjUwNDEwMDAyOTUwWjAYMRYwFAYD VQQDEw02N2VkZDY3ZS0yYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NE9hZcE3q6tgsW7QNsArR3kdcEGzaD3ssPmNtsryof1p6dbANHlAo8L0lum BEgEszMSyFC6SlWNMHuKyE6NAoi3jfL9w7+MDJvr+2BRDvurEap/lJw21FPpS7uz jCLOhgn8Oald5fkhZiJkLxaj+5xjZforg4KA7PNqjdsEuTY2gJ+fpJZvJFixF0IK vS2NVkbC5KLfXzPEVe0EF0f6SFxcdr4Fi3Hl5jbtJrj2B94fzQkvsovPwT9OWbzN eQbkP+BlT3aboPk0utGjNJDbI60F5YxIQfwt5kpI88GHPy3gIRguGycEWE3f+DoM WFsXlTO4UdH1bqTaiYR/BpAidwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiBXHwu PV6FfHO20SYsQ9zHhpPOMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuVT2kQ6oEVTssbROLCZc9AgJTxY17zyg8Guy5NNKtTHgldLfAV3Vi 3smiwcrL9T+3RK8VAnlYPuT3788ZIztFZfslOqL2XluugC9QFLzEqWEBeffD/tFn zCgIYBmWHM2NJoymzAXOcqaW8sSWGNebWNV1fecAbK2dbBie2qnUL9oI5vRY0HWi 8ljyqxtygFdcISvIZBbCEEybnQpf77OoAdU7GvtbokoNnG2aPs8Xdtj2SVVbDY1L xOz4t/F7upjl5rbgYoxWlCcq8b33SQCC363nNNghlYfSe+o6Xm7UJUq5k9GAqpgA XEaw/s4VOe81whF5X7D3EEQkI0+ii+Ug -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:11 2025 by rpki-client