$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: IT8P7Pwt+cv3+GHqKJPpMN8lITbnvrHEey/og7ySJMc= Subject key identifier: 18:32:53:E4:91:9D:72:1C:08:F3:66:00:87:10:82:61:25:DE:CD:8B Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 078E Signing time: Wed 02 Apr 2025 21:23:21 +0000 Manifest this update: Wed 02 Apr 2025 21:23:20 +0000 Manifest next update: Wed 09 Apr 2025 21:23:20 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: peD0qWh+mxQhJZMOt7GcBnIxjd2yBgMJTG9ye6Th2zo=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7 Validity Not Before: Apr 2 21:23:20 2025 GMT Not After : Apr 9 21:23:20 2025 GMT Subject: CN=67edaac8-1f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:ff:f0:46:dd:0b:c4:98:d1:0a:3c:95:85: 00:46:0c:ef:a0:5a:64:66:6e:31:57:c4:40:4a:55: f5:31:03:30:68:6b:79:f8:f7:f5:6c:c2:2e:6b:7d: 32:eb:f9:ae:23:f3:a0:d6:89:e7:3d:0a:23:03:ce: 4f:79:46:00:4a:fb:4a:da:44:53:5f:ed:5d:2d:2f: 04:ac:32:f0:be:35:5e:cf:f7:00:8a:10:44:16:5f: 13:b5:ac:84:9e:f3:2d:83:c7:ad:8c:72:7a:9c:15: cb:f2:d2:84:0b:83:37:65:3b:3f:e0:8a:6e:4e:cf: 61:3e:81:02:25:c8:3b:f9:b5:04:8e:8b:f4:c8:57: bd:4a:87:12:74:87:cf:98:43:19:2e:05:f6:d9:1e: a3:11:e1:56:ae:5e:34:32:15:09:0f:d6:9b:6c:60: 3a:a4:e5:43:fa:ab:6e:12:60:e8:eb:bb:b3:e2:47: 67:c4:66:a2:4d:69:b5:86:5a:3c:a2:c6:47:93:d8: 23:11:c9:4b:82:74:fb:1e:ac:85:0c:b4:7f:50:e4: 37:91:10:8a:dc:9d:0e:3e:45:d7:ac:df:de:f0:e3: 5f:55:38:ce:8a:04:7c:37:ae:3f:c4:3d:1e:56:df: be:e0:03:98:ce:f9:a5:c2:f6:b2:b6:92:44:a6:b5: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:32:53:E4:91:9D:72:1C:08:F3:66:00:87:10:82:61:25:DE:CD:8B X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a6:a0:d2:de:ef:cc:3a:72:33:74:d3:54:1f:91:6e:02:11: 6f:3f:42:7c:cc:35:b0:7e:2c:01:99:4b:17:84:34:a4:86:fd: 5c:54:11:60:de:dc:cc:bc:15:a0:ee:85:44:dd:a2:88:bb:a8: e8:ef:4d:44:0f:d7:8c:49:da:4f:40:a9:1f:ae:29:cc:8f:7f: 2b:cf:49:d7:d8:ec:cc:9a:4d:fe:e0:47:61:81:ce:16:a4:81: 79:95:53:b6:68:c0:c1:2a:0f:86:d5:3f:e7:d7:89:54:4d:3f: cd:db:04:36:c9:d6:5f:9a:10:62:87:51:6c:3e:43:32:8e:4b: b9:bc:c4:7b:16:42:a0:d1:d2:c7:cb:46:67:3a:24:db:bb:43: 4c:a6:6f:b9:12:7d:60:50:43:d2:3f:51:31:1e:28:ca:10:e8: 66:24:a7:35:db:44:13:a6:0e:4e:8e:62:a4:8b:8c:e8:12:e6: 6e:69:df:a8:dc:0a:1f:7d:f7:60:30:f4:0d:79:58:76:fa:8e: 70:a2:5d:39:0e:1b:17:b9:b6:39:96:d5:68:96:03:c1:8d:95: 98:5f:c2:77:3b:20:35:67:8e:df:f2:c4:93:59:d5:92:3f:18: 40:1d:b8:30:71:d8:19:92:87:ec:53:65:7c:b9:fc:71:aa:20: bb:9b:2e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwNDAyMjEyMzIwWhcNMjUwNDA5MjEyMzIwWjAYMRYwFAYD VQQDEw02N2VkYWFjOC0xZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kb/8EbdC8SY0Qo8lYUARgzvoFpkZm4xV8RASlX1MQMwaGt5+Pf1bMIua30y 6/muI/Og1onnPQojA85PeUYASvtK2kRTX+1dLS8ErDLwvjVez/cAihBEFl8TtayE nvMtg8etjHJ6nBXL8tKEC4M3ZTs/4IpuTs9hPoECJcg7+bUEjov0yFe9SocSdIfP mEMZLgX22R6jEeFWrl40MhUJD9abbGA6pOVD+qtuEmDo67uz4kdnxGaiTWm1hlo8 osZHk9gjEclLgnT7HqyFDLR/UOQ3kRCK3J0OPkXXrN/e8ONfVTjOigR8N64/xD0e Vt++4AOYzvmlwvaytpJEprW0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgyU+SR nXIcCPNmAIcQgmEl3s2LMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClpqDS3u/MOnIzdNNUH5FuAhFvP0J8zDWwfiwBmUsXhDSkhv1cVBFg 3tzMvBWg7oVE3aKIu6jo701ED9eMSdpPQKkfrinMj38rz0nX2OzMmk3+4Edhgc4W pIF5lVO2aMDBKg+G1T/n14lUTT/N2wQ2ydZfmhBih1FsPkMyjku5vMR7FkKg0dLH y0ZnOiTbu0NMpm+5En1gUEPSP1ExHijKEOhmJKc120QTpg5OjmKki4zoEuZuad+o 3AofffdgMPQNeVh2+o5wol05DhsXubY5ltVolgPBjZWYX8J3OyA1Z47f8sSTWdWS PxhAHbgwcdgZkofsU2V8ufxxqiC7my5T -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:03 2025 by rpki-client