$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: rbFlH9oaTv4RiDSNISPabxyGhljAv4AzQb9mbi13T3Y= Subject key identifier: FB:FC:09:88:3E:0D:F1:F9:B5:BC:75:74:10:6A:72:DC:E8:5D:14:7E Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B46 Signing time: Wed 02 Apr 2025 19:10:16 +0000 Manifest this update: Wed 02 Apr 2025 19:10:15 +0000 Manifest next update: Wed 09 Apr 2025 19:10:15 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: ChUkBZ0i1NBYqc6yCBJVIyd+65MXojiPM3LG1Vuatvg=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6 Validity Not Before: Apr 2 19:10:15 2025 GMT Not After : Apr 9 19:10:15 2025 GMT Subject: CN=67ed8b97-1ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:98:11:c7:f8:a8:bb:e9:9f:8b:3b:15:36: d3:44:cb:fc:ac:22:cf:28:1e:31:40:62:33:66:8d: 13:52:00:46:45:62:4f:25:e9:6b:4b:68:5e:8d:3b: e5:1c:b4:9f:2a:19:8d:87:51:2f:55:c5:b0:e1:21: b0:e5:a7:3d:b1:1d:97:43:d2:2a:0a:29:df:9d:56: 20:13:84:94:14:20:a8:a6:12:04:a9:30:05:5f:a1: 29:b9:a3:11:ad:35:b2:f1:90:bd:07:bc:06:6c:9c: 00:1f:16:4a:2b:9f:73:2d:9f:42:d6:f3:79:45:2d: 35:fc:18:f2:97:25:45:50:aa:27:83:4d:83:b3:4d: 86:1f:0d:6b:0a:80:50:f0:ba:ea:85:89:21:f1:ba: 7f:ed:28:6d:ff:3f:e9:4a:2c:b2:40:20:3c:3d:cb: 4a:2c:98:5b:2c:12:0b:5f:40:6e:14:ac:d6:57:1d: 21:67:1c:36:52:8a:22:76:db:b4:85:93:ff:f0:11: f6:a1:38:bb:d0:68:da:1f:82:db:c9:40:cb:29:d3: 8a:e9:9a:7e:e1:d2:9c:3e:62:bc:c9:53:e2:59:dc: b7:f0:42:58:fc:d3:79:6a:ef:ae:c3:b4:48:e1:7d: bd:56:ed:83:56:f6:c9:ee:9c:65:c3:aa:02:1c:0f: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:09:88:3E:0D:F1:F9:B5:BC:75:74:10:6A:72:DC:E8:5D:14:7E X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:09:47:f3:55:cf:41:ee:e5:1c:6a:96:84:29:ff:0e:c3:01: df:cb:43:54:7e:da:4d:fb:dc:f7:90:e9:8a:56:c8:b3:8f:d7: 49:c5:81:af:8a:3b:d0:1d:6e:e0:a3:d0:dc:a4:1b:8b:c5:fe: 0c:65:00:f1:d7:cb:64:a0:c9:6e:2c:3c:9e:db:dd:37:c9:53: 1a:55:c6:8c:d6:5a:26:59:3d:3c:86:6b:47:bc:e8:12:2b:38: a7:db:17:ae:c5:85:b6:71:b1:9c:f4:c9:41:ab:81:47:62:c8: 94:eb:a0:0c:32:34:a4:c7:66:4b:7f:d3:f9:51:df:5b:ea:2b: 3c:dc:b2:3b:e4:94:16:fb:3a:c6:7e:f6:5b:28:58:df:3d:3c: f1:de:eb:ad:42:e8:b7:a6:d4:54:3f:c8:15:a8:95:eb:aa:22: 5d:02:e4:09:b0:57:4b:c1:8a:35:65:40:fc:9d:93:f2:d1:cb: 42:3f:51:ef:7b:12:20:4c:ef:4f:77:1a:d8:58:2d:8f:b7:d5: b4:0b:70:10:b3:29:9d:91:02:67:3a:e0:52:4f:d4:3b:6a:11: 2f:1e:e5:e4:b6:11:d1:cc:16:ee:30:39:2f:72:0c:6d:02:94: 16:60:e8:fe:7a:5a:27:41:32:5e:d8:12:59:d2:a7:23:37:66: 83:d4:24:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNDAyMTkxMDE1WhcNMjUwNDA5MTkxMDE1WjAYMRYwFAYD VQQDEw02N2VkOGI5Ny0xZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFWYEcf4qLvpn4s7FTbTRMv8rCLPKB4xQGIzZo0TUgBGRWJPJelrS2hejTvl HLSfKhmNh1EvVcWw4SGw5ac9sR2XQ9IqCinfnVYgE4SUFCCophIEqTAFX6EpuaMR rTWy8ZC9B7wGbJwAHxZKK59zLZ9C1vN5RS01/BjylyVFUKong02Ds02GHw1rCoBQ 8LrqhYkh8bp/7Sht/z/pSiyyQCA8PctKLJhbLBILX0BuFKzWVx0hZxw2Uooidtu0 hZP/8BH2oTi70GjaH4LbyUDLKdOK6Zp+4dKcPmK8yVPiWdy38EJY/NN5au+uw7RI 4X29Vu2DVvbJ7pxlw6oCHA8LbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv8CYg+ DfH5tbx1dBBqctzoXRR+MB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7CUfzVc9B7uUcapaEKf8OwwHfy0NUftpN+9z3kOmKVsizj9dJxYGv ijvQHW7go9DcpBuLxf4MZQDx18tkoMluLDye2903yVMaVcaM1lomWT08hmtHvOgS Kzin2xeuxYW2cbGc9MlBq4FHYsiU66AMMjSkx2ZLf9P5Ud9b6is83LI75JQW+zrG fvZbKFjfPTzx3uutQui3ptRUP8gVqJXrqiJdAuQJsFdLwYo1ZUD8nZPy0ctCP1Hv exIgTO9PdxrYWC2Pt9W0C3AQsymdkQJnOuBST9Q7ahEvHuXkthHRzBbuMDkvcgxt ApQWYOj+elonQTJe2BJZ0qcjN2aD1CQa -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:23 2025 by rpki-client