$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json) Hash identifier: /0nrZQ9HjAUctSxk1qDV7+E4clYzRsPNAMdd/K2uwNw= Subject key identifier: 22:B9:45:DC:60:05:61:A1:57:C2:77:EA:9D:B6:F9:99:88:25:32:A6 Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft Manifest number: 64 Signing time: Wed 09 Apr 2025 05:49:34 +0000 Manifest this update: Wed 09 Apr 2025 05:49:33 +0000 Manifest next update: Wed 16 Apr 2025 05:49:33 +0000 Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: wJuiO0V7EsBbNhh3q8WKhIHj1/DjZxZckGPMQHXijnI=) 2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: QmeMLe3zHSz7gk9gq16CkmBIAgYCod6kVBmzDpdZxiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E Validity Not Before: Apr 9 05:49:33 2025 GMT Not After : Apr 16 05:49:33 2025 GMT Subject: CN=67f60a6e-c988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:90:fa:48:74:11:88:f5:90:fc:e5:7a:c6: 80:33:0b:86:2c:b1:fa:a0:31:d2:ab:59:ec:dd:21: 89:f8:89:37:a5:ec:62:10:b7:c1:15:a0:c9:34:66: 7d:2f:93:38:af:be:4a:a8:09:66:08:6a:c9:33:f1: 73:37:05:40:9b:c2:0f:de:a4:5d:d0:51:67:cf:8f: 46:02:e7:bc:58:0b:b4:95:ed:29:93:d3:0a:a4:7e: dc:7f:20:64:a9:8e:09:62:5f:37:c2:6d:22:0d:1e: 33:d3:d6:f9:c5:2f:1a:39:23:90:68:e6:3b:82:ca: 57:b1:f7:80:db:e1:64:be:8e:10:da:1e:c7:bf:15: 15:5a:54:1b:89:6d:1f:0f:dd:cc:a4:5b:30:5b:1a: f9:59:87:84:0b:89:11:39:0f:9f:cd:4c:b4:95:62: 1a:da:d0:68:78:c7:8a:b9:82:a3:27:3d:55:24:6b: f7:63:3a:0b:82:68:72:a3:a0:e6:92:4e:9a:b8:3a: 26:90:0d:ba:3d:3c:16:72:b8:18:02:ef:6d:35:6d: 05:f7:04:f4:99:cd:18:cb:fa:9b:cb:d4:b8:06:83: c7:c5:96:11:a4:63:e3:d1:16:5b:e1:41:96:7c:69: 98:de:cb:a5:02:1a:f7:18:cc:9b:f2:2f:40:6b:a3: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B9:45:DC:60:05:61:A1:57:C2:77:EA:9D:B6:F9:99:88:25:32:A6 X509v3 Authority Key Identifier: keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:87:02:b5:22:4e:0e:60:d1:55:13:61:53:cf:21:c8:6f:47: 2d:d4:f4:5e:1b:2f:99:ab:92:d8:45:b3:aa:3c:58:61:03:d9: 1e:24:8a:16:b2:fd:26:5a:12:a5:06:bb:38:32:16:36:dd:a0: e1:fa:5a:d9:b9:b7:cf:f3:e4:27:75:72:c0:f8:eb:ca:05:47: 79:46:bc:e5:35:8c:aa:65:a8:a1:1a:d9:bc:c9:99:3c:18:fa: 64:f4:b9:90:23:29:fa:f7:4a:e1:37:4c:04:4d:d8:35:c0:04: 00:81:28:7c:9b:9a:87:6c:f4:ae:ae:09:30:de:4d:c7:0f:9b: d6:e3:55:c3:7c:56:bd:22:23:5a:9f:20:16:11:e5:53:4f:2f: 15:1c:be:c0:fd:e8:85:32:ef:3f:34:1e:e4:e4:0e:d0:cd:2f: 95:1a:34:4c:dd:d1:f7:f5:29:c6:9e:b2:30:9f:4f:3d:b2:70: 06:b0:9c:30:f1:a8:c4:c7:82:e2:91:f9:ef:04:2a:f3:da:4f: 1f:22:21:dd:3d:85:38:25:b3:9e:7e:fe:1e:38:de:94:42:57: df:cd:73:26:40:b0:64:da:62:60:a3:1f:9d:72:88:76:08:0e: 9a:22:9a:15:76:97:f9:b3:26:2b:e5:14:26:c7:d9:0f:e5:22: 16:38:9b:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEIwRTExMC8GA1UEBRMoOTU3RTUwQTc1RkJFNTAyRjM4RTNFREJGM0Y0QUFBRTY2 NUFFMTQ4QjAeFw0yNTA0MDkwNTQ5MzNaFw0yNTA0MTYwNTQ5MzNaMBgxFjAUBgNV BAMTDTY3ZjYwYTZlLWM5ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdN5D6SHQRiPWQ/OV6xoAzC4YssfqgMdKrWezdIYn4iTel7GIQt8EVoMk0Zn0v kzivvkqoCWYIaskz8XM3BUCbwg/epF3QUWfPj0YC57xYC7SV7SmT0wqkftx/IGSp jgliXzfCbSINHjPT1vnFLxo5I5Bo5juCylex94Db4WS+jhDaHse/FRVaVBuJbR8P 3cykWzBbGvlZh4QLiRE5D5/NTLSVYhra0Gh4x4q5gqMnPVUka/djOguCaHKjoOaS Tpq4OiaQDbo9PBZyuBgC7201bQX3BPSZzRjL+pvL1LgGg8fFlhGkY+PRFlvhQZZ8 aZjey6UCGvcYzJvyL0BroxVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIrlF3GAF YaFXwnfqnbb5mYglMqYwHwYDVR0jBBgwFoAUlX5Qp1++UC844+2/P0qq5mWuFIsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjBFLzRFNkNCNEY2ODA2 OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFg1UXAxLS1VQzg0NC0yX1AwcXE1bVd1RklzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjBFLzRFNkNCNEY2ODA2OTExRUY4ODdCNzAzQ0M0RjlBRTAyL2xYNVFwMS0tVUM4 NDQtMl9QMHFxNW1XdUZJcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyHArUiTg5g0VUTYVPPIchvRy3U9F4bL5mrkthFs6o8WGED2R4kihay /SZaEqUGuzgyFjbdoOH6Wtm5t8/z5Cd1csD468oFR3lGvOU1jKplqKEa2bzJmTwY +mT0uZAjKfr3SuE3TARN2DXABACBKHybmods9K6uCTDeTccPm9bjVcN8Vr0iI1qf IBYR5VNPLxUcvsD96IUy7z80HuTkDtDNL5UaNEzd0ff1KcaesjCfTz2ycAawnDDx qMTHguKR+e8EKvPaTx8iId09hTgls55+/h443pRCV9/NcyZAsGTaYmCjH51yiHYI DpoimhV2l/mzJivlFCbH2Q/lIhY4myo= -----END CERTIFICATE-----Generated at Thu Apr 10 18:42:02 2025 by rpki-client