$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: yDbDkbO8vs0wOAk2AOSw0n0SisrgYFH7kiHyPOYAb54= Subject key identifier: EE:57:76:89:A2:07:38:1A:48:02:FE:1B:FE:32:13:F0:1E:44:49:EA Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 0165 Signing time: Sat 05 Apr 2025 03:21:57 +0000 Manifest this update: Sat 05 Apr 2025 03:21:57 +0000 Manifest next update: Sat 12 Apr 2025 03:21:57 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: nfmkKeBuzLY6p3GJZB1RiFC56wO6dsgQCCwfPIHZlM8=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: 12wpcAe05HtenMlOH90kdV4i4OluuZbyZiMI0pKZkoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15 Validity Not Before: Apr 5 03:21:57 2025 GMT Not After : Apr 12 03:21:57 2025 GMT Subject: CN=67f0a1d5-e100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:e1:e6:68:6f:76:dc:88:1a:16:9e:13:7a: d4:b2:ff:33:02:35:02:f7:a3:ec:08:c5:34:eb:4a: 12:fb:cf:95:65:da:dc:64:00:98:8e:1f:42:20:84: 42:5a:3c:7f:05:22:74:97:39:de:de:49:1d:54:3b: b2:76:5c:c7:63:49:48:d9:87:0b:af:3a:3f:0b:c5: 09:80:57:08:56:ee:69:00:a3:75:cf:f8:0c:ff:96: 77:9d:82:b6:4e:2a:5a:47:15:2a:1e:53:aa:73:8d: c8:61:15:94:9e:62:53:7f:c5:09:54:5d:ed:a9:d3: 50:d9:c1:9f:a0:74:31:72:40:74:3b:fa:26:7a:63: 98:b4:fe:9a:54:0b:e2:00:fa:a9:22:c5:11:26:a0: 82:71:0c:e4:68:2f:0c:3d:9a:fa:22:f9:c2:ed:1f: f8:e5:6e:81:9f:4b:c4:f9:2a:10:a0:ba:e5:2d:3a: 0b:80:52:01:8f:86:db:86:78:6e:e2:a7:70:3a:a5: b9:d5:c6:32:9b:0d:29:d0:0b:9c:17:1c:3c:86:08: c4:34:fc:ef:b5:e5:fb:1e:fb:80:f4:eb:4a:90:af: 9a:d0:f2:59:e3:60:80:e7:da:28:8e:64:1a:ac:d0: 83:45:e2:6e:b7:a5:08:3e:b1:fd:ff:c7:26:0e:57: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:57:76:89:A2:07:38:1A:48:02:FE:1B:FE:32:13:F0:1E:44:49:EA X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d1:28:0e:5f:7e:6e:6d:05:15:76:db:a3:2b:df:08:43:80: ba:b9:4c:b8:d1:b9:12:73:ed:53:48:d9:66:e8:45:d1:df:97: 35:cb:07:2b:23:b9:a6:87:7f:e3:ce:36:b4:23:a3:40:a6:13: 2b:6f:48:c7:9d:fc:46:b4:ee:17:35:7d:d9:53:da:ed:88:59: cb:4e:95:12:d9:fb:2e:93:45:7d:a2:c8:48:eb:9d:96:86:b5: 00:cd:44:a0:df:fc:36:31:c0:04:9d:80:c0:4b:8a:88:4c:ea: 05:80:26:fe:da:10:e9:c3:98:18:20:f0:e4:c6:26:f2:5e:b0: 97:d1:91:df:39:13:dc:be:8b:08:68:10:d6:4d:2a:74:e7:09: 89:fa:de:0b:73:52:e2:21:04:70:de:22:8f:0c:f4:16:48:d7: ed:aa:8d:c1:5c:8b:7e:0a:f5:6b:ed:93:63:a0:e3:da:21:95: 0e:3f:bc:a4:47:f7:9a:70:08:bf:a0:79:e3:ec:18:c6:2f:a2: 1a:67:aa:93:ca:44:80:92:0f:ab:e8:5d:f4:1f:53:57:f2:d9: a2:a2:89:e0:84:7c:a7:d8:8e:f3:85:f0:6a:ce:27:fc:3c:6f: ed:a4:da:de:f5:24:bb:ed:eb:1a:7a:42:fd:0c:c1:8f:ba:f8: 52:cb:69:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUwNDA1MDMyMTU3WhcNMjUwNDEyMDMyMTU3WjAYMRYwFAYD VQQDEw02N2YwYTFkNS1lMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKrh5mhvdtyIGhaeE3rUsv8zAjUC96PsCMU060oS+8+VZdrcZACYjh9CIIRC Wjx/BSJ0lzne3kkdVDuydlzHY0lI2YcLrzo/C8UJgFcIVu5pAKN1z/gM/5Z3nYK2 TipaRxUqHlOqc43IYRWUnmJTf8UJVF3tqdNQ2cGfoHQxckB0O/omemOYtP6aVAvi APqpIsURJqCCcQzkaC8MPZr6IvnC7R/45W6Bn0vE+SoQoLrlLToLgFIBj4bbhnhu 4qdwOqW51cYymw0p0AucFxw8hgjENPzvteX7HvuA9OtKkK+a0PJZ42CA59oojmQa rNCDReJut6UIPrH9/8cmDlfEqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5Xdomi BzgaSAL+G/4yE/AeREnqMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC0SgOX35ubQUVdtujK98IQ4C6uUy40bkSc+1TSNlm6EXR35c1ywcr I7mmh3/jzja0I6NAphMrb0jHnfxGtO4XNX3ZU9rtiFnLTpUS2fsuk0V9oshI652W hrUAzUSg3/w2McAEnYDAS4qITOoFgCb+2hDpw5gYIPDkxibyXrCX0ZHfORPcvosI aBDWTSp05wmJ+t4Lc1LiIQRw3iKPDPQWSNftqo3BXIt+CvVr7ZNjoOPaIZUOP7yk R/eacAi/oHnj7BjGL6IaZ6qTykSAkg+r6F30H1NX8tmioonghHyn2I7zhfBqzif8 PG/tpNre9SS77esaekL9DMGPuvhSy2kz -----END CERTIFICATE-----Generated at Sun Apr 6 05:34:33 2025 by rpki-client