$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft File: LIi8YKOEeXk7VUcMN37SPqAtByI.mft (raw, json) Hash identifier: 6+njmmnvXBw09rQV6jl46031YbHeHt6V0Jhup1oHjbc= Subject key identifier: 70:36:AD:BE:08:AE:0A:D8:0A:A5:0A:C5:B5:3A:DB:12:6D:01:81:3F Authority key identifier: 2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 Certificate issuer: /CN=A91D5114/serialNumber=2C88BC60A38479793B55470C377ED23EA02D0722 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft Manifest number: 016C Signing time: Sat 29 Mar 2025 03:23:47 +0000 Manifest this update: Sat 29 Mar 2025 03:23:47 +0000 Manifest next update: Sat 05 Apr 2025 03:23:47 +0000 Files and hashes: 1: LIi8YKOEeXk7VUcMN37SPqAtByI.crl (hash: /IemVblALtFzWdX//wsqY9bLQYSyTiN3hI6pcW3RvuM=) 2: 97EFA28EE5A911ED80EF757BC4F9AE02.roa (hash: AWrudQQgzJLS7MSlB50m43MehkidwQ5Ce89Ne/Grvwo=) 3: ED0DECA6E5A611EDADDD1074C4F9AE02.roa (hash: z3xacBjovMyDRqTM7g6iTpB77mlZVh09tcUD0xiN+xY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5114 Validity Not Before: Mar 29 03:23:47 2025 GMT Not After : Apr 5 03:23:47 2025 GMT Subject: CN=67e767c3-66b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:1f:c0:0c:00:a2:68:b2:d5:94:7c:43:37: 8a:82:9a:89:23:96:3a:a6:9e:b0:14:74:3b:5a:3d: 05:bb:74:62:4f:a1:3f:d3:53:6d:de:9e:b7:76:6b: 37:97:0a:59:8c:96:85:8b:1c:48:e8:54:a3:b8:b4: 57:35:6f:55:fc:40:b9:68:21:b7:77:b0:01:b9:e3: cd:e2:b6:7f:73:81:de:1b:88:8e:8a:86:34:5a:ab: ef:1e:60:c9:65:57:8a:a2:93:37:ae:a5:24:60:08: 98:23:1d:5b:59:5d:49:b7:6a:7e:94:c4:66:fe:48: 8b:1b:d1:21:22:aa:bd:66:03:9f:75:b2:0c:5c:d6: 6f:c0:2d:78:cf:22:84:67:dd:cc:77:d4:ac:8a:43: e9:90:d1:dc:42:da:b4:53:9c:90:f7:b6:34:e3:f2: 15:d7:df:77:02:31:cf:ea:0b:d1:10:7e:9e:6a:76: 67:73:05:7c:4d:c1:1a:cb:f5:c1:d2:06:4c:19:32: f0:b8:12:37:5b:da:1c:1f:23:8a:c8:31:a3:8d:b2: c3:ef:14:80:c3:23:17:31:4f:dc:9f:b8:d8:ef:ff: 84:79:c4:15:d5:c9:ca:1a:d3:95:76:d5:83:05:29: 01:e9:3e:2a:5a:90:42:01:a9:ed:6c:f8:30:98:46: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:AD:BE:08:AE:0A:D8:0A:A5:0A:C5:B5:3A:DB:12:6D:01:81:3F X509v3 Authority Key Identifier: keyid:2C:88:BC:60:A3:84:79:79:3B:55:47:0C:37:7E:D2:3E:A0:2D:07:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIi8YKOEeXk7VUcMN37SPqAtByI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5114/34E19E88E5A211ED808CF377C4F9AE02/LIi8YKOEeXk7VUcMN37SPqAtByI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a8:c4:3e:32:e7:e4:f7:68:59:55:70:5b:f6:05:85:cb:26: 6f:9e:f7:d7:e4:cb:6c:08:7b:ca:5f:53:f0:4f:89:04:8b:b9: 90:b6:ae:83:7b:f6:0d:79:a3:61:54:9c:f8:51:6a:20:0c:46: 9a:56:6b:f4:67:84:ee:d4:08:72:94:77:70:a2:31:7a:0f:16: d1:6e:b7:54:46:4a:9f:e3:f1:ec:78:13:82:0d:2d:a2:3c:1b: 82:48:fd:2f:7e:76:74:fa:1e:10:3a:ac:2b:d3:23:43:29:69: f7:08:4d:85:57:19:52:2c:15:42:0d:a5:4f:f8:95:09:db:0a: b7:39:84:48:8c:25:18:d1:44:ac:0e:06:7f:e7:52:af:e9:dd: d8:25:1f:ae:25:a2:0e:9e:fe:00:59:dc:bc:6a:e7:c6:75:84: 56:ab:06:e4:cc:42:fe:7c:cd:ab:b8:bb:ee:d3:f0:10:00:da: 5f:1f:ed:74:6c:c6:ea:58:61:a4:1e:27:29:5e:2d:a8:b1:d2: 67:08:3f:57:b7:84:e7:6c:41:6c:19:cf:a7:4c:62:5e:0f:36: 59:e9:9e:f6:83:3d:30:4d:47:95:76:a1:8b:af:ce:34:43:7b: a9:79:fc:4f:f7:be:b6:b6:b0:4c:88:e4:cc:24:35:9b:6c:a9: ce:e9:28:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxMTQxMTAvBgNVBAUTKDJDODhCQzYwQTM4NDc5NzkzQjU1NDcwQzM3N0VEMjNF QTAyRDA3MjIwHhcNMjUwMzI5MDMyMzQ3WhcNMjUwNDA1MDMyMzQ3WjAYMRYwFAYD VQQDEw02N2U3NjdjMy02NmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4wfwAwAomiy1ZR8QzeKgpqJI5Y6pp6wFHQ7Wj0Fu3RiT6E/01Nt3p63dms3 lwpZjJaFixxI6FSjuLRXNW9V/EC5aCG3d7ABuePN4rZ/c4HeG4iOioY0WqvvHmDJ ZVeKopM3rqUkYAiYIx1bWV1Jt2p+lMRm/kiLG9EhIqq9ZgOfdbIMXNZvwC14zyKE Z93Md9SsikPpkNHcQtq0U5yQ97Y04/IV1993AjHP6gvREH6eanZncwV8TcEay/XB 0gZMGTLwuBI3W9ocHyOKyDGjjbLD7xSAwyMXMU/cn7jY7/+EecQV1cnKGtOVdtWD BSkB6T4qWpBCAantbPgwmEa5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA2rb4I rgrYCqUKxbU62xJtAYE/MB8GA1UdIwQYMBaAFCyIvGCjhHl5O1VHDDd+0j6gLQci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTExNC8zNEUxOUU4OEU1 QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVYazdWVWNNTjM3U1BxQXRC eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJaThZS09FZVhrN1ZVY01OMzdTUHFBdEJ5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTExNC8zNEUxOUU4OEU1QTIxMUVEODA4Q0YzNzdDNEY5QUUwMi9MSWk4WUtPRWVY azdWVWNNTjM3U1BxQXRCeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaqMQ+Mufk92hZVXBb9gWFyyZvnvfX5MtsCHvKX1PwT4kEi7mQtq6D e/YNeaNhVJz4UWogDEaaVmv0Z4Tu1AhylHdwojF6DxbRbrdURkqf4/HseBOCDS2i PBuCSP0vfnZ0+h4QOqwr0yNDKWn3CE2FVxlSLBVCDaVP+JUJ2wq3OYRIjCUY0USs DgZ/51Kv6d3YJR+uJaIOnv4AWdy8aufGdYRWqwbkzEL+fM2ruLvu0/AQANpfH+10 bMbqWGGkHicpXi2osdJnCD9Xt4TnbEFsGc+nTGJeDzZZ6Z72gz0wTUeVdqGLr840 Q3upefxP9762trBMiOTMJDWbbKnO6SgR -----END CERTIFICATE-----Generated at Fri Apr 4 22:26:57 2025 by rpki-client