$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: MR2nqDmwMRb/ObGmKNjepZJT0Uer/5HBaytxCd4icgY= Subject key identifier: 46:3E:2F:D8:B9:EF:5E:8D:7F:E9:EE:95:75:F8:6B:7B:08:B1:8E:C6 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: A0 Signing time: Sat 05 Apr 2025 05:31:22 +0000 Manifest this update: Sat 05 Apr 2025 05:31:22 +0000 Manifest next update: Sat 12 Apr 2025 05:31:22 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: f/BO8a+/fINIQs8ExVPHahwbtWxaGLRxEbNhK7Dt3Vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E Validity Not Before: Apr 5 05:31:22 2025 GMT Not After : Apr 12 05:31:22 2025 GMT Subject: CN=67f0c02a-6a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:ef:bc:ad:33:54:b9:71:3a:b4:cc:a6:a0: ef:45:1b:21:ca:64:04:cf:39:e7:91:ee:a0:55:c0: 2a:0c:8d:f0:f5:52:08:0a:14:c2:1e:30:cb:e5:cb: 78:41:1f:5e:3b:5a:b6:20:6d:72:b4:59:34:11:21: 5d:15:c4:19:d7:3f:cf:37:d5:64:48:a5:ba:52:4c: 4f:39:d2:a0:0c:48:a1:0a:28:90:84:53:10:77:b6: ac:0c:ad:32:89:70:9b:88:97:58:7b:fb:96:c3:98: ca:b6:8c:d8:e2:24:69:ec:db:64:00:a0:69:4d:c2: 40:c1:8f:c0:3a:93:3d:9a:70:14:a3:9c:1c:5b:f5: 54:c3:cc:a3:39:60:41:01:a4:78:e6:a8:44:30:3d: 35:92:8a:f7:07:b3:4c:b0:c3:d2:90:0c:86:3a:1f: 9b:95:b0:fe:2c:27:1c:b5:15:b1:a5:fe:76:6e:6d: 45:9e:dc:68:1c:f6:51:77:41:45:06:3d:7d:f8:52: 36:14:21:a3:d1:81:dd:cc:9b:92:94:a1:c7:9f:06: c9:18:cd:3b:a8:16:51:b9:94:d8:fb:d1:e9:12:8a: 56:1d:43:75:e0:fd:93:b7:e3:9d:88:91:d3:b5:58: db:13:7c:a6:ba:2a:55:ea:37:24:26:a9:ce:a6:f0: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3E:2F:D8:B9:EF:5E:8D:7F:E9:EE:95:75:F8:6B:7B:08:B1:8E:C6 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:92:a5:fe:d8:06:8b:07:7d:e3:29:0e:89:82:a8:8b:ff:88: 98:c8:b8:63:30:0d:12:f2:1d:b7:a8:cd:f9:4e:2a:3d:e7:0b: 6e:93:5a:60:75:3b:57:70:0b:17:10:df:14:77:ba:74:05:c7: 7e:32:60:95:9a:e1:8a:f4:c2:78:28:c2:93:7b:aa:3a:43:9e: e2:34:9c:7d:80:ba:8d:5e:30:3c:d3:2d:5b:3c:cc:20:2c:71: 25:8b:f9:6e:4c:80:a7:45:fd:99:0d:b1:ad:2a:4a:93:ab:f3: ca:fe:28:60:b8:86:2c:14:c7:ed:38:3a:f2:24:d9:18:56:a6: 00:bd:35:2a:c6:80:2a:71:27:98:7c:fb:97:ac:0f:b5:86:fe: d4:38:88:d7:71:d8:d7:69:03:a5:88:f1:22:fb:c2:d1:b1:bd: 53:30:78:90:bd:77:0f:49:d9:77:63:c2:f3:70:6c:75:77:00: 29:5c:a9:aa:21:46:e8:2b:31:e8:c5:fd:db:2d:c5:42:7c:fa: de:71:3d:e0:38:f2:58:3d:11:9b:c0:75:d5:31:07:69:a0:1e: 0e:14:7e:34:19:ba:3a:38:98:49:0a:94:57:52:a6:b1:38:20: e6:a3:8f:1f:ef:ff:64:d4:2d:af:15:dd:df:b0:86:87:76:34: 01:b5:f6:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwNDA1MDUzMTIyWhcNMjUwNDEyMDUzMTIyWjAYMRYwFAYD VQQDEw02N2YwYzAyYS02YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsfvvK0zVLlxOrTMpqDvRRshymQEzznnke6gVcAqDI3w9VIIChTCHjDL5ct4 QR9eO1q2IG1ytFk0ESFdFcQZ1z/PN9VkSKW6UkxPOdKgDEihCiiQhFMQd7asDK0y iXCbiJdYe/uWw5jKtozY4iRp7NtkAKBpTcJAwY/AOpM9mnAUo5wcW/VUw8yjOWBB AaR45qhEMD01kor3B7NMsMPSkAyGOh+blbD+LCcctRWxpf52bm1FntxoHPZRd0FF Bj19+FI2FCGj0YHdzJuSlKHHnwbJGM07qBZRuZTY+9HpEopWHUN14P2Tt+OdiJHT tVjbE3ymuipV6jckJqnOpvC4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY+L9i5 716Nf+nulXX4a3sIsY7GMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwkqX+2AaLB33jKQ6JgqiL/4iYyLhjMA0S8h23qM35Tio95wtuk1pg dTtXcAsXEN8Ud7p0Bcd+MmCVmuGK9MJ4KMKTe6o6Q57iNJx9gLqNXjA80y1bPMwg LHEli/luTICnRf2ZDbGtKkqTq/PK/ihguIYsFMftODryJNkYVqYAvTUqxoAqcSeY fPuXrA+1hv7UOIjXcdjXaQOliPEi+8LRsb1TMHiQvXcPSdl3Y8LzcGx1dwApXKmq IUboKzHoxf3bLcVCfPrecT3gOPJYPRGbwHXVMQdpoB4OFH40Gbo6OJhJCpRXUqax OCDmo48f7/9k1C2vFd3fsIaHdjQBtfaW -----END CERTIFICATE-----Generated at Sat Apr 5 08:47:25 2025 by rpki-client