$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft File: LFTOW3Q5yME3PII5T2B5FwVy9_0.mft (raw, json) Hash identifier: YO/YvfrdYd0M10zNQqzV3Nqy39VmfbrTh3NmKQSA6EI= Subject key identifier: 6D:92:EA:0E:53:34:DF:40:F5:D3:07:41:51:E5:D1:8D:DE:B8:46:E6 Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD Certificate issuer: /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft Manifest number: 0577 Signing time: Sat 12 Apr 2025 22:56:49 +0000 Manifest this update: Sat 12 Apr 2025 22:56:48 +0000 Manifest next update: Sat 19 Apr 2025 22:56:48 +0000 Files and hashes: 1: LFTOW3Q5yME3PII5T2B5FwVy9_0.crl (hash: WcwN2b5i0gWXzIHW6I6FoZ0fDoItieXi+2FjuDI5NaA=) 2: 26DDF9C4D59311EB9DBD350EC4F9AE02.roa (hash: r1nvlMobRn7ox8IKXb1KWmQHrNC+PsGByKMD0/kqGOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD Validity Not Before: Apr 12 22:56:48 2025 GMT Not After : Apr 19 22:56:48 2025 GMT Subject: CN=67faefb1-ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5e:db:cc:6b:a2:67:65:27:e3:b4:02:b6:af: cb:a3:50:cd:fc:f8:e7:4f:07:28:ff:29:6e:dd:96: 54:d3:92:d0:ff:50:4d:ff:67:4b:90:5d:ee:0b:c5: 0f:91:3f:2d:20:3a:1c:58:a1:a5:58:dc:78:bc:68: 62:c0:e1:36:01:06:d7:f3:1b:44:1f:09:fb:99:1d: b2:33:e7:57:67:f8:22:59:09:04:03:1a:7a:06:6a: 1e:a5:86:c8:4e:30:ee:b2:cc:0b:7f:ab:92:20:cc: 80:88:cb:9e:35:21:98:5c:23:4c:10:80:1b:8a:3e: 46:a5:94:58:ac:48:8b:ea:0d:25:6b:81:42:3d:00: f6:b9:83:87:4f:e7:cb:cb:ce:0d:fc:07:61:d5:a5: 38:17:5f:a7:60:8a:41:65:8b:9c:3d:da:28:0f:f2: 39:31:82:6d:f2:4a:5f:22:65:31:12:65:01:71:03: c7:43:52:e8:40:cc:99:6f:79:e7:76:93:c2:3c:e9: 62:08:ba:d0:a3:57:b1:11:49:44:23:41:ad:39:d7: 5d:15:05:cf:56:4c:e8:6c:d8:ac:d2:f8:38:3b:57: 3e:90:90:25:84:63:43:7e:a5:a7:01:a3:e6:fe:2e: 7c:df:8f:26:35:12:1c:0f:2c:61:5a:93:5c:06:82: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:EA:0E:53:34:DF:40:F5:D3:07:41:51:E5:D1:8D:DE:B8:46:E6 X509v3 Authority Key Identifier: keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:40:05:ad:27:e4:f6:84:0b:65:6b:38:af:70:ee:5e:14:db: 54:24:31:bd:c7:26:9a:e7:9a:e6:dc:67:17:d4:d2:f0:e5:69: 1c:34:31:05:e3:c6:14:92:3b:e7:c8:55:4a:cf:2f:10:2a:80: 32:67:22:50:0c:29:43:c2:61:b5:81:5c:13:f0:7b:22:4f:6c: a0:6e:5f:24:c1:94:2d:e8:4d:70:ce:6a:79:c5:57:b9:13:56: 1b:eb:f7:03:e2:82:ec:fb:b5:9d:4c:87:c3:c8:50:8a:58:5f: fd:9f:cc:3b:d4:e6:90:6b:f1:ae:1f:a6:0b:fc:bb:6c:e1:fd: 1a:a7:53:2e:dd:f7:58:b7:cf:b6:b8:c3:72:32:63:0b:c5:89: 00:e7:6b:47:bf:3f:97:8c:12:58:78:75:1c:ff:24:e3:0b:93: f9:a2:11:0f:c8:46:4e:b0:bb:14:5a:13:98:54:28:9a:61:63: 7a:fa:ac:6c:22:75:d6:0f:2a:81:7b:7d:de:5a:b6:1f:18:89: ed:b9:14:69:61:d5:02:a5:44:2c:c7:6b:ee:e9:5f:5a:82:52: 7f:ee:1c:32:b7:12:4b:e5:25:f3:f7:a8:3e:5f:a4:10:06:34: 44:fb:75:8b:8b:f9:61:1e:3d:69:6e:c3:ae:e7:25:ea:7c:4f: 12:75:6c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyNzExMTAvBgNVBAUTKDJDNTRDRTVCNzQzOUM4QzEzNzNDODIzOTRGNjA3OTE3 MDU3MkY3RkQwHhcNMjUwNDEyMjI1NjQ4WhcNMjUwNDE5MjI1NjQ4WjAYMRYwFAYD VQQDEw02N2ZhZWZiMS1lY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9V7bzGuiZ2Un47QCtq/Lo1DN/PjnTwco/ylu3ZZU05LQ/1BN/2dLkF3uC8UP kT8tIDocWKGlWNx4vGhiwOE2AQbX8xtEHwn7mR2yM+dXZ/giWQkEAxp6BmoepYbI TjDusswLf6uSIMyAiMueNSGYXCNMEIAbij5GpZRYrEiL6g0la4FCPQD2uYOHT+fL y84N/Adh1aU4F1+nYIpBZYucPdooD/I5MYJt8kpfImUxEmUBcQPHQ1LoQMyZb3nn dpPCPOliCLrQo1exEUlEI0GtOdddFQXPVkzobNis0vg4O1c+kJAlhGNDfqWnAaPm /i58348mNRIcDyxhWpNcBoLuZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2S6g5T NN9A9dMHQVHl0Y3euEbmMB8GA1UdIwQYMBaAFCxUzlt0OcjBNzyCOU9geRcFcvf9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI3MS83MjRCREFBMkQ1 OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlNRTNQSUk1VDJCNUZ3Vnk5 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xGVE9XM1E1eU1FM1BJSTVUMkI1RndWeTlfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzI3MS83MjRCREFBMkQ1OEUxMUVCQjc5RDM5ODRDNEY5QUUwMi9MRlRPVzNRNXlN RTNQSUk1VDJCNUZ3Vnk5XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwQAWtJ+T2hAtlazivcO5eFNtUJDG9xyaa55rm3GcX1NLw5WkcNDEF 48YUkjvnyFVKzy8QKoAyZyJQDClDwmG1gVwT8HsiT2ygbl8kwZQt6E1wzmp5xVe5 E1Yb6/cD4oLs+7WdTIfDyFCKWF/9n8w71OaQa/GuH6YL/Lts4f0ap1Mu3fdYt8+2 uMNyMmMLxYkA52tHvz+XjBJYeHUc/yTjC5P5ohEPyEZOsLsUWhOYVCiaYWN6+qxs InXWDyqBe33eWrYfGIntuRRpYdUCpUQsx2vu6V9aglJ/7hwytxJL5SXz96g+X6QQ BjRE+3WLi/lhHj1pbsOu5yXqfE8SdWx4 -----END CERTIFICATE-----Generated at Sun Apr 13 01:31:51 2025 by rpki-client