$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: 4TE4x6pENeGt5lut1RWFkYuV1s/tgsy3i8ydHyCqONM= Subject key identifier: 1A:B4:C6:88:0E:DD:9E:10:38:C7:D5:F4:0A:7B:31:B0:76:77:FA:FA Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 0983 Signing time: Wed 02 Apr 2025 20:11:44 +0000 Manifest this update: Wed 02 Apr 2025 20:11:43 +0000 Manifest next update: Wed 09 Apr 2025 20:11:43 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: OJQeRmnUBaG66HftktWljVjWajAqgVB8+YXywJJRCV8=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: p8tYT8YIzrMYfS8FEgPfOhyzQ3A1i1G+CgkjUdJPswc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF Validity Not Before: Apr 2 20:11:43 2025 GMT Not After : Apr 9 20:11:43 2025 GMT Subject: CN=67ed99ff-17ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:aa:16:da:a3:53:e7:ce:f3:97:fa:7a:2f: 48:aa:8f:0d:48:c1:ec:78:db:96:51:36:86:7e:9b: 29:d4:09:41:18:f9:56:a9:2d:b3:9c:e3:3b:a5:b4: 1d:48:00:7a:05:9d:fb:3f:be:11:80:17:62:89:a3: 8d:7e:10:7e:ea:4a:f1:f8:4e:71:bb:55:c0:62:44: c5:61:b0:ee:52:bf:9b:7d:b2:9e:a6:be:60:56:ca: 34:09:f5:b8:28:f9:14:bb:17:9f:9e:72:98:67:5c: ff:01:50:49:c4:ba:b5:f3:c5:74:ed:73:d9:fc:19: 03:de:20:6c:26:fc:ec:23:90:a9:f1:b0:f8:1d:3e: 6a:5e:4f:14:8f:39:81:11:a3:59:6d:35:49:be:37: a2:f7:15:80:86:33:f5:bb:56:83:19:d1:31:56:44: 7c:26:15:af:30:2e:40:53:d7:b7:cc:7a:84:dd:47: d0:de:7c:79:f5:c5:b6:10:94:b2:c1:00:06:8f:16: f0:c3:43:1d:09:64:e7:f6:04:10:03:3c:2c:7c:01: 9d:12:c0:8a:01:ea:c6:be:03:da:bd:a9:87:d4:16: 8d:57:d1:f9:df:73:0a:c4:46:94:7f:dd:35:31:6a: 38:fc:33:bc:33:4a:6b:67:6f:6d:ac:83:61:8e:a2: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:C6:88:0E:DD:9E:10:38:C7:D5:F4:0A:7B:31:B0:76:77:FA:FA X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b6:27:7d:91:f4:cf:c5:d8:27:56:47:77:ba:2c:39:a3:cb: 6a:72:b6:42:ed:da:7a:e6:12:43:4f:f6:79:ac:85:19:0e:06: 76:67:e0:89:14:c6:71:71:79:40:f4:80:34:60:80:8a:f5:04: ff:8a:e3:87:dd:f7:9e:5e:ed:13:10:02:44:82:45:3a:b0:95: 6d:c0:da:38:5d:cd:61:08:a4:f3:29:d6:4f:2d:64:40:28:d1: f3:bb:7e:8f:7b:a5:57:5a:3e:f3:00:e1:69:0a:32:89:9b:19: 3a:59:c1:2e:ef:dc:d4:ce:81:93:80:5a:db:c3:15:c7:8b:79: 04:77:c7:db:ad:2e:40:00:50:b5:5a:b1:7b:5c:ad:34:2a:f0: b7:7b:b6:10:8e:48:89:4a:24:d9:79:be:54:a5:42:4b:ec:16: 21:91:f5:13:66:e5:f8:16:a9:16:e2:06:1a:6f:62:bc:49:34: 45:9f:9f:c1:93:92:b4:fb:ff:e4:93:03:dc:a4:91:5d:1a:ee: 7a:7f:18:13:36:19:d4:eb:1f:bc:05:52:bb:8f:3d:db:77:7a: 0c:5f:99:e9:d2:2a:6e:4b:03:f4:46:37:87:d3:e9:b3:86:3e: a5:58:be:dd:83:36:2f:c9:96:f5:d1:ff:80:0a:12:12:1f:7e: a8:d6:51:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwNDAyMjAxMTQzWhcNMjUwNDA5MjAxMTQzWjAYMRYwFAYD VQQDEw02N2VkOTlmZi0xN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoyqFtqjU+fO85f6ei9Iqo8NSMHseNuWUTaGfpsp1AlBGPlWqS2znOM7pbQd SAB6BZ37P74RgBdiiaONfhB+6krx+E5xu1XAYkTFYbDuUr+bfbKepr5gVso0CfW4 KPkUuxefnnKYZ1z/AVBJxLq188V07XPZ/BkD3iBsJvzsI5Cp8bD4HT5qXk8UjzmB EaNZbTVJvjei9xWAhjP1u1aDGdExVkR8JhWvMC5AU9e3zHqE3UfQ3nx59cW2EJSy wQAGjxbww0MdCWTn9gQQAzwsfAGdEsCKAerGvgPavamH1BaNV9H533MKxEaUf901 MWo4/DO8M0prZ29trINhjqIibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq0xogO 3Z4QOMfV9Ap7MbB2d/r6MB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCtid9kfTPxdgnVkd3uiw5o8tqcrZC7dp65hJDT/Z5rIUZDgZ2Z+CJ FMZxcXlA9IA0YICK9QT/iuOH3feeXu0TEAJEgkU6sJVtwNo4Xc1hCKTzKdZPLWRA KNHzu36Pe6VXWj7zAOFpCjKJmxk6WcEu79zUzoGTgFrbwxXHi3kEd8fbrS5AAFC1 WrF7XK00KvC3e7YQjkiJSiTZeb5UpUJL7BYhkfUTZuX4FqkW4gYab2K8STRFn5/B k5K0+//kkwPcpJFdGu56fxgTNhnU6x+8BVK7jz3bd3oMX5np0ipuSwP0RjeH0+mz hj6lWL7dgzYvyZb10f+AChISH36o1lH2 -----END CERTIFICATE-----Generated at Fri Apr 4 18:18:41 2025 by rpki-client