$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft File: lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft (raw, json) Hash identifier: 3Pu6fmpBZiXSvvvwyLS+Pu1TG6sPv16pESpFBVZupPc= Subject key identifier: 7E:F4:8D:0E:71:03:31:F6:AB:E8:11:A2:16:40:8C:E4:7D:8F:17:55 Authority key identifier: 94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D Certificate issuer: /CN=A91E41C9/serialNumber=9470E76108063E4F7C64AD43D076BC11AE1FDB5D Certificate serial: 0868 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft Manifest number: 0862 Signing time: Wed 02 Apr 2025 20:42:45 +0000 Manifest this update: Wed 02 Apr 2025 20:42:44 +0000 Manifest next update: Wed 09 Apr 2025 20:42:44 +0000 Files and hashes: 1: lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl (hash: sWyHShOKwaqc1acwxcHAYNmIdE9NTw1ng7YRZEE6PwQ=) 2: 2C74B00CF70011EA8EFF4C67C4F9AE02.roa (hash: tCsERzsAtsk+5phQVU01aXCd1wv6EXGawIRg0i0oP6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9 Validity Not Before: Apr 2 20:42:44 2025 GMT Not After : Apr 9 20:42:44 2025 GMT Subject: CN=67eda145-f646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:73:f1:a3:a2:ec:15:b2:d9:fb:16:0a:97: ed:76:10:a9:e2:b6:83:27:7f:03:ef:4a:93:a6:e6: 4a:1a:e3:f8:c4:47:a1:10:d3:ff:76:a0:a4:38:e8: d2:fc:1f:41:4e:5e:bf:78:fb:75:39:1b:0d:09:4a: 51:c0:2e:2b:cc:1b:3b:83:c3:82:61:62:34:7f:b1: d6:6e:50:68:cf:e7:48:67:1b:5c:d9:df:f2:d8:37: 36:c3:b7:00:7c:a2:50:99:b1:92:75:1e:df:90:97: 64:ef:76:06:10:12:fc:be:6a:96:dc:da:83:37:e1: 8a:79:12:86:37:11:90:64:8b:41:17:8b:27:ea:c4: 6a:05:94:aa:28:22:8d:a5:f1:43:9d:fa:5e:25:6f: b4:d2:f8:67:7f:fe:87:4a:77:ea:75:5e:fe:6c:90: 5e:9d:9a:55:6c:28:aa:ff:13:10:a9:b4:7f:e4:b8: 07:c1:1a:77:a5:82:d8:4d:23:36:f7:01:fa:3b:e0: 11:25:8f:cb:5d:7a:2e:84:0f:30:5d:ed:4d:08:9d: 0b:2a:08:40:9f:1d:d7:8c:8e:16:e4:eb:6d:1a:a0: 4d:c8:07:c2:7e:95:23:a6:bf:be:54:e9:da:8e:87: b8:83:6f:99:6b:7b:a9:fc:4d:42:55:96:4c:01:1f: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:8D:0E:71:03:31:F6:AB:E8:11:A2:16:40:8C:E4:7D:8F:17:55 X509v3 Authority Key Identifier: keyid:94:70:E7:61:08:06:3E:4F:7C:64:AD:43:D0:76:BC:11:AE:1F:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lHDnYQgGPk98ZK1D0Ha8Ea4f210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/lHDnYQgGPk98ZK1D0Ha8Ea4f210.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:31:de:27:a7:57:e9:48:6a:af:ee:4d:ee:74:e8:98:37:ac: 51:bf:d9:75:74:0a:bf:6d:d3:df:82:f5:80:5b:a5:a3:d9:51: 2d:05:34:e7:31:b2:32:9a:02:c5:43:fe:86:81:e3:8e:92:71: 04:9f:b2:5f:cd:61:8d:88:0e:fd:d3:a4:6c:9a:68:41:f4:6f: 48:50:2a:73:b7:7d:a6:52:d9:4d:22:65:0e:54:cf:89:c6:a2: 71:4c:81:b0:7e:42:15:f9:32:c7:f7:f4:ee:13:98:5e:74:89: ba:17:d1:b4:b6:e6:03:ca:62:65:b0:8e:b6:31:b4:09:13:68: eb:a8:87:10:4c:68:c2:57:00:26:64:44:5c:9f:83:72:27:36: d3:84:42:f3:ad:37:21:db:f0:3a:28:e2:9c:46:88:3c:b6:bc: 3e:46:7a:fe:e6:27:13:90:69:b2:da:86:b1:3f:9a:d8:53:b3: 32:82:50:07:9b:e3:78:32:c3:7a:bb:d2:d4:30:36:a1:15:10: 30:4b:0f:cb:d2:98:ea:48:a9:35:6c:66:07:0c:aa:fb:8e:ca: 5c:f6:eb:f1:ae:05:f0:f3:d1:a7:16:db:76:ea:0f:7b:2f:83: 86:56:9a:3c:f7:2d:8c:d5:bf:f9:03:6f:12:20:7f:f8:ab:c1: 97:76:73:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQxQzkxMTAvBgNVBAUTKDk0NzBFNzYxMDgwNjNFNEY3QzY0QUQ0M0QwNzZCQzEx QUUxRkRCNUQwHhcNMjUwNDAyMjA0MjQ0WhcNMjUwNDA5MjA0MjQ0WjAYMRYwFAYD VQQDEw02N2VkYTE0NS1mNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0Fz8aOi7BWy2fsWCpftdhCp4raDJ38D70qTpuZKGuP4xEehENP/dqCkOOjS /B9BTl6/ePt1ORsNCUpRwC4rzBs7g8OCYWI0f7HWblBoz+dIZxtc2d/y2Dc2w7cA fKJQmbGSdR7fkJdk73YGEBL8vmqW3NqDN+GKeRKGNxGQZItBF4sn6sRqBZSqKCKN pfFDnfpeJW+00vhnf/6HSnfqdV7+bJBenZpVbCiq/xMQqbR/5LgHwRp3pYLYTSM2 9wH6O+ARJY/LXXouhA8wXe1NCJ0LKghAnx3XjI4W5OttGqBNyAfCfpUjpr++VOna joe4g2+Za3up/E1CVZZMAR/chQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH70jQ5x AzH2q+gRohZAjOR9jxdVMB8GA1UdIwQYMBaAFJRw52EIBj5PfGStQ9B2vBGuH9td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDFDOS80OUJEOURBNkMw RjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1BrOThaSzFEMEhhOEVhNGYy MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xIRG5ZUWdHUGs5OFpLMUQwSGE4RWE0ZjIxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDFDOS80OUJEOURBNkMwRjgxMUVBOEFDNkM0NkNDNEY5QUUwMi9sSERuWVFnR1Br OThaSzFEMEhhOEVhNGYyMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPMd4np1fpSGqv7k3udOiYN6xRv9l1dAq/bdPfgvWAW6Wj2VEtBTTn MbIymgLFQ/6GgeOOknEEn7JfzWGNiA7906RsmmhB9G9IUCpzt32mUtlNImUOVM+J xqJxTIGwfkIV+TLH9/TuE5hedIm6F9G0tuYDymJlsI62MbQJE2jrqIcQTGjCVwAm ZERcn4NyJzbThELzrTch2/A6KOKcRog8trw+Rnr+5icTkGmy2oaxP5rYU7MyglAH m+N4MsN6u9LUMDahFRAwSw/L0pjqSKk1bGYHDKr7jspc9uvxrgXw89GnFtt26g97 L4OGVpo89y2M1b/5A28SIH/4q8GXdnO+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:51 2025 by rpki-client