$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: yiDAprBWpu6jXiwRCqeEM4zZ3Z/87wkaDdxmlFjY+AE= Subject key identifier: 52:C5:73:4B:F6:91:28:C1:95:5A:CC:D1:FF:55:C6:CE:4F:40:E1:C7 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0AF7 Signing time: Fri 04 Apr 2025 19:27:46 +0000 Manifest this update: Fri 04 Apr 2025 19:27:45 +0000 Manifest next update: Fri 11 Apr 2025 19:27:45 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: j99f4w3lTpY0CowrkvdaxZR8tAxqD/OnWmaZ2WR9k0M=) 2: 6D20C69805F811F0833EAC2FC4F9AE02.roa (hash: mqegBy9CQXgjEaVSay/tvLxEyahjajLb/MPs8C1oBxs=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: 4p0L4amdSdbYZXHNhTEHyTVpgE1An8KXOESZWhCLlbQ=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: eHhYDx0TTrbl06qNq4Uwz8JzG4h29k3aeCeTeHUoPnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B Validity Not Before: Apr 4 19:27:45 2025 GMT Not After : Apr 11 19:27:45 2025 GMT Subject: CN=67f032b2-6af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:7b:48:4a:20:68:64:e1:99:22:45:7b:f4: a4:b9:e6:ca:48:35:9b:1d:b3:11:55:d6:eb:50:d1: 1d:46:7c:b4:2e:c2:61:ca:90:e0:60:be:dd:c8:cc: 95:47:15:6a:17:e1:ae:09:dd:87:f2:8d:01:cd:f5: 47:f1:3d:42:5c:ee:09:a7:36:50:ea:0e:56:12:f9: b6:ea:4c:68:15:ac:ba:c4:78:0a:53:51:75:bc:57: 54:48:98:bc:d7:2f:77:bd:c8:d7:6f:b0:73:66:8d: af:4e:5b:2f:52:ec:88:50:66:dd:35:29:20:f9:ab: 80:aa:8f:2a:06:30:63:57:62:a5:94:15:4a:e3:9f: 13:80:df:af:98:58:2d:dc:d8:29:3b:d6:b2:d6:3e: 42:62:c0:d5:fd:30:94:cc:3d:cc:d1:c3:f1:50:18: ef:b3:71:32:b4:a6:c3:96:97:d8:9d:25:0b:e7:63: 20:66:ed:6d:55:fc:aa:70:d5:52:b4:38:94:00:81: 63:48:2e:3a:ee:e0:ac:a8:69:0a:9f:98:44:01:b2: ce:8e:f4:66:c6:f2:ef:0f:ef:05:8e:99:97:51:9e: 09:87:dd:09:de:fe:f9:bb:5c:a1:7e:9e:e8:00:25: 56:54:86:0f:b3:6e:60:10:c6:84:30:09:83:bf:af: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:73:4B:F6:91:28:C1:95:5A:CC:D1:FF:55:C6:CE:4F:40:E1:C7 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:cc:4b:4e:96:b2:fe:c9:f0:85:3a:31:a3:c2:67:ea:40:ee: ca:0e:5a:c1:72:f4:21:0a:49:02:09:76:ca:12:d7:cd:43:42: bf:c9:f3:e9:f1:98:9b:93:16:0a:ee:f3:ed:f4:d3:0c:6f:cd: 02:61:89:d9:f1:73:f8:f5:53:79:48:d6:48:80:d0:5b:4c:a6: 7d:d5:4d:7b:c3:9b:21:e8:20:91:51:b5:2c:a4:8e:c2:9b:62: b2:af:1c:b5:f5:95:22:e1:32:52:0c:3b:f6:45:de:57:69:73: 1e:79:f6:46:ae:16:64:89:a5:9e:78:f3:b5:74:52:d0:84:ca: 61:e1:e5:36:7b:67:43:e2:ca:5c:48:bb:cd:7d:8a:06:44:fc: d0:90:b0:bc:8e:c1:31:ff:eb:2a:52:48:32:09:e9:01:2b:4d: ec:3e:79:d6:ce:b8:6a:06:58:15:90:dc:12:f1:3a:c0:af:aa: 2c:d2:b5:30:5d:eb:84:56:db:bf:37:fa:0e:e6:a5:52:ed:ef: 0d:63:cf:37:cf:e1:29:7e:28:14:d4:ef:fa:7e:ad:6b:a3:87: 88:14:70:b4:48:12:b6:a6:a0:90:e4:4c:40:75:4c:09:76:2d: f0:c7:78:53:3d:db:bd:71:83:fa:d8:82:16:00:4f:a4:96:82: 1b:f5:de:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwNDA0MTkyNzQ1WhcNMjUwNDExMTkyNzQ1WjAYMRYwFAYD VQQDEw02N2YwMzJiMi02YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG57SEogaGThmSJFe/SkuebKSDWbHbMRVdbrUNEdRny0LsJhypDgYL7dyMyV RxVqF+GuCd2H8o0BzfVH8T1CXO4JpzZQ6g5WEvm26kxoFay6xHgKU1F1vFdUSJi8 1y93vcjXb7BzZo2vTlsvUuyIUGbdNSkg+auAqo8qBjBjV2KllBVK458TgN+vmFgt 3NgpO9ay1j5CYsDV/TCUzD3M0cPxUBjvs3EytKbDlpfYnSUL52MgZu1tVfyqcNVS tDiUAIFjSC467uCsqGkKn5hEAbLOjvRmxvLvD+8FjpmXUZ4Jh90J3v75u1yhfp7o ACVWVIYPs25gEMaEMAmDv69VYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLFc0v2 kSjBlVrM0f9Vxs5PQOHHMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjzEtOlrL+yfCFOjGjwmfqQO7KDlrBcvQhCkkCCXbKEtfNQ0K/yfPp 8ZibkxYK7vPt9NMMb80CYYnZ8XP49VN5SNZIgNBbTKZ91U17w5sh6CCRUbUspI7C m2Kyrxy19ZUi4TJSDDv2Rd5XaXMeefZGrhZkiaWeePO1dFLQhMph4eU2e2dD4spc SLvNfYoGRPzQkLC8jsEx/+sqUkgyCekBK03sPnnWzrhqBlgVkNwS8TrAr6os0rUw XeuEVtu/N/oO5qVS7e8NY883z+EpfigU1O/6fq1ro4eIFHC0SBK2pqCQ5ExAdUwJ di3wx3hTPdu9cYP62IIWAE+kloIb9d5s -----END CERTIFICATE-----Generated at Sat Apr 5 08:11:33 2025 by rpki-client