$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: kPfutL1naSgqJx/bXEYmYUcgczg6pTciiV/70H5bByY= Subject key identifier: 47:8B:10:0C:CC:82:85:1A:BE:A4:0C:F6:D5:4E:8F:D9:AD:E1:86:E4 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 078E Signing time: Thu 10 Apr 2025 21:15:08 +0000 Manifest this update: Thu 10 Apr 2025 21:15:08 +0000 Manifest next update: Thu 17 Apr 2025 21:15:08 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: q6qCjxTJerSZd3Dhoe/mn9atvemz1+ZZSzkjBOXSnfI=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Apr 10 21:15:08 2025 GMT Not After : Apr 17 21:15:08 2025 GMT Subject: CN=67f834dc-be18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:0a:88:a7:ce:99:6b:cf:5a:b6:03:82:e3: c7:a7:d1:ed:e4:08:3a:45:24:2b:ea:de:e0:49:3d: c2:50:a2:f7:b1:46:29:97:b9:c6:25:f7:f3:ef:4d: ca:c1:eb:74:c0:7c:de:9e:18:df:1a:55:e5:d3:aa: 0c:57:78:37:6a:9e:1d:9d:3e:50:3f:2f:ce:d2:91: 1b:00:57:1d:45:8e:83:81:12:c7:f3:6c:7a:04:33: 9f:a7:43:47:52:cb:6d:e8:8b:d0:93:4a:71:20:16: 23:4e:c1:e3:60:9b:ce:90:7d:5c:83:74:a7:a7:08: 89:3a:5a:ff:15:00:95:47:b4:a5:31:f9:0e:f9:61: fd:2b:f6:0c:36:ae:27:ee:cb:35:8f:d7:ca:45:1b: b6:69:f5:57:b2:1d:5b:1c:1a:b2:ea:8b:3c:f5:ba: 34:8d:18:b1:8a:96:92:57:db:25:1e:61:cc:2b:ee: 00:a3:98:d1:6c:d4:f0:42:ad:81:d2:d9:2c:8d:c5: ca:4b:8d:05:c6:4d:3e:dc:24:20:1e:d2:c2:97:9d: 8f:f3:f0:76:a5:27:bb:60:27:d1:e0:2f:e6:80:cf: 7b:f5:f8:a1:53:e9:66:f6:3e:18:f5:34:20:3a:c7: b7:9d:98:86:32:e5:60:75:3a:e4:49:d2:e2:be:5d: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:10:0C:CC:82:85:1A:BE:A4:0C:F6:D5:4E:8F:D9:AD:E1:86:E4 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:15:64:ee:58:9e:8e:21:e0:62:24:71:e2:dc:2c:22:dc:70: ad:17:9d:05:05:dd:21:5c:29:9a:05:f0:e4:31:9a:fe:cc:eb: 36:d2:26:80:2b:5c:79:cd:73:04:76:4b:bd:49:24:ff:bb:4b: cd:1e:3c:21:60:04:69:e3:6c:eb:80:42:91:98:b6:c5:db:c8: 9e:35:ea:9b:fb:aa:ca:eb:6d:61:29:94:f9:e2:e3:08:a4:67: da:fa:d5:28:93:9b:3a:ab:9f:3c:55:06:b6:99:65:71:4e:cb: 1a:8b:07:3a:b3:1b:1b:2f:3b:da:5e:24:07:df:06:b4:31:56: e7:fc:d2:fb:ce:a5:1a:34:d6:5a:1f:fd:01:da:f4:c2:2b:57: 26:1c:d6:cf:37:62:bb:c5:68:31:6b:d2:44:b6:7a:c3:e8:da: 89:85:81:c3:ca:a6:bd:02:aa:21:56:a1:9f:29:98:6a:cf:ec: 4c:03:26:e1:a2:5f:fe:ec:8d:1d:7a:0a:4a:d7:ae:4b:ea:19: 03:59:60:db:c2:40:ca:47:9e:60:64:6a:f5:df:d9:23:4f:8b: b2:04:99:42:e8:40:5c:e9:3e:04:a8:62:2c:27:3d:ec:e0:ea: f3:f7:c5:7a:67:28:26:ff:15:f3:95:1c:05:ad:16:ed:26:50: 10:2b:05:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUwNDEwMjExNTA4WhcNMjUwNDE3MjExNTA4WjAYMRYwFAYD VQQDEw02N2Y4MzRkYy1iZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gIKiKfOmWvPWrYDguPHp9Ht5Ag6RSQr6t7gST3CUKL3sUYpl7nGJffz703K wet0wHzenhjfGlXl06oMV3g3ap4dnT5QPy/O0pEbAFcdRY6DgRLH82x6BDOfp0NH Ustt6IvQk0pxIBYjTsHjYJvOkH1cg3SnpwiJOlr/FQCVR7SlMfkO+WH9K/YMNq4n 7ss1j9fKRRu2afVXsh1bHBqy6os89bo0jRixipaSV9slHmHMK+4Ao5jRbNTwQq2B 0tksjcXKS40Fxk0+3CQgHtLCl52P8/B2pSe7YCfR4C/mgM979fihU+lm9j4Y9TQg Ose3nZiGMuVgdTrkSdLivl1WawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeLEAzM goUavqQM9tVOj9mt4YbkMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrFWTuWJ6OIeBiJHHi3Cwi3HCtF50FBd0hXCmaBfDkMZr+zOs20iaA K1x5zXMEdku9SST/u0vNHjwhYARp42zrgEKRmLbF28ieNeqb+6rK621hKZT54uMI pGfa+tUok5s6q588VQa2mWVxTssaiwc6sxsbLzvaXiQH3wa0MVbn/NL7zqUaNNZa H/0B2vTCK1cmHNbPN2K7xWgxa9JEtnrD6NqJhYHDyqa9AqohVqGfKZhqz+xMAybh ol/+7I0degpK165L6hkDWWDbwkDKR55gZGr139kjT4uyBJlC6EBc6T4EqGIsJz3s 4Orz98V6Zygm/xXzlRwFrRbtJlAQKwUB -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:11 2025 by rpki-client