$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: BNeuPENcxptXA9jPv5/f4sFdZP2mTj36xBH6VS12/g8= Subject key identifier: 24:28:AB:7E:9E:41:36:89:01:6E:3D:F8:08:6D:66:73:95:47:FA:10 Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 0149 Signing time: Thu 03 Apr 2025 03:29:57 +0000 Manifest this update: Thu 03 Apr 2025 03:29:57 +0000 Manifest next update: Thu 10 Apr 2025 03:29:57 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: YZiFsHHotf3Bqay0GcQH6dThpfodSZQlsnhSBdyUi8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8 Validity Not Before: Apr 3 03:29:57 2025 GMT Not After : Apr 10 03:29:57 2025 GMT Subject: CN=67ee00b5-24ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:52:df:6d:c1:35:79:2d:6d:bd:f7:f5:c4: 35:80:52:e0:86:9d:9f:df:0e:7d:63:ea:ee:f2:c3: 43:00:c2:49:4e:3a:76:14:83:af:f4:db:bc:c6:4b: a5:ee:06:07:ae:15:db:74:9c:13:87:c7:0d:50:b6: 05:a1:83:a5:d7:d2:fb:c5:58:ee:71:7e:73:8a:ce: 70:2b:87:e9:7c:4a:61:ac:ea:0f:b6:ac:a0:d8:ea: c7:01:b9:da:da:68:c6:79:07:89:9e:35:c7:2a:e8: a7:05:3e:31:66:1f:60:b0:7d:1f:26:1a:30:69:1c: 8d:5c:27:13:2b:ca:fe:ed:d1:2b:d9:aa:83:fe:95: d4:74:8d:af:7e:0c:79:69:8f:fc:61:53:b7:c0:84: 8a:bd:65:73:69:46:47:db:35:c5:cb:1a:68:14:63: 2b:03:2a:d4:ec:15:9b:9d:95:28:28:b6:02:80:28: e2:d8:ca:1f:53:2f:52:25:71:8d:86:b3:da:39:2f: ef:e1:c8:82:c4:e8:ec:32:b9:9d:fb:b4:5b:63:5f: 1f:9d:61:ba:0b:6e:24:78:79:2c:da:93:2e:a0:2c: 78:f0:a0:79:a8:c0:25:81:6d:bb:65:1f:cf:a4:cb: 7a:0f:35:c9:96:34:c9:77:90:c3:97:54:25:86:b1: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:AB:7E:9E:41:36:89:01:6E:3D:F8:08:6D:66:73:95:47:FA:10 X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c6:c5:d4:36:ab:45:07:0b:b3:3d:d1:36:ac:7e:77:dd:06: fb:03:b8:89:55:dc:77:a6:31:91:c2:ab:0e:7d:bc:11:8e:43: 55:9e:34:66:1f:a6:19:0c:e7:9c:b1:29:1f:e6:f1:2c:07:c2: 9e:ae:91:3f:a2:b1:21:02:1a:e8:d7:1b:84:d8:c6:47:de:41: f3:b6:8e:dd:84:99:70:da:96:75:28:f2:39:75:2d:94:bb:f7: cb:b7:fe:7e:b2:4f:5e:f5:9e:05:85:dc:f7:d9:f4:e4:76:7b: 27:ee:26:86:b2:22:6a:b8:db:9e:5c:2a:c8:73:29:26:44:b5: 29:e5:0a:47:c7:49:ea:8b:29:78:38:dd:18:13:a4:57:e3:be: a2:17:03:67:59:7e:d1:d2:c7:fa:57:69:16:b2:f7:e7:f4:e4: 1a:4c:18:d7:21:f4:24:fd:6a:7d:fd:2c:5b:bb:cb:24:27:26: f1:3b:82:47:bf:11:f5:8b:9c:b4:b0:3a:d9:c6:7c:88:28:ad: 64:61:c5:1e:7a:1b:61:08:11:b6:5c:99:e0:b4:0c:63:26:ff: dd:af:3e:8e:6e:4c:d7:7b:cd:eb:5e:79:be:d6:d0:93:bf:87: ba:63:c1:f3:58:2e:ec:ca:19:a9:d8:af:5d:56:df:b5:fd:d0: 58:51:5e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUwNDAzMDMyOTU3WhcNMjUwNDEwMDMyOTU3WjAYMRYwFAYD VQQDEw02N2VlMDBiNS0yNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApL1S323BNXktbb339cQ1gFLghp2f3w59Y+ru8sNDAMJJTjp2FIOv9Nu8xkul 7gYHrhXbdJwTh8cNULYFoYOl19L7xVjucX5zis5wK4fpfEphrOoPtqyg2OrHAbna 2mjGeQeJnjXHKuinBT4xZh9gsH0fJhowaRyNXCcTK8r+7dEr2aqD/pXUdI2vfgx5 aY/8YVO3wISKvWVzaUZH2zXFyxpoFGMrAyrU7BWbnZUoKLYCgCji2MofUy9SJXGN hrPaOS/v4ciCxOjsMrmd+7RbY18fnWG6C24keHks2pMuoCx48KB5qMAlgW27ZR/P pMt6DzXJljTJd5DDl1QlhrGU3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQoq36e QTaJAW49+AhtZnOVR/oQMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8xsXUNqtFBwuzPdE2rH533Qb7A7iJVdx3pjGRwqsOfbwRjkNVnjRm H6YZDOecsSkf5vEsB8KerpE/orEhAhro1xuE2MZH3kHzto7dhJlw2pZ1KPI5dS2U u/fLt/5+sk9e9Z4Fhdz32fTkdnsn7iaGsiJquNueXCrIcykmRLUp5QpHx0nqiyl4 ON0YE6RX476iFwNnWX7R0sf6V2kWsvfn9OQaTBjXIfQk/Wp9/Sxbu8skJybxO4JH vxH1i5y0sDrZxnyIKK1kYcUeehthCBG2XJngtAxjJv/drz6ObkzXe83rXnm+1tCT v4e6Y8HzWC7syhmp2K9dVt+1/dBYUV5S -----END CERTIFICATE-----Generated at Fri Apr 4 22:25:00 2025 by rpki-client