$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: bm3o6oqj8c4liVu6YANQGXDT1PqTXQAdxVzql3Cs5NQ= Subject key identifier: 2A:0B:0B:29:A2:C0:BF:88:13:09:69:D0:74:48:BB:DD:79:D6:F1:A7 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 014C Signing time: Mon 21 Apr 2025 03:10:44 +0000 Manifest this update: Mon 21 Apr 2025 03:10:44 +0000 Manifest next update: Mon 28 Apr 2025 03:10:43 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: 62t1hNHOkV6MvQZJSidWmS/VCqPLUV2yTzK1E/tRqiQ=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Apr 21 03:10:44 2025 GMT Not After : Apr 28 03:10:43 2025 GMT Subject: CN=6805b734-19d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:e5:d7:3d:7f:fe:88:71:f8:83:32:7e:8f: f0:f1:3c:60:96:68:6b:65:26:3f:bc:8d:2a:1f:38: 68:69:82:76:d9:d0:41:22:54:a3:1e:57:f1:2b:c2: f9:db:50:40:31:3b:a9:4d:4e:f5:77:5d:36:00:78: 72:ad:d7:d3:b4:59:0a:d3:f0:fb:c3:b6:d0:2f:32: f6:eb:a5:0e:d2:01:b6:43:08:3d:88:b7:8b:f1:0f: e3:d3:19:22:d9:39:e7:48:d0:75:33:9e:b4:34:09: 09:cc:5c:44:50:9b:00:da:87:a3:2f:c3:57:2e:6a: 14:82:b3:f8:c6:0d:9c:3c:76:74:8c:2f:bb:7a:e2: aa:26:10:aa:a4:d6:43:a9:5b:e6:13:a6:c1:db:64: af:b7:6b:1b:b7:62:ab:73:0b:73:c2:56:0f:75:a4: 09:39:9d:6f:56:d1:c0:ef:10:cf:e3:fc:02:63:7d: 00:0d:53:00:c2:8d:aa:d0:ca:8a:1e:5d:69:35:3a: 85:8b:6b:b6:a3:66:3c:b7:be:9d:fe:6d:c7:78:8e: e1:08:1a:b3:98:f7:98:c5:54:d7:a4:d0:f9:93:20: 8d:07:ea:e6:4e:2c:6e:0c:38:eb:89:1f:c4:26:80: c6:59:42:38:73:18:36:49:41:61:df:c8:66:6a:a5: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:0B:29:A2:C0:BF:88:13:09:69:D0:74:48:BB:DD:79:D6:F1:A7 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b5:50:5a:58:4d:3d:50:5a:63:b3:ec:eb:4c:c9:2c:44:ce: 4f:ab:0c:61:65:fd:f3:2f:1c:3b:40:91:19:c2:0c:38:21:26: 81:85:86:93:a3:13:d0:4b:94:7c:47:66:a9:4c:1f:3f:0a:a4: 98:8e:2f:6a:77:61:29:41:85:2c:3b:50:6a:01:f9:00:1a:11: 31:dc:a4:fa:da:9d:7c:26:1f:f4:b3:4b:18:02:eb:34:0c:67: e9:2c:1f:c7:74:60:c8:cc:30:03:8f:f4:b3:e1:fd:e4:ec:32: a7:15:fd:98:81:93:39:30:92:97:44:5e:c5:f0:73:8d:0a:e1: 31:8a:f2:d0:c7:dd:ee:d9:33:c0:59:16:6e:6f:0c:39:66:0d: bb:f6:26:77:b2:32:4d:b2:a2:6e:22:fd:00:ed:a5:26:2d:4f: df:51:ac:23:91:f2:38:ff:a9:ee:c4:9d:5d:18:09:96:f2:2e: 34:45:98:c4:35:4c:7d:91:99:1d:ae:c1:15:90:8c:ee:8b:ca: 52:bf:4d:b1:11:b8:33:9b:f4:1f:9f:97:d5:9a:05:39:18:c7: 9d:c8:e8:9f:59:97:a8:e8:a5:41:fa:0d:a8:29:55:77:63:64: 6f:b8:b9:bb:5e:5f:d6:29:26:1e:c0:12:e4:56:2c:6d:91:9e: fc:ca:e4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNDIxMDMxMDQ0WhcNMjUwNDI4MDMxMDQzWjAYMRYwFAYD VQQDEw02ODA1YjczNC0xOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjHl1z1//ohx+IMyfo/w8TxglmhrZSY/vI0qHzhoaYJ22dBBIlSjHlfxK8L5 21BAMTupTU71d102AHhyrdfTtFkK0/D7w7bQLzL266UO0gG2Qwg9iLeL8Q/j0xki 2TnnSNB1M560NAkJzFxEUJsA2oejL8NXLmoUgrP4xg2cPHZ0jC+7euKqJhCqpNZD qVvmE6bB22Svt2sbt2KrcwtzwlYPdaQJOZ1vVtHA7xDP4/wCY30ADVMAwo2q0MqK Hl1pNTqFi2u2o2Y8t76d/m3HeI7hCBqzmPeYxVTXpND5kyCNB+rmTixuDDjriR/E JoDGWUI4cxg2SUFh38hmaqXRVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoLCymi wL+IEwlp0HRIu9151vGnMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAstVBaWE09UFpjs+zrTMksRM5PqwxhZf3zLxw7QJEZwgw4ISaBhYaT oxPQS5R8R2apTB8/CqSYji9qd2EpQYUsO1BqAfkAGhEx3KT62p18Jh/0s0sYAus0 DGfpLB/HdGDIzDADj/Sz4f3k7DKnFf2YgZM5MJKXRF7F8HONCuExivLQx93u2TPA WRZubww5Zg279iZ3sjJNsqJuIv0A7aUmLU/fUawjkfI4/6nuxJ1dGAmW8i40RZjE NUx9kZkdrsEVkIzui8pSv02xEbgzm/Qfn5fVmgU5GMedyOifWZeo6KVB+g2oKVV3 Y2RvuLm7Xl/WKSYewBLkVixtkZ78yuTD -----END CERTIFICATE-----Generated at Tue Apr 22 18:50:49 2025 by rpki-client