$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: mMjsXkvcXpkktP01eachMf0nZ2t0650mzUQA6UvyRSQ= Subject key identifier: 1F:F4:0B:49:C3:A6:83:D3:70:0D:B9:19:11:BE:A7:80:C3:9A:55:93 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01AC Signing time: Sat 31 May 2025 02:53:49 +0000 Manifest this update: Sat 31 May 2025 02:53:49 +0000 Manifest next update: Sat 07 Jun 2025 02:53:49 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: YppGugh0QnOsvlNkRg5VX1RA3mSaadOgFiRgXsRYRuI=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: R2fgHMU976+Qe8LJMOcQoSeVupcwkHm/BpOIqV/u37U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: May 31 02:53:49 2025 GMT Not After : Jun 7 02:53:49 2025 GMT Subject: CN=683a6f3d-b0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:ff:15:d2:d8:9b:2e:7a:ff:60:eb:59:1f: cc:5b:25:54:7a:8a:da:b9:20:30:ef:35:6d:5e:76: c5:8d:a9:4a:85:f4:a6:14:fd:7e:1e:28:44:0f:9c: 9c:b6:e5:41:47:46:18:e6:57:07:3b:99:39:46:9e: a9:be:dc:3a:c3:6a:0a:9e:ce:2d:82:98:15:02:ef: 70:a9:91:c0:41:b0:d4:74:08:56:e2:dd:1f:2c:27: 75:e3:6c:65:68:17:16:98:f6:77:08:f8:c2:2a:4c: b2:c9:8a:af:e1:b5:f4:df:5e:0b:08:df:b7:2c:de: 3f:01:25:e5:bb:46:8b:24:e0:bd:41:74:66:f0:28: 18:72:b7:94:0d:b1:b6:aa:25:1a:ad:7f:8a:2b:fa: 0b:9a:70:31:c7:0b:38:f9:60:ea:85:d9:a3:cc:03: c2:1d:9b:25:17:70:42:ee:56:03:4b:32:c2:61:d8: 2e:18:7d:3d:92:71:34:99:76:af:ab:85:13:0a:5a: 9a:d0:c2:d7:d6:ae:06:d4:c7:59:8e:05:35:87:68: d7:4a:4e:2a:8c:30:9f:8e:a0:8c:c4:f8:86:fd:fa: 94:2b:9b:b1:98:34:47:c6:8b:51:95:34:02:37:4f: b0:8f:51:e8:f7:1a:f9:5a:14:ee:59:f0:fb:93:00: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:0B:49:C3:A6:83:D3:70:0D:B9:19:11:BE:A7:80:C3:9A:55:93 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:f3:38:00:f4:6c:ff:c3:9b:37:44:c2:6f:ef:79:17:bb:ea: 78:09:2e:c4:08:4a:fa:5f:a8:99:b0:1c:13:15:97:ab:3e:e8: 82:1b:9c:79:90:16:1d:72:4b:10:39:75:12:82:f2:db:64:fa: a7:25:40:01:5d:d7:56:59:47:74:ec:d9:6d:dc:68:54:82:19: 9e:bd:76:ed:25:a8:6b:8f:b0:bd:a9:29:a0:ef:93:ab:2a:c8: 23:39:b1:0d:05:0c:03:e4:30:58:20:b0:ae:31:9a:74:e4:c4: c8:cf:02:a7:d7:21:23:d6:4a:cc:6b:67:bf:f7:59:f4:f2:39: f7:7f:f7:6b:f9:d4:44:07:06:6a:0b:64:0b:fb:5c:bc:5f:9a: cb:a7:60:19:d7:1b:dc:04:5c:09:c5:d5:3d:2c:60:22:e5:eb: 42:0e:6d:2d:a7:6c:6f:59:1f:79:4a:0e:d4:f5:de:c7:8f:34: cf:6f:e5:c0:97:d9:8d:a8:b2:be:e0:c5:88:56:dc:f1:6a:9e: 27:9e:47:c2:7c:4f:da:02:5f:29:22:73:6f:23:25:a0:12:48: 01:6f:69:c2:b6:21:6d:9b:87:62:01:ee:8e:a7:62:ae:0d:fa: a8:40:65:3e:e0:88:72:71:2f:d8:42:50:25:a9:3e:e2:94:e7: b5:f0:08:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwNTMxMDI1MzQ5WhcNMjUwNjA3MDI1MzQ5WjAYMRYwFAYD VQQDEw02ODNhNmYzZC1iMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ7/FdLYmy56/2DrWR/MWyVUeorauSAw7zVtXnbFjalKhfSmFP1+HihED5yc tuVBR0YY5lcHO5k5Rp6pvtw6w2oKns4tgpgVAu9wqZHAQbDUdAhW4t0fLCd142xl aBcWmPZ3CPjCKkyyyYqv4bX0314LCN+3LN4/ASXlu0aLJOC9QXRm8CgYcreUDbG2 qiUarX+KK/oLmnAxxws4+WDqhdmjzAPCHZslF3BC7lYDSzLCYdguGH09knE0mXav q4UTClqa0MLX1q4G1MdZjgU1h2jXSk4qjDCfjqCMxPiG/fqUK5uxmDRHxotRlTQC N0+wj1Ho9xr5WhTuWfD7kwDxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/0C0nD poPTcA25GRG+p4DDmlWTMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDj8zgA9Gz/w5s3RMJv73kXu+p4CS7ECEr6X6iZsBwTFZerPuiCG5x5 kBYdcksQOXUSgvLbZPqnJUABXddWWUd07Nlt3GhUghmevXbtJahrj7C9qSmg75Or KsgjObENBQwD5DBYILCuMZp05MTIzwKn1yEj1krMa2e/91n08jn3f/dr+dREBwZq C2QL+1y8X5rLp2AZ1xvcBFwJxdU9LGAi5etCDm0tp2xvWR95Sg7U9d7HjzTPb+XA l9mNqLK+4MWIVtzxap4nnkfCfE/aAl8pInNvIyWgEkgBb2nCtiFtm4diAe6Op2Ku DfqoQGU+4IhycS/YQlAlqT7ilOe18Aha -----END CERTIFICATE-----Generated at Sat May 31 17:47:20 2025 by rpki-client