$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft File: Lv74nW1YMOr9plod8ZRuR6FEpBk.mft (raw, json) Hash identifier: sI/lqUsx66raEwgYZ1JEZxegAJzqt+rcGHeToaS6AnM= Subject key identifier: 8B:98:A9:BF:68:66:EA:90:D9:C9:50:53:9F:61:09:9D:C5:63:5E:67 Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft Manifest number: 14 Signing time: Sat 31 May 2025 07:33:43 +0000 Manifest this update: Sat 31 May 2025 07:33:43 +0000 Manifest next update: Sat 07 Jun 2025 07:33:43 +0000 Files and hashes: 1: Lv74nW1YMOr9plod8ZRuR6FEpBk.crl (hash: 4PlRKr01RBHXxEQUjw0aKqo/7/W8D+aWjjvnAl0O/Fk=) 2: E7930D061E6111F098E32F79C4F9AE02.roa (hash: iqZbom0z7ztlqp3GEXt64uCWXDCec+1Lyn/WcRebU04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: May 31 07:33:43 2025 GMT Not After : Jun 7 07:33:43 2025 GMT Subject: CN=683ab0d7-8ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:58:36:3c:58:fc:a3:09:22:94:d1:64:9d: 32:dd:9f:8d:9d:22:ee:a5:6a:81:8e:97:33:4f:65: c9:52:7f:95:24:10:9d:48:cd:9d:5f:c1:1b:cf:5c: 40:2e:47:50:fc:55:f3:6e:71:6d:6b:8a:e1:35:bc: ab:de:aa:b5:31:d1:96:64:ae:ad:4d:d8:34:b3:89: ab:60:94:0c:df:67:95:00:6c:d4:8e:80:86:54:6e: b2:c2:78:8c:f6:69:f3:ba:32:e9:12:ad:cc:0e:92: f3:44:45:f3:58:ca:2f:38:c6:bb:17:86:3a:56:2e: ff:b8:f6:d0:a1:90:bb:55:c2:8f:5e:1c:25:7c:1f: 3a:a0:bf:cc:2f:3f:ca:d3:9b:28:cd:18:4d:e9:3a: 8d:3a:15:0b:de:23:06:56:69:69:56:07:98:4a:17: 00:80:33:76:73:f3:96:67:9e:04:cc:d5:a2:bc:77: a0:87:84:62:f8:02:c8:a8:e5:57:ab:b3:2c:5c:08: 19:5d:c3:20:28:b6:ba:f6:27:74:84:b2:83:3f:ae: 98:45:1f:95:76:09:46:7f:a8:26:8d:af:cc:b6:fa: 25:ae:09:c6:ee:8d:9e:84:61:46:cd:f1:80:4a:8a: 2a:29:7d:f1:2f:4a:5b:9d:c8:a4:72:72:63:ea:07: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:98:A9:BF:68:66:EA:90:D9:C9:50:53:9F:61:09:9D:C5:63:5E:67 X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:71:d0:ae:0e:95:5b:0e:c8:ea:11:84:2c:01:f6:01:e5:90: e9:96:c9:38:7d:22:a2:8b:32:87:57:ec:7c:28:4d:64:23:67: 9b:dc:5e:07:29:4f:e2:cd:ce:21:22:dd:05:96:da:89:ad:84: f1:5e:67:cf:19:b9:f4:aa:03:53:8d:a7:62:9e:2b:72:34:65: da:6b:0d:36:71:7a:db:78:0f:e3:a6:e4:d0:b0:ee:d8:f8:96: 78:08:81:cb:8d:39:2d:81:4a:72:d1:aa:2c:24:0c:ee:d3:ed: 41:39:db:02:c7:3b:da:b0:82:52:34:c4:0b:68:01:55:e4:92: 54:3e:b1:d4:25:04:b7:58:2b:29:33:79:fe:18:7f:85:16:c2: 10:41:de:d1:ac:6d:d6:48:ae:6b:2c:ac:cc:4b:88:b0:89:67: 14:c9:b1:46:d1:99:29:6e:3f:73:55:18:49:b4:33:df:5e:d8: 33:11:d2:1e:7c:33:5f:c3:e1:44:c3:52:6c:71:69:e6:de:44: d5:37:7a:af:bb:45:89:b0:0e:de:90:0e:d5:cd:40:4e:f9:2d: 47:1a:f5:4f:fc:dc:47:65:99:62:d7:bc:33:2f:ee:dd:dc:73: e2:da:37:08:40:35:d7:ab:d0:99:d5:48:df:b2:9b:a9:af:d2: 16:f3:b0:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA1MzEwNzMzNDNaFw0yNTA2MDcwNzMzNDNaMBgxFjAUBgNV BAMTDTY4M2FiMGQ3LThjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL2Vg2PFj8owkilNFknTLdn42dIu6laoGOlzNPZclSf5UkEJ1IzZ1fwRvPXEAu R1D8VfNucW1riuE1vKveqrUx0ZZkrq1N2DSziatglAzfZ5UAbNSOgIZUbrLCeIz2 afO6MukSrcwOkvNERfNYyi84xrsXhjpWLv+49tChkLtVwo9eHCV8Hzqgv8wvP8rT myjNGE3pOo06FQveIwZWaWlWB5hKFwCAM3Zz85ZnngTM1aK8d6CHhGL4Asio5Ver syxcCBldwyAotrr2J3SEsoM/rphFH5V2CUZ/qCaNr8y2+iWuCcbujZ6EYUbN8YBK iiopffEvSludyKRycmPqB9r1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi5ipv2hm 6pDZyVBTn2EJncVjXmcwHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz RjJGL0VFMEE2RjJDMUU2MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9y OXBsb2Q4WlJ1UjZGRXBCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADNx0K4OlVsOyOoRhCwB9gHlkOmWyTh9IqKLModX7HwoTWQjZ5vcXgcp T+LNziEi3QWW2omthPFeZ88ZufSqA1ONp2KeK3I0ZdprDTZxett4D+Om5NCw7tj4 lngIgcuNOS2BSnLRqiwkDO7T7UE52wLHO9qwglI0xAtoAVXkklQ+sdQlBLdYKykz ef4Yf4UWwhBB3tGsbdZIrmssrMxLiLCJZxTJsUbRmSluP3NVGEm0M99e2DMR0h58 M1/D4UTDUmxxaebeRNU3eq+7RYmwDt6QDtXNQE75LUca9U/83EdlmWLXvDMv7t3c c+LaNwhANder0JnVSN+ym6mv0hbzsGc= -----END CERTIFICATE-----Generated at Sat May 31 17:46:24 2025 by rpki-client