$ rpki-client -vvf rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft File: L0yMSsxFXG1aSQxAkLOjUqivHLU.mft (raw, json) Hash identifier: kveDMA0jmN2g0oSj07dU4s70gq3jb64goc/+Rx4GRuc= Subject key identifier: 8C:8E:14:92:29:78:A7:7E:0C:F1:E9:7C:90:10:B5:36:00:66:C6:88 Authority key identifier: 2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 Certificate issuer: /CN=A9130128/serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft Manifest number: 041D Signing time: Sat 31 May 2025 00:36:35 +0000 Manifest this update: Sat 31 May 2025 00:36:34 +0000 Manifest next update: Sat 07 Jun 2025 00:36:34 +0000 Files and hashes: 1: L0yMSsxFXG1aSQxAkLOjUqivHLU.crl (hash: 4clGDbLmmo/PIoHvbjIzufJbaaNGuCRZVsJjLefbw8c=) 2: BD6C86326AEC11ECB61ECF30C4F9AE02.roa (hash: ycvRnCz+W4ba8DDROuCngyAKLqsVfBGFpl90bOtHXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130128, serialNumber=2F4C8C4ACC455C6D5A490C4090B3A352A8AF1CB5 Validity Not Before: May 31 00:36:34 2025 GMT Not After : Jun 7 00:36:34 2025 GMT Subject: CN=683a4f12-c230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c9:58:8f:04:5e:9e:3a:3f:9b:b7:f3:71:07: 82:da:59:b2:06:e2:16:21:1c:9a:09:f7:d7:b5:fe: d6:b2:fa:41:36:d3:fd:24:c8:7d:15:1b:6d:3f:d6: ec:40:35:44:d3:8f:bf:20:3e:29:fb:3f:09:a4:a7: 4b:6a:2b:98:5b:78:88:cb:53:c2:dd:27:e8:62:df: 10:00:c7:a4:f1:00:19:7d:49:61:7b:05:bd:c0:42: 6a:9b:0f:81:46:b7:2a:db:64:96:82:ff:bb:59:10: cd:4f:3c:84:87:5e:18:cd:3e:65:e3:2b:b3:c5:06: e5:12:6a:0e:f7:42:1c:d8:28:d0:cd:14:3f:2c:e5: d1:f7:e2:6e:11:ee:6a:2d:b1:ea:ad:34:72:2a:cd: f9:07:a9:be:56:f9:de:1c:1e:09:71:d7:54:36:9c: 97:e1:3d:5f:69:d1:6e:95:96:cf:0f:bd:48:fb:bb: cf:d0:9f:26:85:8a:d2:ac:86:a7:5e:cf:2f:2b:86: 90:8f:a6:09:9f:30:ef:cd:23:68:aa:3f:d5:4f:fd: e8:45:ea:78:c3:6d:a8:a3:f3:8e:8f:25:3a:3e:26: 4d:0f:48:71:cb:c4:11:3e:f6:29:95:5b:83:87:bd: 24:ab:91:0d:73:d7:cc:01:65:88:e4:c7:f5:03:ef: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:14:92:29:78:A7:7E:0C:F1:E9:7C:90:10:B5:36:00:66:C6:88 X509v3 Authority Key Identifier: keyid:2F:4C:8C:4A:CC:45:5C:6D:5A:49:0C:40:90:B3:A3:52:A8:AF:1C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0yMSsxFXG1aSQxAkLOjUqivHLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130128/91BC37526AE811ECA448465BC4F9AE02/L0yMSsxFXG1aSQxAkLOjUqivHLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:05:ed:e4:23:d9:6e:d3:45:21:97:a1:4d:e1:c9:94:fc:8a: 77:a8:e0:6a:9e:d7:3c:87:35:41:63:f8:26:ac:ff:e2:d4:d3: ca:af:e0:b3:b7:61:a0:66:53:a2:99:bf:20:03:10:62:c6:c9: d6:63:d8:99:e8:f3:05:e0:ce:d5:42:9e:1f:7f:09:98:70:df: 68:df:6b:5e:9a:1e:00:9a:43:af:c2:19:ce:d2:98:26:af:7f: fb:58:50:fe:45:99:30:ad:9c:5f:3d:0d:a3:8c:de:b1:cf:31: d9:1a:93:40:b6:46:c7:7e:82:8c:b0:88:42:ad:7f:d2:5c:56: e5:0d:fc:ef:ab:50:69:19:3f:28:5b:cb:cc:d6:c7:04:7b:ce: 26:d9:89:ea:8b:6b:29:c3:3e:83:be:a5:d8:a5:ad:da:ba:60: b2:ce:ef:0a:51:82:d6:e2:66:23:9e:8b:ef:36:d9:36:69:e2: 9e:fb:df:24:99:9c:e9:73:fb:c6:4d:99:9e:08:ec:14:d4:50: 1d:c3:75:a1:40:d0:40:ec:a7:f6:d2:57:f1:4b:08:4b:8c:dc: f8:f5:d5:d5:65:2a:b6:ff:8b:f0:6b:80:37:94:ce:36:c6:6a: fb:98:25:55:46:aa:0a:af:6b:61:40:eb:d5:bd:93:59:80:82: a8:e3:e5:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMjgxMTAvBgNVBAUTKDJGNEM4QzRBQ0M0NTVDNkQ1QTQ5MEM0MDkwQjNBMzUy QThBRjFDQjUwHhcNMjUwNTMxMDAzNjM0WhcNMjUwNjA3MDAzNjM0WjAYMRYwFAYD VQQDEw02ODNhNGYxMi1jMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9clYjwRenjo/m7fzcQeC2lmyBuIWIRyaCffXtf7WsvpBNtP9JMh9FRttP9bs QDVE04+/ID4p+z8JpKdLaiuYW3iIy1PC3SfoYt8QAMek8QAZfUlhewW9wEJqmw+B Rrcq22SWgv+7WRDNTzyEh14YzT5l4yuzxQblEmoO90Ic2CjQzRQ/LOXR9+JuEe5q LbHqrTRyKs35B6m+VvneHB4JcddUNpyX4T1fadFulZbPD71I+7vP0J8mhYrSrIan Xs8vK4aQj6YJnzDvzSNoqj/VT/3oRep4w22oo/OOjyU6PiZND0hxy8QRPvYplVuD h70kq5ENc9fMAWWI5Mf1A+8ClwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyOFJIp eKd+DPHpfJAQtTYAZsaIMB8GA1UdIwQYMBaAFC9MjErMRVxtWkkMQJCzo1Korxy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEyOC85MUJDMzc1MjZB RTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhHMWFTUXhBa0xPalVxaXZI TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wweU1Tc3hGWEcxYVNReEFrTE9qVXFpdkhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEyOC85MUJDMzc1MjZBRTgxMUVDQTQ0ODQ2NUJDNEY5QUUwMi9MMHlNU3N4RlhH MWFTUXhBa0xPalVxaXZITFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhBe3kI9lu00Uhl6FN4cmU/Ip3qOBqntc8hzVBY/gmrP/i1NPKr+Cz t2GgZlOimb8gAxBixsnWY9iZ6PMF4M7VQp4ffwmYcN9o32temh4AmkOvwhnO0pgm r3/7WFD+RZkwrZxfPQ2jjN6xzzHZGpNAtkbHfoKMsIhCrX/SXFblDfzvq1BpGT8o W8vM1scEe84m2Ynqi2spwz6DvqXYpa3aumCyzu8KUYLW4mYjnovvNtk2aeKe+98k mZzpc/vGTZmeCOwU1FAdw3WhQNBA7Kf20lfxSwhLjNz49dXVZSq2/4vwa4A3lM42 xmr7mCVVRqoKr2thQOvVvZNZgIKo4+Wi -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client