$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft File: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft (raw, json) Hash identifier: GJ1eJqTePY3DAX5r0KsyVk2nGnyNAmNOlfeeLW7UlmU= Subject key identifier: 6A:97:D1:91:EC:6D:10:28:BA:D5:C3:B9:24:1D:26:ED:5C:B8:2D:20 Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD Certificate issuer: /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft Manifest number: 0C4C Signing time: Fri 30 May 2025 18:35:47 +0000 Manifest this update: Fri 30 May 2025 18:35:46 +0000 Manifest next update: Fri 06 Jun 2025 18:35:46 +0000 Files and hashes: 1: LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl (hash: xhx5pfficmrUgB59XCjx0UsOrYffKiqx2H16pqIRRKY=) 2: 37FE0B120C0011EAA414FC4AC4F9AE02.roa (hash: VdMfsAJk3V7QieqJhJSnIh1YzoUvum5VdjclyzxhM5o=) 3: 3726AAFA0C0011EAA414FC4AC4F9AE02.roa (hash: xaKObum3EFlGZQF/g5wk0khI8wDbWZb2Cu/3w9bjJUY=) 4: 99191AA404E911EAA9C20A60C4F9AE02.roa (hash: +PNWRMsQpZdZrhBnxEHUPHxE2UGarRHAqMGQOz8wwvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131ABD, serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD Validity Not Before: May 30 18:35:46 2025 GMT Not After : Jun 6 18:35:46 2025 GMT Subject: CN=6839fa82-c121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:42:1b:10:70:1a:cc:6e:5d:68:0e:ea:45: ab:00:4d:26:60:ee:43:9b:50:90:64:f4:6e:10:b1: 38:57:d0:f7:6a:44:28:88:e7:44:1c:6c:cc:19:18: 07:b1:51:19:b8:27:2d:68:6a:55:16:55:1f:42:d3: db:41:16:6e:24:d2:75:a0:9a:23:4e:fc:7b:d5:d7: 12:c5:72:92:63:5e:9f:83:f1:04:65:9e:b5:f9:6f: c9:1e:9d:15:a7:00:d1:d0:fe:f8:f4:b8:7c:fb:4d: ac:d9:e0:05:0b:2b:fc:c6:b2:37:60:4d:2e:c9:7c: bc:5a:b7:34:88:45:cd:2c:51:53:e8:3d:5d:45:41: 7c:12:60:ab:1f:fa:99:10:89:c7:84:5a:80:96:68: 9d:0f:44:78:3b:ec:07:54:4d:14:64:fe:98:99:e8: 87:84:e3:07:92:0c:d1:9c:b6:a0:a2:3e:56:80:3c: 15:c6:50:89:be:2b:d0:6d:57:08:2b:dd:91:36:40: de:2e:19:a6:c7:39:32:ee:ba:be:f0:bc:29:f3:8f: a3:d0:57:36:fc:05:10:19:bb:e9:a0:e6:57:c4:dc: 84:3d:7c:28:2b:a8:56:f4:7d:bc:d7:d1:87:bc:3f: 4e:29:bf:69:36:16:52:6f:9d:ac:77:08:94:41:72: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:97:D1:91:EC:6D:10:28:BA:D5:C3:B9:24:1D:26:ED:5C:B8:2D:20 X509v3 Authority Key Identifier: keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:c7:ba:07:15:7d:b1:5f:ef:72:2b:af:9b:ea:28:e6:72: 86:0e:7c:7b:46:7d:e5:5f:d6:f2:2e:bf:16:dc:45:c0:a5:68: f9:65:99:7c:90:38:96:da:d7:97:b1:84:79:35:d1:fb:b0:0c: c4:af:46:1e:98:ba:18:6d:95:0b:b0:7f:b4:66:26:3a:55:19: 6a:b9:93:10:e4:eb:eb:e3:c9:b3:3c:b6:a3:0b:95:de:46:33: 84:d4:d2:e4:57:69:73:0b:4c:35:cb:b1:63:bf:bf:2f:02:ca: b1:be:87:0c:f6:2a:c6:ff:89:38:e4:17:e6:32:1f:4b:69:30: 31:f5:61:66:30:e1:e8:ac:73:7f:2b:6e:94:21:34:74:5a:88: 71:b8:f1:a6:48:38:9b:45:d8:c9:4d:dc:45:7e:86:10:5f:a4: 9e:b5:36:11:84:29:9e:66:84:0e:d7:18:16:c9:41:0a:0f:ef: 22:ba:e5:c4:24:55:ce:5d:12:6e:b5:45:cd:1c:7d:d5:a8:77: 54:cb:b7:23:a1:19:75:b0:37:33:e4:23:61:ad:86:84:6f:7a: a2:0a:04:88:4d:6b:b7:3d:53:67:71:e8:79:63:a2:71:4b:df: 19:6f:c7:46:b9:9b:e5:65:5f:e1:b2:ed:d8:1e:e0:bd:b9:33: 86:d5:f1:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQkQxMTAvBgNVBAUTKDJFOUM5MUY0RTM5NEE0QUZBOTc2RDZCQzNGNjVERjJE OUYwNzlFQkQwHhcNMjUwNTMwMTgzNTQ2WhcNMjUwNjA2MTgzNTQ2WjAYMRYwFAYD VQQDEw02ODM5ZmE4Mi1jMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yJCGxBwGsxuXWgO6kWrAE0mYO5Dm1CQZPRuELE4V9D3akQoiOdEHGzMGRgH sVEZuCctaGpVFlUfQtPbQRZuJNJ1oJojTvx71dcSxXKSY16fg/EEZZ61+W/JHp0V pwDR0P749Lh8+02s2eAFCyv8xrI3YE0uyXy8Wrc0iEXNLFFT6D1dRUF8EmCrH/qZ EInHhFqAlmidD0R4O+wHVE0UZP6YmeiHhOMHkgzRnLagoj5WgDwVxlCJvivQbVcI K92RNkDeLhmmxzky7rq+8Lwp84+j0Fc2/AUQGbvpoOZXxNyEPXwoK6hW9H2819GH vD9OKb9pNhZSb52sdwiUQXIfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqX0ZHs bRAoutXDuSQdJu1cuC0gMB8GA1UdIwQYMBaAFC6ckfTjlKSvqXbWvD9l3y2fB569 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCRC8yMEU4RjlBMDA0 RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBLLXBkdGE4UDJYZkxaOEhu cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xweVI5T09VcEstcGR0YThQMlhmTFo4SG5yMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCRC8yMEU4RjlBMDA0RTkxMUVBOEQyMEVFNUZDNEY5QUUwMi9McHlSOU9PVXBL LXBkdGE4UDJYZkxaOEhucjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm8se6BxV9sV/vciuvm+oo5nKGDnx7Rn3lX9byLr8W3EXApWj5ZZl8 kDiW2teXsYR5NdH7sAzEr0YemLoYbZULsH+0ZiY6VRlquZMQ5Ovr48mzPLajC5Xe RjOE1NLkV2lzC0w1y7Fjv78vAsqxvocM9irG/4k45BfmMh9LaTAx9WFmMOHorHN/ K26UITR0WohxuPGmSDibRdjJTdxFfoYQX6SetTYRhCmeZoQO1xgWyUEKD+8iuuXE JFXOXRJutUXNHH3VqHdUy7cjoRl1sDcz5CNhrYaEb3qiCgSITWu3PVNnceh5Y6Jx S98Zb8dGuZvlZV/hsu3YHuC9uTOG1fFS -----END CERTIFICATE-----Generated at Sat May 31 16:35:03 2025 by rpki-client