$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: oLpD6TDXcFTv/psI7FleqAcFA8xNkDNowS7YoujOb3c= Subject key identifier: C3:F6:70:FF:48:EE:FB:9C:8C:7B:42:F9:E0:7C:FC:C7:72:10:C9:FB Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0171 Signing time: Sat 31 May 2025 03:28:01 +0000 Manifest this update: Sat 31 May 2025 03:28:00 +0000 Manifest next update: Sat 07 Jun 2025 03:28:00 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: 2tz6jzT5VQEz7A2kczF84omvWg4x3DWdCYgvP6wBQuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: May 31 03:28:00 2025 GMT Not After : Jun 7 03:28:00 2025 GMT Subject: CN=683a7740-fcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:07:3d:38:06:5b:8b:20:05:dd:6c:02:ab: 55:4a:28:d6:c9:01:1b:f4:2e:86:a0:74:a0:f5:91: 7b:96:d8:09:29:66:f8:a7:09:73:b8:2f:04:83:e2: 0e:5b:9b:91:7c:4d:dd:5f:42:11:31:61:09:d6:07: c2:7d:51:48:6f:78:1b:45:98:bf:8f:d6:d4:9e:fa: 4f:07:4a:ea:ad:cb:f9:e1:99:0f:8e:2a:cb:f3:51: 22:dd:41:27:d3:43:89:08:a9:95:f9:f8:d2:f8:02: 09:9d:e1:9a:bd:3c:6a:41:56:9a:c5:62:e5:92:c3: 06:11:d1:68:1e:73:53:f0:f4:3f:7b:bb:c3:08:54: 8e:15:12:c9:9f:44:dc:17:e7:f3:df:35:f4:be:43: cc:5c:33:88:e3:ba:44:d0:d1:f1:08:e6:48:3b:5f: a2:67:27:03:65:14:a7:72:73:8a:3d:b5:26:62:a9: b9:b6:56:73:7a:b0:b2:3c:7a:f8:59:5c:fc:c5:34: 7d:32:89:07:4c:eb:f3:cb:f9:7f:5a:c6:ba:c0:b9: 51:92:52:63:67:d4:8c:67:ea:53:40:92:ae:84:47: 8b:24:af:ad:a0:77:57:8e:63:64:41:82:72:c5:3a: 9d:48:dc:88:ae:11:2f:ef:d2:f1:55:0a:07:80:3f: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:70:FF:48:EE:FB:9C:8C:7B:42:F9:E0:7C:FC:C7:72:10:C9:FB X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:ea:b8:53:12:7a:78:75:01:30:7c:53:31:8c:8a:ab:08: 65:28:09:56:8e:bf:97:fd:7a:82:a5:96:f6:e3:33:c8:92:19: 49:84:7f:29:72:36:ce:2f:cd:31:24:96:53:8f:58:54:3e:61: 75:33:97:76:67:60:c8:58:13:db:a2:c1:95:c6:80:e5:2b:b4: e9:5d:61:6d:0d:b6:1d:81:2b:e6:89:f2:0c:12:8b:f6:c9:35: 3c:ee:0e:95:d6:b8:53:3d:04:f0:34:1f:ba:83:13:e9:84:f6: ba:ff:5f:29:db:0c:1a:53:0b:4a:cd:ad:50:d3:a3:56:bd:2e: cc:d6:7c:4d:34:32:e8:06:98:d5:60:6d:1b:f1:cf:48:01:2a: da:dd:5b:c2:f3:14:63:c4:95:5b:cf:36:a4:ae:c0:b1:79:bb: d5:8d:9d:24:74:1b:cc:6d:0f:d3:90:5a:71:fb:b9:c1:25:7d: b6:13:47:e2:a2:2c:4c:af:94:75:cc:f8:8d:65:1f:67:95:1b: 5c:a5:67:04:8a:6a:f0:9f:89:b4:34:c2:82:85:c6:96:f6:9c: 10:df:95:d9:c0:34:52:48:79:d3:2e:76:6c:9e:d6:f0:90:d7: 74:77:1d:d6:59:21:b9:74:02:4e:ca:1e:b1:52:50:10:5a:65: f8:f2:f6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwNTMxMDMyODAwWhcNMjUwNjA3MDMyODAwWjAYMRYwFAYD VQQDEw02ODNhNzc0MC1mY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40IHPTgGW4sgBd1sAqtVSijWyQEb9C6GoHSg9ZF7ltgJKWb4pwlzuC8Eg+IO W5uRfE3dX0IRMWEJ1gfCfVFIb3gbRZi/j9bUnvpPB0rqrcv54ZkPjirL81Ei3UEn 00OJCKmV+fjS+AIJneGavTxqQVaaxWLlksMGEdFoHnNT8PQ/e7vDCFSOFRLJn0Tc F+fz3zX0vkPMXDOI47pE0NHxCOZIO1+iZycDZRSncnOKPbUmYqm5tlZzerCyPHr4 WVz8xTR9MokHTOvzy/l/Wsa6wLlRklJjZ9SMZ+pTQJKuhEeLJK+toHdXjmNkQYJy xTqdSNyIrhEv79LxVQoHgD+kKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP2cP9I 7vucjHtC+eB8/MdyEMn7MB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFrOq4UxJ6eHUBMHxTMYyKqwhlKAlWjr+X/XqCpZb24zPIkhlJhH8p cjbOL80xJJZTj1hUPmF1M5d2Z2DIWBPbosGVxoDlK7TpXWFtDbYdgSvmifIMEov2 yTU87g6V1rhTPQTwNB+6gxPphPa6/18p2wwaUwtKza1Q06NWvS7M1nxNNDLoBpjV YG0b8c9IASra3VvC8xRjxJVbzzakrsCxebvVjZ0kdBvMbQ/TkFpx+7nBJX22E0fi oixMr5R1zPiNZR9nlRtcpWcEimrwn4m0NMKChcaW9pwQ35XZwDRSSHnTLnZsntbw kNd0dx3WWSG5dAJOyh6xUlAQWmX48vbd -----END CERTIFICATE-----Generated at Sat May 31 17:37:47 2025 by rpki-client