$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: JMyzTpY/fdv3JKavYSQPWJR6syh+19SdGoc/qAQlTa8= Subject key identifier: 76:6D:96:B7:9E:78:3A:EB:7C:F5:3F:AD:9D:8C:F9:E4:EB:77:58:84 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 01D2 Signing time: Sat 05 Apr 2025 02:17:41 +0000 Manifest this update: Sat 05 Apr 2025 02:17:40 +0000 Manifest next update: Sat 12 Apr 2025 02:17:40 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: GKZNDTHU45gtA7p0m6ZjwqA9HQ2qoKbKZgzY6fD6yf4=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB Validity Not Before: Apr 5 02:17:40 2025 GMT Not After : Apr 12 02:17:40 2025 GMT Subject: CN=67f092c4-e3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:77:65:33:09:89:c1:f7:c3:fb:ee:a0:c6: 2d:06:f5:b6:04:a4:a3:43:4e:12:b5:18:c5:a9:dd: 83:09:6a:7d:31:b9:e2:61:c7:d6:a9:31:70:e3:02: e3:2a:ef:7b:48:06:b5:2f:11:70:be:20:a6:8e:88: 95:d1:3a:5c:86:24:2d:19:7e:ce:c2:b9:05:07:86: 8c:41:02:a4:bb:af:01:53:6b:76:c0:ea:8e:62:95: 33:97:55:31:0f:62:da:3c:92:19:ae:1a:2b:35:0d: f7:03:e5:93:9e:c6:a7:d8:86:ee:68:1a:dd:dc:1e: 0b:bc:d8:bb:b3:35:bb:fd:5e:39:25:67:95:cc:a0: 37:2c:0a:0c:80:aa:48:14:2a:94:a5:4a:46:4b:80: 55:54:2f:61:44:c3:35:82:f3:e6:39:9e:30:c7:e1: 82:01:17:3d:c4:c9:15:9e:92:c1:8b:3d:77:4a:c6: 99:78:b8:87:ed:61:f0:ce:0f:df:c6:3b:a4:8e:25: e7:b2:aa:98:82:e7:df:c7:47:6b:db:00:8a:5c:a4: 7a:bb:07:97:a0:cc:f3:b0:58:b1:7c:8f:6b:fc:14: 11:75:33:41:a2:0f:dd:68:99:8c:5c:f7:79:ee:71: 0d:a0:c5:8b:d1:c8:85:0f:78:3c:8c:40:3b:19:6e: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6D:96:B7:9E:78:3A:EB:7C:F5:3F:AD:9D:8C:F9:E4:EB:77:58:84 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:99:73:e5:00:62:1b:8b:d1:ee:05:96:6c:9c:36:e3:af:36: 56:20:f5:4c:ce:3c:31:77:21:13:ba:07:40:ca:64:11:b1:a2: 4b:a6:52:d0:9c:1d:dc:07:ad:b1:ec:84:4f:b6:20:4c:58:c1: 72:62:2a:67:ef:6e:8f:6c:4d:79:f5:e0:a9:3c:26:89:c7:15: ea:37:4b:8b:f4:3c:8e:15:7a:73:b1:e4:20:3a:d6:63:66:6a: 00:07:55:19:86:b0:a5:c5:da:1e:d2:79:8a:f7:6c:08:fe:84: db:6a:e8:9e:65:8e:91:76:43:c9:a4:2d:a7:28:22:0b:eb:c0: bc:36:eb:c5:52:8c:8e:1a:53:1a:a0:02:2d:3b:c6:1b:2b:37: a7:7d:90:77:7a:03:2b:49:af:92:98:10:71:32:c4:4b:9d:82: 67:57:74:10:0e:89:07:78:2d:ad:93:95:63:a0:ee:a3:2f:14: cd:0e:bb:99:b6:3a:01:7f:72:3f:ef:da:4f:d7:4c:70:ee:8d: 61:f4:f7:03:8a:c4:6c:48:60:a5:51:c7:7d:3f:e5:a8:da:05: 33:10:e2:58:17:2a:54:09:04:59:d2:27:ff:b7:58:8b:21:ad: 9f:63:52:c2:e8:55:02:ce:f7:ad:63:6a:f1:15:38:3e:c8:e9: e1:aa:94:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUwNDA1MDIxNzQwWhcNMjUwNDEyMDIxNzQwWjAYMRYwFAYD VQQDEw02N2YwOTJjNC1lM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfZ3ZTMJicH3w/vuoMYtBvW2BKSjQ04StRjFqd2DCWp9MbniYcfWqTFw4wLj Ku97SAa1LxFwviCmjoiV0TpchiQtGX7OwrkFB4aMQQKku68BU2t2wOqOYpUzl1Ux D2LaPJIZrhorNQ33A+WTnsan2IbuaBrd3B4LvNi7szW7/V45JWeVzKA3LAoMgKpI FCqUpUpGS4BVVC9hRMM1gvPmOZ4wx+GCARc9xMkVnpLBiz13SsaZeLiH7WHwzg/f xjukjiXnsqqYguffx0dr2wCKXKR6uweXoMzzsFixfI9r/BQRdTNBog/daJmMXPd5 7nENoMWL0ciFD3g8jEA7GW5DYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZtlree eDrrfPU/rZ2M+eTrd1iEMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAImXPlAGIbi9HuBZZsnDbjrzZWIPVMzjwxdyETugdAymQRsaJLplLQ nB3cB62x7IRPtiBMWMFyYipn726PbE159eCpPCaJxxXqN0uL9DyOFXpzseQgOtZj ZmoAB1UZhrClxdoe0nmK92wI/oTbauieZY6RdkPJpC2nKCIL68C8NuvFUoyOGlMa oAItO8YbKzenfZB3egMrSa+SmBBxMsRLnYJnV3QQDokHeC2tk5VjoO6jLxTNDruZ tjoBf3I/79pP10xw7o1h9PcDisRsSGClUcd9P+Wo2gUzEOJYFypUCQRZ0if/t1iL Ia2fY1LC6FUCzvetY2rxFTg+yOnhqpT1 -----END CERTIFICATE-----Generated at Sat Apr 5 08:11:42 2025 by rpki-client