$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: weMYukwc0QL6PB76VHWMYU2A8sWrsntiY5l4hHxwgDM= Subject key identifier: E8:DE:7E:5C:16:FB:3C:6C:68:BF:CF:D6:D8:38:BA:A9:1A:69:D7:4D Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 01ED Signing time: Sat 31 May 2025 02:15:51 +0000 Manifest this update: Sat 31 May 2025 02:15:51 +0000 Manifest next update: Sat 07 Jun 2025 02:15:51 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: Cyho2NQ25pLXQ5Od7xeuVxMHDmaXovnfThgRrhY25UI=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB, serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: May 31 02:15:51 2025 GMT Not After : Jun 7 02:15:51 2025 GMT Subject: CN=683a6657-b0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:b5:81:39:c0:ca:be:63:73:98:6f:c4:2a: 5a:14:3f:86:5d:65:d8:0e:1e:49:14:72:cc:ad:78: 68:38:67:c4:dc:c8:c5:1d:b1:89:fa:27:61:eb:79: 37:18:66:16:e0:0c:14:8e:8e:ab:b8:c1:df:66:ab: fe:03:95:31:b6:fa:e8:c3:91:80:c0:a1:40:89:ee: 60:92:d1:ce:4f:10:65:2b:19:3b:6c:f0:26:cd:0e: c4:33:43:15:3d:ce:d7:e6:f7:b8:82:5f:60:a5:67: dc:22:89:73:0b:e4:e0:b0:98:6e:66:c2:63:38:0c: 57:b6:56:2e:f6:46:69:1e:2f:52:84:e0:2e:09:f5: 9f:9f:01:b6:16:d4:74:13:86:ee:9b:47:ff:22:8f: 18:df:dd:c2:d2:03:3d:8d:3d:a7:9e:2a:49:72:69: d0:da:eb:d2:7e:80:ea:17:e2:7c:e7:0a:d2:fb:6b: 3e:3e:f1:80:a6:9f:24:d8:81:ef:7a:09:25:eb:65: 0c:95:77:06:f1:19:e9:38:04:e8:d0:88:f1:4c:78: d1:66:a1:96:11:24:08:43:0a:e5:4f:3b:ca:5c:bc: b6:39:7c:58:fb:55:54:1e:75:33:c9:ec:32:ad:9e: 9a:ad:1a:43:73:8e:d6:8c:57:a3:16:72:32:95:3c: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DE:7E:5C:16:FB:3C:6C:68:BF:CF:D6:D8:38:BA:A9:1A:69:D7:4D X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:e5:25:69:90:50:5e:84:90:51:bb:1e:e3:a3:fd:aa:b3: ea:05:10:f3:9d:87:e8:6b:55:06:ff:09:34:fb:bb:38:33:84: d7:07:ef:03:bc:2b:40:54:25:f6:8e:24:30:84:b5:9e:41:a6: af:1b:67:d4:2e:8b:30:36:c5:64:21:26:c5:05:4f:a1:9e:05: ef:f0:41:ce:94:5f:c9:79:36:72:67:72:41:21:ef:3c:3d:c6: 0f:51:b7:47:a7:b8:07:b7:37:f0:bd:bd:44:90:92:93:e5:3d: 8a:6b:0e:41:3d:f1:d1:df:a3:b0:51:55:8b:6f:a1:57:72:b3: 4b:39:6f:18:9a:ae:b1:51:10:ac:f6:71:6d:30:4a:3a:1c:f3: 9c:5a:94:2e:46:cf:c1:37:fc:93:c2:a6:30:a7:8d:8a:76:22: 61:51:e3:00:e7:45:68:06:94:0b:41:0e:22:c9:94:ac:50:07: 5c:c8:3f:ea:96:b7:cc:92:26:6d:f5:37:64:7b:04:12:fb:20: 5d:28:d2:b5:64:b3:9b:ca:03:dc:b6:04:2f:31:a2:b0:1f:86: 01:70:52:0f:0c:28:30:e5:76:4e:2c:21:e7:0c:4c:54:98:e8: 1c:8f:80:42:55:ef:52:6a:a5:5f:b4:e7:08:b6:0b:27:e1:c8: 9e:cf:d9:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjUwNTMxMDIxNTUxWhcNMjUwNjA3MDIxNTUxWjAYMRYwFAYD VQQDEw02ODNhNjY1Ny1iMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOO1gTnAyr5jc5hvxCpaFD+GXWXYDh5JFHLMrXhoOGfE3MjFHbGJ+idh63k3 GGYW4AwUjo6ruMHfZqv+A5Uxtvrow5GAwKFAie5gktHOTxBlKxk7bPAmzQ7EM0MV Pc7X5ve4gl9gpWfcIolzC+TgsJhuZsJjOAxXtlYu9kZpHi9ShOAuCfWfnwG2FtR0 E4bum0f/Io8Y393C0gM9jT2nnipJcmnQ2uvSfoDqF+J85wrS+2s+PvGApp8k2IHv egkl62UMlXcG8RnpOATo0IjxTHjRZqGWESQIQwrlTzvKXLy2OXxY+1VUHnUzyewy rZ6arRpDc47WjFejFnIylTydjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjeflwW +zxsaL/P1tg4uqkaaddNMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+iuUlaZBQXoSQUbse46P9qrPqBRDznYfoa1UG/wk0+7s4M4TXB+8D vCtAVCX2jiQwhLWeQaavG2fULoswNsVkISbFBU+hngXv8EHOlF/JeTZyZ3JBIe88 PcYPUbdHp7gHtzfwvb1EkJKT5T2Kaw5BPfHR36OwUVWLb6FXcrNLOW8Ymq6xURCs 9nFtMEo6HPOcWpQuRs/BN/yTwqYwp42KdiJhUeMA50VoBpQLQQ4iyZSsUAdcyD/q lrfMkiZt9TdkewQS+yBdKNK1ZLObygPctgQvMaKwH4YBcFIPDCgw5XZOLCHnDExU mOgcj4BCVe9SaqVftOcItgsn4ciez9mt -----END CERTIFICATE-----Generated at Sat May 31 16:57:43 2025 by rpki-client