$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: SZlmZDngU1g6+WCChodjmqv3iWnLNDg6ZHt/jXfqHsw= Subject key identifier: 1E:4A:65:16:97:2A:9B:AA:C9:8A:5E:E2:B1:BF:57:A5:CB:27:5B:3A Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 0624 Signing time: Fri 30 May 2025 23:01:59 +0000 Manifest this update: Fri 30 May 2025 23:01:58 +0000 Manifest next update: Fri 06 Jun 2025 23:01:58 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: 3Wy0f5yrG+rm+q8Yve3ZECgiOcNQre8x/HvwPeGGr5g=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: May 30 23:01:58 2025 GMT Not After : Jun 6 23:01:58 2025 GMT Subject: CN=683a38e6-b269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:17:49:02:b4:d6:e4:62:11:a6:79:63:97: 3c:9b:d4:53:25:ed:fc:04:f8:60:51:97:23:7e:3b: ff:41:39:86:09:c5:c9:53:58:cb:af:22:01:d5:00: a1:24:7d:26:d9:36:ff:ae:65:23:1a:47:b6:07:55: e9:ac:33:4f:f5:1b:03:ea:a2:81:29:ef:11:51:24: 1e:23:ed:8e:3b:ac:05:a6:7b:04:00:e6:0e:a9:d2: f0:8a:d8:77:fb:39:0b:ed:cc:c2:16:2f:e1:be:68: cf:d7:99:ad:d8:3b:ed:db:e8:82:b0:92:c8:21:2e: 17:fb:ef:db:f6:e4:85:10:5e:29:d1:8c:39:c1:6a: eb:9f:31:fe:c6:e9:04:17:f6:42:58:b3:0e:62:54: 44:07:20:98:7b:7f:2a:45:84:1d:2e:c9:9d:3f:dd: 16:62:8a:9a:e9:66:a2:cd:1c:28:0a:36:49:f5:55: a8:8e:7c:50:9b:f6:93:81:c1:32:0d:c2:f6:70:c4: 8e:cf:f1:17:d0:ba:a5:7e:9b:52:b5:e1:5d:94:f6: bc:be:f0:1e:40:15:70:69:84:16:33:4a:77:bd:06: 74:f3:ce:00:31:7c:09:e4:04:95:30:5a:be:9e:3c: d9:a6:2f:c3:42:66:a1:11:71:73:e1:21:2c:48:18: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:65:16:97:2A:9B:AA:C9:8A:5E:E2:B1:BF:57:A5:CB:27:5B:3A X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:20:af:7d:70:43:8a:6c:0e:77:70:eb:ec:3c:aa:52:3a:20: 7c:3d:e6:26:b8:7b:ce:62:73:bc:3a:7c:4b:50:e8:80:03:d6: 8b:a4:3d:00:be:0d:d8:24:e1:18:c5:56:a6:90:03:44:60:61: d4:80:18:b7:b0:db:6f:d7:7c:01:35:5a:5a:fb:fb:05:2f:a5: 9c:1e:7b:00:30:0a:04:f1:af:f3:3f:6c:d6:55:3d:30:d3:c8: 79:a9:d8:1a:ab:1f:dd:51:a9:8c:d1:88:04:6e:81:15:dc:c5: 2b:94:5f:0b:65:92:3b:61:31:9f:aa:a3:9d:4a:89:c0:cf:cf: 0d:85:cc:47:6d:aa:84:f9:47:e7:a7:b7:4e:d7:78:f1:05:6a: 1c:77:1a:06:e4:bc:97:f4:59:e9:0b:eb:0b:fb:17:ed:e2:d5: eb:a1:e8:18:82:ce:6b:58:e1:85:10:1c:3d:64:4c:fd:0e:c9: a2:fe:21:b7:2d:d2:da:72:66:2e:1b:de:6c:7b:75:99:6a:0d: 9e:dc:89:06:1e:cf:52:61:27:7b:a7:7c:49:a5:49:79:cd:e8: 16:c3:d1:84:4d:76:f3:05:8a:e8:8b:08:9a:f8:b2:50:32:e9: 0a:56:88:ef:74:62:63:15:d7:be:09:40:27:fc:6d:2e:17:49: 43:e9:5a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNTMwMjMwMTU4WhcNMjUwNjA2MjMwMTU4WjAYMRYwFAYD VQQDEw02ODNhMzhlNi1iMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfYXSQK01uRiEaZ5Y5c8m9RTJe38BPhgUZcjfjv/QTmGCcXJU1jLryIB1QCh JH0m2Tb/rmUjGke2B1XprDNP9RsD6qKBKe8RUSQeI+2OO6wFpnsEAOYOqdLwith3 +zkL7czCFi/hvmjP15mt2Dvt2+iCsJLIIS4X++/b9uSFEF4p0Yw5wWrrnzH+xukE F/ZCWLMOYlREByCYe38qRYQdLsmdP90WYoqa6WaizRwoCjZJ9VWojnxQm/aTgcEy DcL2cMSOz/EX0LqlfptSteFdlPa8vvAeQBVwaYQWM0p3vQZ0884AMXwJ5ASVMFq+ njzZpi/DQmahEXFz4SEsSBgUHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5KZRaX KpuqyYpe4rG/V6XLJ1s6MB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnIK99cEOKbA53cOvsPKpSOiB8PeYmuHvOYnO8OnxLUOiAA9aLpD0A vg3YJOEYxVamkANEYGHUgBi3sNtv13wBNVpa+/sFL6WcHnsAMAoE8a/zP2zWVT0w 08h5qdgaqx/dUamM0YgEboEV3MUrlF8LZZI7YTGfqqOdSonAz88NhcxHbaqE+Ufn p7dO13jxBWocdxoG5LyX9FnpC+sL+xft4tXroegYgs5rWOGFEBw9ZEz9Dsmi/iG3 LdLacmYuG95se3WZag2e3IkGHs9SYSd7p3xJpUl5zegWw9GETXbzBYroiwia+LJQ MukKVojvdGJjFde+CUAn/G0uF0lD6VrA -----END CERTIFICATE-----Generated at Sat May 31 17:06:20 2025 by rpki-client