$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft File: LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json) Hash identifier: wETBlJxLNPKKX2WHtoIxDTV+hSN3XiJIw9Qmkw8bhZg= Subject key identifier: B9:ED:1D:CD:70:72:B9:14:77:EC:05:34:C4:64:89:29:69:EA:85:69 Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E Certificate issuer: /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft Manifest number: 10 Signing time: Tue 03 Jun 2025 05:06:21 +0000 Manifest this update: Tue 03 Jun 2025 05:06:21 +0000 Manifest next update: Tue 10 Jun 2025 05:06:21 +0000 Files and hashes: 1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: tVPae+k+DfwKIjnZr7QMYaCd6nZYaH5CVTWwxcWFXVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E Validity Not Before: Jun 3 05:06:21 2025 GMT Not After : Jun 10 05:06:21 2025 GMT Subject: CN=683e82cd-1f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:79:b1:d0:a3:d5:c9:44:d4:6e:8c:b9:1d:4e: 82:b8:47:03:6e:dc:8b:09:1f:0d:49:25:8c:5b:7c: c0:32:9a:a0:f3:37:fd:4c:44:11:19:0b:17:9b:a7: 7e:27:cc:57:e0:e4:8b:c9:c9:97:b9:41:1a:99:57: 58:82:ca:2d:cf:d8:7b:44:cd:bb:ca:52:27:d6:b3: 7c:aa:a4:76:13:0d:5c:9a:5b:3c:ab:b4:13:0e:29: 8b:e0:db:92:18:7c:1c:17:6b:07:e2:93:c9:ee:14: ef:43:f1:1b:d6:4f:b2:c3:92:d5:65:46:34:07:79: c0:42:5d:0b:71:7e:5a:eb:38:91:de:b7:af:d8:3d: be:ff:42:ca:97:23:99:31:bb:89:6d:45:24:e0:72: 2c:3b:0c:bf:91:2c:26:0e:06:66:ff:6d:f1:19:21: bb:d5:15:a7:da:9a:2e:a3:07:5a:05:de:f6:49:28: 49:0e:28:86:2d:1f:94:a6:63:8f:c9:6a:59:d3:a8: b7:0c:ad:f2:d3:37:ef:ca:55:c8:53:1e:4b:d2:fa: f7:93:43:34:a9:56:4d:4f:e5:20:66:30:a7:25:f5: 13:f7:93:5a:20:87:f8:05:df:f1:f5:0a:e0:71:c8: f2:92:10:5d:58:35:73:f3:3f:fb:8b:68:a2:0c:08: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:1D:CD:70:72:B9:14:77:EC:05:34:C4:64:89:29:69:EA:85:69 X509v3 Authority Key Identifier: keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:bd:e7:46:16:a7:60:7f:f1:b6:00:44:3e:18:21:18:68:ca: 53:87:51:c6:9c:31:56:d1:d8:f0:35:fb:75:c3:97:9d:60:14: 4e:eb:d4:1d:c5:67:6a:8f:f8:21:48:b1:81:42:ac:35:bb:76: d3:2d:ff:05:86:fd:11:ba:00:69:e9:9c:ac:dc:c1:3e:5a:b9: 56:4c:10:02:00:e1:be:81:13:8d:13:83:bd:a1:46:a0:8d:ea: 6c:3b:be:9f:a4:f8:17:ef:3e:2f:f2:0d:1f:31:d1:c0:12:db: db:1d:0e:e9:39:71:e9:20:60:93:f8:1e:09:e1:d8:16:1f:54: 7a:fa:d2:20:18:cc:2b:9f:44:5d:93:ee:16:dc:80:a3:73:69: c6:6c:07:06:d0:4a:b9:82:c8:8d:37:ae:bb:bc:09:72:87:e4: 06:0d:15:c1:2f:31:c9:45:af:de:c3:ec:b0:1a:5c:16:73:eb: d7:81:45:8d:9f:6a:7c:8f:1c:3f:13:a6:7f:c4:09:43:06:33: 23:a8:6b:05:6e:67:ae:bd:25:1f:3f:3e:33:4e:e6:04:5c:b1: 56:0b:52:50:ad:4c:ec:d7:cf:1f:4a:6a:93:d7:8c:be:23:b9: 69:3e:48:0b:28:fe:32:b8:2a:6e:c0:3a:f9:51:e1:1b:22:7d: 88:b0:ba:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0E3MjExMC8GA1UEBRMoMkVGNDY5NTQ0M0E0QzBDN0IzNEVBOTFCNjJBM0Q4RjhF NDE0NTE3RTAeFw0yNTA2MDMwNTA2MjFaFw0yNTA2MTAwNTA2MjFaMBgxFjAUBgNV BAMTDTY4M2U4MmNkLTFmM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpebHQo9XJRNRujLkdToK4RwNu3IsJHw1JJYxbfMAymqDzN/1MRBEZCxebp34n zFfg5IvJyZe5QRqZV1iCyi3P2HtEzbvKUifWs3yqpHYTDVyaWzyrtBMOKYvg25IY fBwXawfik8nuFO9D8RvWT7LDktVlRjQHecBCXQtxflrrOJHet6/YPb7/QsqXI5kx u4ltRSTgciw7DL+RLCYOBmb/bfEZIbvVFafami6jB1oF3vZJKEkOKIYtH5SmY4/J alnTqLcMrfLTN+/KVchTHkvS+veTQzSpVk1P5SBmMKcl9RP3k1ogh/gF3/H1CuBx yPKSEF1YNXPzP/uLaKIMCBLDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUue0dzXBy uRR37AU0xGSJKWnqhWkwHwYDVR0jBBgwFoAULvRpVEOkwMezTqkbYqPY+OQUUX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3QTcyLzQ0REU2OUNFMkIx NDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01lelRxa2JZcVBZLU9RVVVY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTHZScFZFT2t3TWV6VHFrYllxUFktT1FVVVg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 QTcyLzQ0REU2OUNFMkIxNDExRjA4NTIzRjI2QkM0RjlBRTAyL0x2UnBWRU9rd01l elRxa2JZcVBZLU9RVVVYNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADe950YWp2B/8bYARD4YIRhoylOHUcacMVbR2PA1+3XDl51gFE7r1B3F Z2qP+CFIsYFCrDW7dtMt/wWG/RG6AGnpnKzcwT5auVZMEAIA4b6BE40Tg72hRqCN 6mw7vp+k+BfvPi/yDR8x0cAS29sdDuk5cekgYJP4Hgnh2BYfVHr60iAYzCufRF2T 7hbcgKNzacZsBwbQSrmCyI03rru8CXKH5AYNFcEvMclFr97D7LAaXBZz69eBRY2f anyPHD8Tpn/ECUMGMyOoawVuZ669JR8/PjNO5gRcsVYLUlCtTOzXzx9KapPXjL4j uWk+SAso/jK4Km7AOvlR4RsifYiwurk= -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:07 2025 by rpki-client