$ rpki-client -vvf rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft File: lvYxs3stzK--57Cb_fRxXhocUFs.mft (raw, json) Hash identifier: /RZ68jIpmboefq7P4Qe/CECc+GiKGemrRaBF6LvzGLQ= Subject key identifier: 25:D8:62:5B:BC:61:2B:FE:0C:8E:50:A0:83:C1:AA:AC:26:4A:D1:28 Authority key identifier: 96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B Certificate issuer: /CN=A9171DB9/serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft Manifest number: 0482 Signing time: Sat 31 May 2025 00:16:25 +0000 Manifest this update: Sat 31 May 2025 00:16:25 +0000 Manifest next update: Sat 07 Jun 2025 00:16:25 +0000 Files and hashes: 1: lvYxs3stzK--57Cb_fRxXhocUFs.crl (hash: Yf1kNtB0oNIWNjoCaWWF+qxm/vBypgVIPB6kUfUSGSk=) 2: 6EC5F1A8420611ECB8345E7DC4F9AE02.roa (hash: pWVT/yLPwS8QXceP4ztZ/aw/Myzun+GPcuksVrgOEUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171DB9, serialNumber=96F631B37B2DCCAFBEE7B09BFDF4715E1A1C505B Validity Not Before: May 31 00:16:25 2025 GMT Not After : Jun 7 00:16:25 2025 GMT Subject: CN=683a4a59-6eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:e6:04:05:d7:f6:d1:11:05:f6:7a:ec:bc: 1e:f4:97:cc:e9:31:1c:f6:51:6e:f8:e1:ba:56:0f: 60:bf:33:7e:79:9d:be:85:02:52:cc:7f:e2:20:80: 0a:2a:94:45:84:14:a6:fd:d2:86:4b:42:f8:04:0a: 65:a1:76:8e:be:94:1a:d9:3d:26:66:82:ca:68:c7: 0d:06:e8:d9:f0:16:72:8a:bc:88:f4:8e:1e:34:d2: b8:7f:d6:8e:08:57:17:b2:ab:ad:a1:9c:85:a1:f0: a9:3d:a4:52:51:5f:2c:10:10:c8:4e:7b:2a:38:ba: 89:3b:44:d3:dd:3b:1c:5d:41:e9:dd:a1:8b:43:62: 2e:41:68:45:69:97:25:c4:1e:b4:88:7d:e0:de:52: 26:5c:0c:b7:20:38:44:83:90:d5:46:b0:6f:37:6c: 26:9f:d3:43:93:34:2a:91:2e:f1:c4:83:10:e8:33: f1:ed:b5:72:49:30:ab:86:88:9b:3e:eb:1d:31:fd: 9b:5d:18:a0:ef:29:66:ec:b2:95:31:cf:2a:48:1e: ee:a2:8f:d4:f1:6d:66:c0:6c:72:77:16:04:32:23: 23:b7:0c:e3:2b:a7:a3:e9:7f:39:16:9d:5b:78:c4: 68:e1:ff:7e:b0:79:7f:8d:b6:22:4d:14:8f:ae:33: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D8:62:5B:BC:61:2B:FE:0C:8E:50:A0:83:C1:AA:AC:26:4A:D1:28 X509v3 Authority Key Identifier: keyid:96:F6:31:B3:7B:2D:CC:AF:BE:E7:B0:9B:FD:F4:71:5E:1A:1C:50:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvYxs3stzK--57Cb_fRxXhocUFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171DB9/A9C90F14420211ECBA261976C4F9AE02/lvYxs3stzK--57Cb_fRxXhocUFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4b:20:3e:f2:d3:7b:1a:4c:0a:7f:8c:91:7b:5e:76:bb:f5: 0b:85:11:06:49:51:4b:11:b1:49:80:a0:4f:c2:37:84:0b:be: 0b:d7:db:a6:66:d7:5d:03:25:d1:33:35:0c:55:64:b5:c8:30: 0c:de:f5:3e:d8:64:88:0a:9e:66:11:1b:28:20:d7:20:ef:cb: 6c:51:e1:73:3c:18:e6:a0:f7:f7:37:e5:13:83:3b:a0:d2:96: 27:aa:b2:bf:f4:df:9e:ff:28:cb:42:1c:70:b1:45:37:93:9f: 02:a2:9d:cc:de:6c:28:ad:00:ec:4a:fa:db:df:e8:50:86:73: 3f:42:90:2e:dd:3f:21:64:0f:eb:4a:32:0e:ac:1d:31:43:5f: 95:1a:ad:c3:15:db:02:2d:d4:11:5a:a5:21:ed:bd:70:80:b0: 55:14:7a:07:77:97:0b:13:2d:26:cd:6f:4b:2a:88:62:d0:54: cb:f4:b6:9a:82:1b:13:00:01:d6:55:ba:8b:09:b3:1b:06:aa: fd:55:a3:6f:d5:c2:93:f2:6e:81:bf:c7:87:82:06:be:69:5f: 9d:be:94:e1:37:fd:3e:da:dd:91:de:0f:58:ee:df:5e:55:28: 9c:fb:c9:b7:50:21:ac:05:d0:66:b1:9c:17:bb:5b:1c:a0:da: 49:3d:59:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEQjkxMTAvBgNVBAUTKDk2RjYzMUIzN0IyRENDQUZCRUU3QjA5QkZERjQ3MTVF MUExQzUwNUIwHhcNMjUwNTMxMDAxNjI1WhcNMjUwNjA3MDAxNjI1WjAYMRYwFAYD VQQDEw02ODNhNGE1OS02ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbXmBAXX9tERBfZ67Lwe9JfM6TEc9lFu+OG6Vg9gvzN+eZ2+hQJSzH/iIIAK KpRFhBSm/dKGS0L4BAploXaOvpQa2T0mZoLKaMcNBujZ8BZyiryI9I4eNNK4f9aO CFcXsqutoZyFofCpPaRSUV8sEBDITnsqOLqJO0TT3TscXUHp3aGLQ2IuQWhFaZcl xB60iH3g3lImXAy3IDhEg5DVRrBvN2wmn9NDkzQqkS7xxIMQ6DPx7bVySTCrhoib PusdMf2bXRig7ylm7LKVMc8qSB7uoo/U8W1mwGxydxYEMiMjtwzjK6ej6X85Fp1b eMRo4f9+sHl/jbYiTRSPrjMJJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXYYlu8 YSv+DI5QoIPBqqwmStEoMB8GA1UdIwQYMBaAFJb2MbN7Lcyvvuewm/30cV4aHFBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MURCOS9BOUM5MEYxNDQy MDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpLLS01N0NiX2ZSeFhob2NV RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2WXhzM3N0ekstLTU3Q2JfZlJ4WGhvY1VGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MURCOS9BOUM5MEYxNDQyMDIxMUVDQkEyNjE5NzZDNEY5QUUwMi9sdll4czNzdHpL LS01N0NiX2ZSeFhob2NVRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuSyA+8tN7GkwKf4yRe152u/ULhREGSVFLEbFJgKBPwjeEC74L19um ZtddAyXRMzUMVWS1yDAM3vU+2GSICp5mERsoINcg78tsUeFzPBjmoPf3N+UTgzug 0pYnqrK/9N+e/yjLQhxwsUU3k58Cop3M3mworQDsSvrb3+hQhnM/QpAu3T8hZA/r SjIOrB0xQ1+VGq3DFdsCLdQRWqUh7b1wgLBVFHoHd5cLEy0mzW9LKohi0FTL9Laa ghsTAAHWVbqLCbMbBqr9VaNv1cKT8m6Bv8eHgga+aV+dvpThN/0+2t2R3g9Y7t9e VSic+8m3UCGsBdBmsZwXu1scoNpJPVmd -----END CERTIFICATE-----Generated at Sat May 31 17:39:23 2025 by rpki-client