$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: Lrp5GVHaFQ1LwwTqYx7D2if1oo0LzuZLvXo8U0rKNkA= Subject key identifier: 9A:C5:E9:2C:5C:BF:0C:0C:43:05:0D:61:D6:1F:36:13:F2:6F:68:68 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: E4 Signing time: Thu 13 Mar 2025 03:37:37 +0000 Manifest this update: Thu 13 Mar 2025 03:37:36 +0000 Manifest next update: Thu 20 Mar 2025 03:37:36 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: Hg2iUC71fCZDd95+5Ek1KfiWA8zXbekMvDo9FY7zj1k=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: gkwCHwAw2AeTpa4lg8FqfiRWIQMjK7+U13kDlZDWP1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306 Validity Not Before: Mar 13 03:37:36 2025 GMT Not After : Mar 20 03:37:36 2025 GMT Subject: CN=67d25301-2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:9b:a5:9f:42:81:e9:3a:76:00:be:48:c2: ae:de:ac:69:c6:aa:ce:7b:9d:5b:cf:7e:76:36:66: 0a:f1:f8:68:a4:03:0d:57:35:83:28:36:65:81:41: 62:50:99:d6:7e:38:8f:60:fb:76:99:31:e3:9f:5d: a8:2f:ed:37:d4:00:76:c4:30:9c:a7:37:ae:84:aa: fa:7f:c4:4d:31:e3:0a:15:ea:b9:b1:7c:e8:5f:f1: 38:cf:38:85:b2:b6:e5:e3:3d:e6:52:fa:87:bd:bf: f2:3e:26:92:81:0e:ca:ab:3c:9a:32:11:5b:58:a2: 0b:b9:84:b6:86:87:3e:00:66:85:50:64:ec:60:88: f8:e9:e1:e8:c6:31:d0:27:94:2c:9b:0c:c5:ad:9d: d0:4a:c1:88:5e:08:5a:2b:39:73:1b:40:61:a8:03: 91:d8:1b:bd:45:c4:fc:a5:ce:36:93:fe:59:8f:ba: 1a:4b:64:06:c3:03:af:b8:13:cf:35:f4:86:2d:9f: a2:fd:63:0c:a6:cc:91:26:43:80:a4:d6:9e:44:e6: 0e:0e:d3:28:25:a6:73:10:fb:e6:e3:52:f9:c9:43: 15:07:c8:c9:3b:62:74:1d:f6:a9:76:f8:b8:d6:5a: 11:1f:07:8f:9c:ce:cb:8a:48:6f:0e:63:2c:40:82: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C5:E9:2C:5C:BF:0C:0C:43:05:0D:61:D6:1F:36:13:F2:6F:68:68 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4d:b8:dd:c1:95:cd:a1:81:1c:db:36:63:a9:dc:81:82:45: 70:5b:10:92:dd:35:43:bc:ac:64:99:95:ff:01:d7:2b:fd:fe: b3:b9:2e:f0:8b:26:77:4c:49:83:fc:84:75:f3:d6:2e:b3:a4: 08:1e:02:d8:42:40:71:51:d6:95:6c:66:f8:f6:2b:0b:83:7d: 87:cb:7c:c6:bb:8c:a6:8b:37:f5:02:20:c7:2a:29:16:93:21: 40:45:94:be:75:36:a1:66:79:d4:9e:24:96:5c:5f:93:a3:78: fc:fd:49:5b:89:f2:0f:72:c8:8c:7f:8a:0f:5b:62:30:5c:3d: 1a:ec:64:89:fc:3b:a6:1f:88:6d:38:58:0c:63:f6:ad:42:a0: ad:cc:8c:e3:9f:a6:61:33:f2:4d:7a:53:b3:2d:61:b5:65:28: a4:e1:53:66:e0:1e:8f:5d:2e:b6:22:84:be:e6:44:87:6a:6a: b9:a3:c1:38:98:8c:2a:49:d9:fb:f2:c4:63:fd:b8:f8:82:82: 94:1c:33:4c:a6:47:32:ff:4d:0d:93:49:23:cb:97:10:14:73: 8c:89:12:a5:ac:a8:e3:b8:22:af:0d:8c:0d:bf:e6:34:e5:0a: 0e:ce:54:c6:75:c7:0b:6b:73:5e:62:9e:a8:e7:de:ad:cc:61: ee:5b:f2:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3 MjhGOTVDRjUwHhcNMjUwMzEzMDMzNzM2WhcNMjUwMzIwMDMzNzM2WjAYMRYwFAYD VQQDEw02N2QyNTMwMS0yNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FObpZ9Cgek6dgC+SMKu3qxpxqrOe51bz352NmYK8fhopAMNVzWDKDZlgUFi UJnWfjiPYPt2mTHjn12oL+031AB2xDCcpzeuhKr6f8RNMeMKFeq5sXzoX/E4zziF srbl4z3mUvqHvb/yPiaSgQ7KqzyaMhFbWKILuYS2hoc+AGaFUGTsYIj46eHoxjHQ J5QsmwzFrZ3QSsGIXghaKzlzG0BhqAOR2Bu9RcT8pc42k/5Zj7oaS2QGwwOvuBPP NfSGLZ+i/WMMpsyRJkOApNaeROYODtMoJaZzEPvm41L5yUMVB8jJO2J0Hfapdvi4 1loRHwePnM7LikhvDmMsQILwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrF6Sxc vwwMQwUNYdYfNhPyb2hoMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDITbjdwZXNoYEc2zZjqdyBgkVwWxCS3TVDvKxkmZX/Adcr/f6zuS7w iyZ3TEmD/IR189Yus6QIHgLYQkBxUdaVbGb49isLg32Hy3zGu4ymizf1AiDHKikW kyFARZS+dTahZnnUniSWXF+To3j8/UlbifIPcsiMf4oPW2IwXD0a7GSJ/DumH4ht OFgMY/atQqCtzIzjn6ZhM/JNelOzLWG1ZSik4VNm4B6PXS62IoS+5kSHamq5o8E4 mIwqSdn78sRj/bj4goKUHDNMpkcy/00Nk0kjy5cQFHOMiRKlrKjjuCKvDYwNv+Y0 5QoOzlTGdccLa3NeYp6o596tzGHuW/Jl -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:09 2025 by rpki-client