$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: jmVckszs5sfANrETqFNuuAlM0PKBVLoAha40IYTRiMI= Subject key identifier: 1B:CC:68:E1:2B:EB:51:3E:9D:43:17:8C:20:13:43:25:4F:C7:6E:4F Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 0121 Signing time: Sat 31 May 2025 04:24:33 +0000 Manifest this update: Sat 31 May 2025 04:24:33 +0000 Manifest next update: Sat 07 Jun 2025 04:24:33 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: ahshTxrKaxQor85yj3gEUpq4avUvdeGYJxZdf5j8hOw=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: May 31 04:24:33 2025 GMT Not After : Jun 7 04:24:33 2025 GMT Subject: CN=683a8481-c3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:72:37:29:6d:4b:04:64:37:b8:9c:dd:65:1b: 68:fa:62:d6:35:30:17:5c:e4:0e:b9:ab:12:20:a9: 84:cf:bb:99:cd:a8:76:fd:73:7b:14:ba:fe:3d:dc: 28:2c:b6:2a:ae:fc:0a:37:44:02:b4:93:68:f3:c2: a8:10:26:de:2b:bd:92:9a:47:6e:f1:64:3b:35:18: 87:7d:b0:bd:c0:d9:81:45:c2:91:52:da:1a:6b:5d: 38:26:01:cb:4b:ed:a8:59:5b:02:35:0b:77:8b:da: 60:ce:da:eb:38:a0:a0:6e:5b:af:76:26:fe:d5:1b: 3b:fe:50:8a:df:44:66:99:d2:f2:c7:40:1a:49:f8: c5:02:ed:9f:11:3a:56:66:74:02:3c:26:5f:88:f6: 6d:d6:a1:43:c7:2a:92:2b:44:0e:75:74:1f:db:b1: a5:45:f0:19:16:40:8d:b6:42:b8:bd:2f:1a:51:28: 47:97:e2:77:2c:b1:ef:f4:68:9e:7e:9f:f2:b0:a5: fb:55:b7:ed:16:77:72:71:b4:8d:2b:7c:e0:cb:0c: 43:40:cc:3a:58:f3:19:85:2b:72:89:d5:56:ac:18: 62:af:8f:45:7d:ad:13:bd:f0:31:aa:5f:06:93:d1: f2:f4:23:ff:de:fd:83:51:ae:68:de:74:36:8c:af: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:68:E1:2B:EB:51:3E:9D:43:17:8C:20:13:43:25:4F:C7:6E:4F X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:48:ab:85:f1:ec:91:d7:50:47:31:4b:71:f6:f7:24:b3:d8: 42:88:40:2d:0d:a7:ee:fd:6d:90:24:ae:21:17:11:af:d6:14: f6:36:52:f1:34:a2:c3:f6:85:7f:e5:18:14:1b:a0:eb:0b:70: 12:cf:2c:a8:4e:c5:10:e8:30:fe:62:91:c6:61:a4:92:22:3c: 66:f3:40:c2:02:47:59:e0:ef:7c:8b:ba:c0:90:0f:e6:d9:1f: 86:a7:d0:09:23:49:57:56:22:2f:7d:17:dd:e5:7c:40:ee:32: 26:4f:a6:cf:8a:b3:c1:97:02:23:71:fb:39:52:b3:3d:6a:14: d3:f1:bd:af:bf:64:df:65:b0:b9:05:a9:ab:d4:3a:22:75:84: 47:81:39:c5:3e:8c:df:61:a0:c0:35:8a:7c:f6:a3:a5:47:bd: ba:15:25:7d:f6:12:f2:b9:98:32:11:ee:96:ea:ac:e2:26:28: 00:e6:a5:73:49:03:1f:16:ea:c2:16:86:38:f2:cb:f6:3c:0e: 94:be:63:41:b8:02:cc:a8:0a:9a:c9:05:de:b2:49:90:10:b2: 5b:0c:32:5b:7d:e2:44:ae:bf:b0:15:4a:73:44:46:4c:b5:90: 2e:6f:a2:d6:2c:72:e0:66:b5:45:9b:1d:97:d7:23:4e:9a:6e: 61:a8:38:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwNTMxMDQyNDMzWhcNMjUwNjA3MDQyNDMzWjAYMRYwFAYD VQQDEw02ODNhODQ4MS1jM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nI3KW1LBGQ3uJzdZRto+mLWNTAXXOQOuasSIKmEz7uZzah2/XN7FLr+Pdwo LLYqrvwKN0QCtJNo88KoECbeK72Smkdu8WQ7NRiHfbC9wNmBRcKRUtoaa104JgHL S+2oWVsCNQt3i9pgztrrOKCgbluvdib+1Rs7/lCK30RmmdLyx0AaSfjFAu2fETpW ZnQCPCZfiPZt1qFDxyqSK0QOdXQf27GlRfAZFkCNtkK4vS8aUShHl+J3LLHv9Gie fp/ysKX7VbftFndycbSNK3zgywxDQMw6WPMZhStyidVWrBhir49Ffa0TvfAxql8G k9Hy9CP/3v2DUa5o3nQ2jK8YEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvMaOEr 61E+nUMXjCATQyVPx25PMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfSKuF8eyR11BHMUtx9vcks9hCiEAtDafu/W2QJK4hFxGv1hT2NlLx NKLD9oV/5RgUG6DrC3ASzyyoTsUQ6DD+YpHGYaSSIjxm80DCAkdZ4O98i7rAkA/m 2R+Gp9AJI0lXViIvfRfd5XxA7jImT6bPirPBlwIjcfs5UrM9ahTT8b2vv2TfZbC5 Bamr1DoidYRHgTnFPozfYaDANYp89qOlR726FSV99hLyuZgyEe6W6qziJigA5qVz SQMfFurCFoY48sv2PA6UvmNBuALMqAqayQXeskmQELJbDDJbfeJErr+wFUpzREZM tZAub6LWLHLgZrVFmx2X1yNOmm5hqDhJ -----END CERTIFICATE-----Generated at Sat May 31 16:44:55 2025 by rpki-client