$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: Was4D25j7WA96uu9fLsTi0E3Ey4wdg4BveILihtqZ44= Subject key identifier: FD:81:9E:CF:DC:36:E5:83:46:6C:4D:7B:27:E1:18:3E:A2:4A:81:D3 Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 07AA Signing time: Fri 30 May 2025 21:33:25 +0000 Manifest this update: Fri 30 May 2025 21:33:24 +0000 Manifest next update: Fri 06 Jun 2025 21:33:24 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: VWC2lq3E1R/6RYz4lKbGuwRwCeKHjC9oB8X1THJ1dJE=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: May 30 21:33:24 2025 GMT Not After : Jun 6 21:33:24 2025 GMT Subject: CN=683a2425-29a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:7f:c2:98:34:56:0f:57:7f:ca:53:96:a7: 9a:a3:26:43:6a:93:72:3d:2c:6c:7e:e9:35:70:b8: 96:c0:9b:75:9f:3f:53:20:c9:9c:14:10:be:ca:17: 7a:64:02:85:62:c9:5a:42:cb:c3:8c:b6:33:90:57: 5d:cf:9a:04:94:5d:42:d8:00:5e:40:6f:6b:3b:2c: 94:ea:69:38:47:be:94:bf:fc:93:02:e7:e9:8e:b4: 86:60:96:47:34:16:36:73:87:79:23:52:35:d3:49: fe:e3:25:14:02:c9:53:0f:f5:23:cb:63:f2:8e:50: 05:a9:cf:e1:d1:79:cf:ba:f8:23:e1:3f:f5:2c:ad: 2d:68:cc:ae:1e:c5:b1:f5:b6:35:89:57:31:9f:d0: 72:5e:cd:da:c8:56:4f:b4:e2:05:98:9b:2a:ea:be: a4:bb:ac:97:f0:d8:8c:33:76:0b:0c:3d:08:a8:77: b0:8a:95:5e:1b:37:71:0c:5d:f2:fe:34:62:ec:e1: 82:6c:9c:13:18:e5:7f:cc:87:6c:ed:bf:7d:bc:69: 45:2d:12:af:22:1b:be:5d:54:07:4a:f7:b0:ca:e4: 63:a4:d9:27:ab:32:68:cc:f8:82:59:7a:c4:1f:5f: 3c:a4:2e:51:a4:46:ce:7e:41:4f:b6:1b:2c:84:d6: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:81:9E:CF:DC:36:E5:83:46:6C:4D:7B:27:E1:18:3E:A2:4A:81:D3 X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ff:b6:c0:f2:5a:c3:26:dd:4f:23:af:5a:46:48:f9:4f:64: fe:34:c3:a5:15:93:16:43:50:53:03:f1:ec:51:f9:b3:6e:6d: 2d:31:32:89:d2:a0:74:95:0c:f6:6c:f7:2a:78:7c:70:20:2d: 40:28:dd:88:17:77:e3:8c:34:e2:ff:cd:c4:e9:4f:b3:52:38: 44:97:bd:e1:94:df:5c:60:56:c6:30:84:a5:06:ea:2b:28:10: 69:49:de:5c:d0:c0:c5:d5:ef:52:32:3b:87:a3:c4:da:2d:46: 0b:e5:55:8f:b7:a2:af:48:10:d4:6b:44:8f:35:73:6c:37:03: fe:29:15:56:c1:ed:87:3e:a5:59:f6:94:74:71:51:1d:dd:3d: da:e4:ff:a5:64:94:3f:77:0c:b5:25:71:95:ce:ab:4f:d9:96: be:3f:8c:c8:49:9b:32:59:90:b8:51:a7:2c:de:de:2d:ce:2e: 56:e0:18:68:27:2f:b4:55:eb:6e:58:67:a4:da:b0:71:b6:74: 96:fe:2e:87:95:c2:9a:e2:ea:a2:a9:66:04:66:e6:4c:f6:e1: dd:d4:d0:44:38:43:2c:f1:57:d3:b2:a0:5d:60:26:16:02:c5: ad:eb:7e:60:d1:02:17:2d:9b:d6:b9:c7:b4:61:bf:1a:dc:ec: d6:ad:db:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwNTMwMjEzMzI0WhcNMjUwNjA2MjEzMzI0WjAYMRYwFAYD VQQDEw02ODNhMjQyNS0yOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/J/wpg0Vg9Xf8pTlqeaoyZDapNyPSxsfuk1cLiWwJt1nz9TIMmcFBC+yhd6 ZAKFYslaQsvDjLYzkFddz5oElF1C2ABeQG9rOyyU6mk4R76Uv/yTAufpjrSGYJZH NBY2c4d5I1I100n+4yUUAslTD/Ujy2PyjlAFqc/h0XnPuvgj4T/1LK0taMyuHsWx 9bY1iVcxn9ByXs3ayFZPtOIFmJsq6r6ku6yX8NiMM3YLDD0IqHewipVeGzdxDF3y /jRi7OGCbJwTGOV/zIds7b99vGlFLRKvIhu+XVQHSvewyuRjpNknqzJozPiCWXrE H188pC5RpEbOfkFPthsshNZ6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2Bns/c NuWDRmxNeyfhGD6iSoHTMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/7bA8lrDJt1PI69aRkj5T2T+NMOlFZMWQ1BTA/HsUfmzbm0tMTKJ 0qB0lQz2bPcqeHxwIC1AKN2IF3fjjDTi/83E6U+zUjhEl73hlN9cYFbGMISlBuor KBBpSd5c0MDF1e9SMjuHo8TaLUYL5VWPt6KvSBDUa0SPNXNsNwP+KRVWwe2HPqVZ 9pR0cVEd3T3a5P+lZJQ/dwy1JXGVzqtP2Za+P4zISZsyWZC4Uacs3t4tzi5W4Bho Jy+0VetuWGek2rBxtnSW/i6HlcKa4uqiqWYEZuZM9uHd1NBEOEMs8VfTsqBdYCYW AsWt635g0QIXLZvWuce0Yb8a3OzWrdsE -----END CERTIFICATE-----Generated at Sat May 31 16:45:49 2025 by rpki-client