$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: 8fWE9kjao2jfaAVvwzxcFP9UqGlAyDn1btAJSOi81VU= Subject key identifier: EE:F6:2E:21:8F:36:A8:15:4E:8C:B3:FE:A7:87:21:97:AE:9A:66:F1 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: BC Signing time: Sat 31 May 2025 05:28:26 +0000 Manifest this update: Sat 31 May 2025 05:28:25 +0000 Manifest next update: Sat 07 Jun 2025 05:28:25 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: RxwKKbQ52znlc+NI4hb3pA7a2Wa0io4ivRJxgDKjD9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: May 31 05:28:25 2025 GMT Not After : Jun 7 05:28:25 2025 GMT Subject: CN=683a937a-1d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:74:bc:46:56:3f:d6:02:11:81:da:0a:2c: 9d:77:90:71:6e:91:6d:d8:b1:b7:c6:6e:56:c2:3b: 3f:30:94:89:67:8e:61:73:c0:97:e6:96:52:5f:bf: 47:d7:38:e6:58:2e:4d:64:f8:e4:81:fc:20:9f:33: 2e:71:02:ac:c0:51:92:ae:c8:c2:d9:bc:e1:98:ca: dc:f2:58:44:05:7f:8c:3f:61:3f:c0:6e:c6:25:71: 52:1c:45:93:4e:d7:46:f5:32:f1:bc:73:82:6b:99: d8:6e:14:9a:53:2e:15:b3:a0:80:63:ac:15:41:51: 55:3a:4e:05:04:d0:50:67:42:10:5b:f5:22:6f:7a: 49:d0:73:89:dd:53:96:55:7f:ac:09:da:50:35:ba: 1e:50:4d:3b:36:34:3b:e2:90:9c:c0:a3:d9:76:d4: 6b:a1:79:91:e0:e1:e4:75:17:e1:c5:23:13:8f:fd: 8f:42:79:e2:11:30:58:ea:d7:c9:05:19:30:b0:95: 7d:73:9f:f6:d2:52:59:35:2c:79:56:73:2a:e2:74: 29:d5:0f:b1:9c:a6:aa:3b:f5:7d:c2:d6:2e:96:a0: 2b:8c:c8:69:64:15:1b:fd:2a:0e:08:c5:48:d5:4a: 66:f9:55:41:e0:7e:26:50:0d:27:d0:ba:3d:00:21: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:2E:21:8F:36:A8:15:4E:8C:B3:FE:A7:87:21:97:AE:9A:66:F1 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:66:f3:f7:0f:a3:87:97:2c:84:84:6b:c1:d0:15:f1:3b:8a: 64:80:b4:62:78:ba:43:c0:3f:dd:29:36:8b:77:d2:10:34:03: ac:19:f7:97:eb:86:02:80:12:2c:4f:72:51:22:43:0a:a8:16: fe:d8:4f:98:47:93:3d:6d:b0:0d:2b:22:6e:6d:3d:f5:86:33: c2:e4:bb:70:15:7f:7d:7f:4c:64:a5:62:3b:3f:2b:c4:bd:84: 3f:ff:a2:32:d8:c5:0b:d0:71:7d:e4:dd:5d:39:35:96:66:e8: d6:af:41:c7:0f:84:4a:7f:d2:f2:d1:3e:70:a7:9e:8e:82:96: 9d:81:ad:23:03:5e:81:e9:1b:5d:c9:24:32:85:69:87:d6:c5: 31:6a:3c:90:66:b8:79:6c:96:27:44:7d:e0:4e:e0:7a:32:a4: 5a:df:90:89:5e:d8:eb:f2:ea:87:e7:02:ba:7b:67:05:8e:f2: d4:7a:1d:62:5b:b1:d8:0b:57:ae:13:42:0b:c8:50:ef:e5:68: 22:79:b4:af:77:ca:7c:33:66:39:f0:8a:a0:1e:09:8f:2a:aa: 42:b4:c5:54:d6:ab:99:64:38:82:b8:b2:a9:ae:9a:a6:e1:8b: 32:92:d4:c1:9c:4a:c3:06:23:83:1a:7a:64:68:2d:53:eb:8c: 59:04:99:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwNTMxMDUyODI1WhcNMjUwNjA3MDUyODI1WjAYMRYwFAYD VQQDEw02ODNhOTM3YS0xZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx50vEZWP9YCEYHaCiydd5BxbpFt2LG3xm5Wwjs/MJSJZ45hc8CX5pZSX79H 1zjmWC5NZPjkgfwgnzMucQKswFGSrsjC2bzhmMrc8lhEBX+MP2E/wG7GJXFSHEWT TtdG9TLxvHOCa5nYbhSaUy4Vs6CAY6wVQVFVOk4FBNBQZ0IQW/Uib3pJ0HOJ3VOW VX+sCdpQNboeUE07NjQ74pCcwKPZdtRroXmR4OHkdRfhxSMTj/2PQnniETBY6tfJ BRkwsJV9c5/20lJZNSx5VnMq4nQp1Q+xnKaqO/V9wtYulqArjMhpZBUb/SoOCMVI 1Upm+VVB4H4mUA0n0Lo9ACHRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO72LiGP NqgVToyz/qeHIZeummbxMB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHZvP3D6OHlyyEhGvB0BXxO4pkgLRieLpDwD/dKTaLd9IQNAOsGfeX 64YCgBIsT3JRIkMKqBb+2E+YR5M9bbANKyJubT31hjPC5LtwFX99f0xkpWI7PyvE vYQ//6Iy2MUL0HF95N1dOTWWZujWr0HHD4RKf9Ly0T5wp56Ogpadga0jA16B6Rtd ySQyhWmH1sUxajyQZrh5bJYnRH3gTuB6MqRa35CJXtjr8uqH5wK6e2cFjvLUeh1i W7HYC1euE0ILyFDv5WgiebSvd8p8M2Y58IqgHgmPKqpCtMVU1quZZDiCuLKprpqm 4YsyktTBnErDBiODGnpkaC1T64xZBJm0 -----END CERTIFICATE-----Generated at Sat May 31 14:43:09 2025 by rpki-client