$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft File: liwsnV7f2s79sTh-ML7D_776XNA.mft (raw, json) Hash identifier: X8JJeg6gt6gsEeJL68CPaAgU8e5mjBpTzctX3SunyY0= Subject key identifier: 76:D8:30:49:F4:1A:53:6E:13:B3:CA:1B:19:01:1C:2B:01:B3:59:F6 Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 Certificate issuer: /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft Manifest number: 01AE Signing time: Sat 31 May 2025 02:56:59 +0000 Manifest this update: Sat 31 May 2025 02:56:59 +0000 Manifest next update: Sat 07 Jun 2025 02:56:59 +0000 Files and hashes: 1: liwsnV7f2s79sTh-ML7D_776XNA.crl (hash: /LJefdBV7SPuW3zSijd3Z3BDAnBzEYYBMC7Yt7DdBVg=) 2: 94E348AE300C11EE8D3CE611C4F9AE02.roa (hash: Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=) 3: 5CA025DE300C11EE903A6211C4F9AE02.roa (hash: w5eiVbjwCl7FcDiQB51RhcBa3fhBXTl0kBsUFzWTzow=) 4: 81BA905AB5E811EDA7091163C4F9AE02.roa (hash: YzxhkuTIla90nMxllMuAPcH6Qo+CPshpVYgjHxiUelw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0 Validity Not Before: May 31 02:56:59 2025 GMT Not After : Jun 7 02:56:59 2025 GMT Subject: CN=683a6ffb-da55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:d2:a5:24:74:fc:32:76:af:ee:8f:23:bc: 5f:c5:96:32:b8:c0:ff:66:9a:bc:ff:83:3b:32:0e: b4:e8:49:81:2d:e7:3f:70:73:63:94:9a:05:8e:7a: d7:c9:8f:56:53:00:fc:f4:76:33:f6:8c:38:26:8e: c2:2f:85:53:6e:61:58:e1:f5:02:8b:08:08:e1:2b: c3:62:7a:54:0f:9a:ea:1c:17:68:57:e9:ad:23:c1: 25:55:6c:6b:d4:c0:e6:8d:9e:28:7d:78:34:d8:29: 57:6f:9d:13:e2:45:db:63:66:f2:09:7c:8b:0e:15: de:f6:05:f2:36:07:c4:21:2d:4f:81:9a:85:58:42: 2e:e3:16:79:cb:77:85:d8:5f:48:95:36:82:5f:a4: 78:e6:c8:0a:64:e1:5a:aa:a3:15:04:9c:09:b6:ce: 9c:8f:55:dd:2d:f3:4c:fb:91:05:31:59:ae:11:a9: 82:8f:63:e4:bc:8a:98:41:71:08:d6:d5:e8:c9:16: c4:bc:9a:07:58:c8:8e:b8:c1:84:a7:cf:6e:49:31: 30:59:43:47:10:23:72:8b:60:e2:dc:85:6d:08:6f: 6f:35:22:a2:68:8d:f9:b3:69:78:e3:f5:4a:a9:80: 4a:69:7d:fb:46:9c:e0:23:67:0f:e6:27:f9:16:7b: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D8:30:49:F4:1A:53:6E:13:B3:CA:1B:19:01:1C:2B:01:B3:59:F6 X509v3 Authority Key Identifier: keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4b:f4:4f:3c:66:31:72:49:a4:b3:ce:ab:7f:12:01:fd:86: f4:6d:26:ea:d9:0c:a3:7b:da:6d:cc:b4:18:8e:33:a2:ea:2c: ab:d6:cb:f5:14:85:c4:bb:e2:85:08:24:c3:5f:5d:5a:dd:9c: ca:8e:15:93:59:fa:9a:25:3d:dd:f1:bb:7e:93:b7:04:65:ee: 57:72:de:65:2a:27:29:67:f3:41:e7:33:0c:6b:83:9e:9e:8c: e6:89:1c:f7:cd:19:8c:21:48:e9:62:e2:39:00:ab:ed:83:12: 7a:99:22:5a:61:49:8e:b4:fd:87:de:b9:0d:cc:19:6b:0f:64: 43:11:19:aa:ea:fb:27:b6:a2:4a:6f:35:55:87:f7:94:63:24: ed:93:2d:95:dc:87:63:d6:61:d8:49:5f:6d:88:21:3c:e8:c7: 9f:f7:b2:a5:1d:4c:34:b3:59:69:65:79:5c:33:ab:4a:48:2b: f0:0f:d4:09:9a:f4:49:a3:e1:84:79:29:f2:26:20:dd:3b:1c: 5b:17:11:67:94:e2:2e:39:f2:8d:04:d4:e4:79:e6:3c:5f:0b: ae:88:e8:1e:0a:11:c7:57:b8:1e:82:74:a7:86:07:fe:45:ea: d3:de:f0:ab:d5:d1:d1:c1:ad:ac:fb:e7:d8:b3:0b:dc:e3:e5: 75:b8:fd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBMjAxMTAvBgNVBAUTKDk2MkMyQzlENUVERkRBQ0VGREIxMzg3RTMwQkVDM0ZG QkVGQTVDRDAwHhcNMjUwNTMxMDI1NjU5WhcNMjUwNjA3MDI1NjU5WjAYMRYwFAYD VQQDEw02ODNhNmZmYi1kYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfrSpSR0/DJ2r+6PI7xfxZYyuMD/Zpq8/4M7Mg606EmBLec/cHNjlJoFjnrX yY9WUwD89HYz9ow4Jo7CL4VTbmFY4fUCiwgI4SvDYnpUD5rqHBdoV+mtI8ElVWxr 1MDmjZ4ofXg02ClXb50T4kXbY2byCXyLDhXe9gXyNgfEIS1PgZqFWEIu4xZ5y3eF 2F9IlTaCX6R45sgKZOFaqqMVBJwJts6cj1XdLfNM+5EFMVmuEamCj2PkvIqYQXEI 1tXoyRbEvJoHWMiOuMGEp89uSTEwWUNHECNyi2Di3IVtCG9vNSKiaI35s2l44/VK qYBKaX37RpzgI2cP5if5FnuGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbYMEn0 GlNuE7PKGxkBHCsBs1n2MB8GA1UdIwQYMBaAFJYsLJ1e39rO/bE4fjC+w/+++lzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREEyMC9CNzNCRjM3Q0I1 RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJzNzlzVGgtTUw3RF83NzZY TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpd3NuVjdmMnM3OXNUaC1NTDdEXzc3NlhOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REEyMC9CNzNCRjM3Q0I1RTMxMUVEQUI1NDQ1NUFDNEY5QUUwMi9saXdzblY3ZjJz NzlzVGgtTUw3RF83NzZYTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDES/RPPGYxckmks86rfxIB/Yb0bSbq2Qyje9ptzLQYjjOi6iyr1sv1 FIXEu+KFCCTDX11a3ZzKjhWTWfqaJT3d8bt+k7cEZe5Xct5lKicpZ/NB5zMMa4Oe nozmiRz3zRmMIUjpYuI5AKvtgxJ6mSJaYUmOtP2H3rkNzBlrD2RDERmq6vsntqJK bzVVh/eUYyTtky2V3Idj1mHYSV9tiCE86Mef97KlHUw0s1lpZXlcM6tKSCvwD9QJ mvRJo+GEeSnyJiDdOxxbFxFnlOIuOfKNBNTkeeY8XwuuiOgeChHHV7gegnSnhgf+ RerT3vCr1dHRwa2s++fYswvc4+V1uP3h -----END CERTIFICATE-----Generated at Sat May 31 16:25:54 2025 by rpki-client