$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: kSN+UrR8J8yjIOr3Ahsmr0tTlbjMbsgJd47JMNiPAf4= Subject key identifier: 0A:4B:CB:3B:CF:1D:2A:73:22:76:2F:6B:AF:55:D3:13:06:CC:3B:4D Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: D1 Signing time: Sat 31 May 2025 05:18:14 +0000 Manifest this update: Sat 31 May 2025 05:18:13 +0000 Manifest next update: Sat 07 Jun 2025 05:18:13 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: SwAwzUcPlV/nFXE+FZTu5C9SesCz/qRuLKb//bydUhA=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: May 31 05:18:13 2025 GMT Not After : Jun 7 05:18:13 2025 GMT Subject: CN=683a9116-f166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:ad:9c:af:f1:5f:82:dc:38:76:41:b6:af: eb:34:6a:64:08:97:f3:8e:66:f4:76:11:7a:58:e6: eb:0a:9e:99:c7:66:7f:0e:34:4b:06:49:6e:c9:5c: d7:22:a7:69:50:16:72:07:f6:92:d0:bb:f9:2e:f4: 55:03:39:3f:c9:89:c0:7c:4f:12:25:ea:5c:96:49: a4:9c:26:1d:76:dd:e9:15:39:53:dc:c9:0c:a2:ab: 6e:31:58:88:66:a5:40:c2:fe:01:18:66:13:b9:58: 4e:0b:77:ae:c7:c9:45:90:ad:fd:c1:04:aa:a6:d6: c0:70:b1:2b:62:47:a1:39:14:60:35:cc:f4:66:98: 9e:5d:f1:cb:10:60:06:b6:c0:ac:94:05:50:ad:ae: 4e:e4:77:1b:31:f7:d5:8b:6e:0c:b8:09:50:2b:75: ce:50:c8:d3:95:9f:ed:19:42:23:d9:89:25:a1:25: 3f:20:ab:3d:8b:26:c5:7a:49:13:13:b9:ef:56:f0: 78:62:ab:ea:92:f7:7b:de:c1:54:6a:4a:02:17:73: 8a:f6:11:2e:25:7c:55:31:fa:2b:6c:78:65:87:21: 5d:7a:95:cb:c6:6d:23:6a:96:76:a3:c7:97:d0:be: 6b:75:be:03:a2:b0:72:6e:7a:a8:d6:98:bb:88:75: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:CB:3B:CF:1D:2A:73:22:76:2F:6B:AF:55:D3:13:06:CC:3B:4D X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:68:87:f1:a0:c9:97:8d:d8:29:cf:81:76:43:38:fb:e2:28: ec:b7:38:14:11:6b:33:fc:17:f3:6f:9b:d6:ca:1b:f3:69:87: b6:34:07:5c:5c:60:71:a9:ff:90:2f:59:67:95:53:a1:b8:67: dd:10:98:cb:4d:60:97:9a:49:91:d9:57:41:17:01:78:f1:8e: c6:06:ee:6f:fa:c2:4d:85:49:4e:cb:b8:6e:21:0e:cf:94:9b: de:67:4b:7a:b7:86:8d:d4:a4:04:b9:17:d2:7e:7b:7f:f2:e3: 75:9c:a1:ee:bf:6c:7b:ed:e0:b1:c0:72:b4:cc:d9:f2:c9:92: 50:53:41:a8:7a:b5:ea:ac:63:3c:88:05:63:6d:6f:0b:ae:c9: c5:c8:83:f9:fe:50:f8:a3:bf:a2:8e:7b:bd:1f:64:c0:7a:13: df:ca:1b:a6:0a:41:9b:4d:3c:f6:b8:72:f6:c2:11:8a:b0:e3: a7:e4:de:6a:80:ef:09:df:28:0d:02:04:b0:f5:78:a3:84:41: 54:36:67:63:12:c6:db:0d:61:a5:26:ee:97:a1:31:89:dd:90: 65:64:0d:81:3b:af:e1:b4:4c:e7:44:8d:79:ab:ce:05:2f:c4: 2f:97:53:75:40:c0:7d:61:71:f6:b3:0d:e2:ae:0e:b0:7b:6f: 93:3a:83:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUwNTMxMDUxODEzWhcNMjUwNjA3MDUxODEzWjAYMRYwFAYD VQQDEw02ODNhOTExNi1mMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xWtnK/xX4LcOHZBtq/rNGpkCJfzjmb0dhF6WObrCp6Zx2Z/DjRLBkluyVzX IqdpUBZyB/aS0Lv5LvRVAzk/yYnAfE8SJepclkmknCYddt3pFTlT3MkMoqtuMViI ZqVAwv4BGGYTuVhOC3eux8lFkK39wQSqptbAcLErYkehORRgNcz0ZpieXfHLEGAG tsCslAVQra5O5HcbMffVi24MuAlQK3XOUMjTlZ/tGUIj2YkloSU/IKs9iybFekkT E7nvVvB4Yqvqkvd73sFUakoCF3OK9hEuJXxVMforbHhlhyFdepXLxm0japZ2o8eX 0L5rdb4DorBybnqo1pi7iHUbLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApLyzvP HSpzInYva69V0xMGzDtNMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6aIfxoMmXjdgpz4F2Qzj74ijstzgUEWsz/Bfzb5vWyhvzaYe2NAdc XGBxqf+QL1lnlVOhuGfdEJjLTWCXmkmR2VdBFwF48Y7GBu5v+sJNhUlOy7huIQ7P lJveZ0t6t4aN1KQEuRfSfnt/8uN1nKHuv2x77eCxwHK0zNnyyZJQU0GoerXqrGM8 iAVjbW8LrsnFyIP5/lD4o7+ijnu9H2TAehPfyhumCkGbTTz2uHL2whGKsOOn5N5q gO8J3ygNAgSw9XijhEFUNmdjEsbbDWGlJu6XoTGJ3ZBlZA2BO6/htEznRI15q84F L8Qvl1N1QMB9YXH2sw3irg6we2+TOoPF -----END CERTIFICATE-----Generated at Sat May 31 16:42:01 2025 by rpki-client