$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: gJyvVchjc1Ybwd1IIBAc225OGsfuC8apQBJ5pXWH6Ew= Subject key identifier: DC:18:1E:CB:9F:BA:E1:E3:E1:DD:E9:06:5D:64:5E:4F:95:04:E2:19 Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 3477 Signing time: Sun 04 May 2025 15:00:38 +0000 Manifest this update: Sun 04 May 2025 15:00:37 +0000 Manifest next update: Sun 11 May 2025 15:00:37 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: ExxR3DGH8SHgVsst1awYkKcU49PIMp41SIgIMfjCCDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2, serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: May 4 15:00:37 2025 GMT Not After : May 11 15:00:37 2025 GMT Subject: CN=68178116-805b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e9:43:1f:10:bc:10:e4:b6:8c:c6:95:7a:d6: 0a:a9:66:45:b8:b2:15:ad:40:2d:cc:48:4b:9a:b9: ec:af:70:c2:14:0a:2f:52:59:9b:68:53:44:bf:9f: 07:99:19:47:df:a2:bd:6e:b5:6a:57:de:2a:d9:00: 50:01:98:1a:2f:bb:91:30:5d:f4:16:b1:f0:80:64: 7c:32:a9:27:6c:ff:89:01:52:2d:54:4a:95:3e:ad: 31:96:4b:a7:2b:5d:e6:92:e4:4f:a9:d5:53:9c:15: cf:f6:95:5c:76:4b:99:c9:ca:50:fb:af:11:06:f5: 27:41:65:c8:97:10:67:06:d5:6c:a3:50:50:90:5f: d6:f9:e6:e4:2f:7e:30:a2:c8:f5:6a:8b:a2:b9:81: f2:54:c2:f3:a2:1a:52:cb:f6:9c:e1:63:0e:9a:5f: 98:3b:13:59:1f:58:01:0b:92:29:91:3f:0e:63:c4: cf:f7:77:e8:4f:68:16:e6:13:9b:d6:a1:d0:56:fc: de:eb:99:d1:47:e2:3d:3a:8a:41:8d:24:39:33:92: a7:c3:d0:89:87:c5:d4:a6:7a:59:89:5e:e2:22:c2: 72:33:e6:a1:0b:d0:d4:46:e3:7d:70:22:e3:6c:4f: dd:d9:37:99:3f:cc:d6:17:30:34:3e:4d:d3:54:c3: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:1E:CB:9F:BA:E1:E3:E1:DD:E9:06:5D:64:5E:4F:95:04:E2:19 X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:04:53:12:0a:92:f2:9d:89:e6:39:9d:ff:46:e4:6b:0b:de: 46:2d:2d:cd:c1:21:36:59:89:c8:34:eb:bd:7b:c5:5f:57:97: ab:c3:11:28:cd:7f:b0:a8:61:cf:c5:10:a3:24:cf:28:32:d5: 3f:83:fd:2e:32:d7:3d:1e:b0:96:17:ea:ee:39:66:66:27:4d: a8:e8:ac:38:b5:94:c3:63:3a:37:1c:6e:1b:6f:fe:3a:f1:76: 8a:41:c2:0a:83:24:8b:e1:87:07:0e:db:a8:32:fd:6c:7e:7e: c7:03:1c:f1:91:06:1c:84:e2:22:e4:b4:68:06:90:6b:97:a4: 4e:2b:bf:7a:65:c7:32:f3:ca:a4:8a:1e:7b:69:5c:4d:1c:23: 1d:22:3c:62:f0:71:88:62:b4:00:e8:7a:6d:0b:46:36:84:de: c3:88:a1:53:19:68:3c:c2:8b:55:b7:f3:0d:21:f3:d8:62:90: ee:dd:d8:b3:5b:25:2b:48:c2:4e:c2:b9:0e:cf:28:9d:1b:09: 95:d1:cf:2a:5b:ba:30:ec:24:7b:87:ec:a5:a5:93:c9:db:eb: d9:41:65:fa:d9:e2:23:2a:28:e4:5a:8d:ea:6b:56:02:62:24: 88:43:c1:e6:11:98:70:10:26:8b:50:a8:d0:83:a1:47:de:d9: 2f:05:f3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjUwNTA0MTUwMDM3WhcNMjUwNTExMTUwMDM3WjAYMRYwFAYD VQQDEw02ODE3ODExNi04MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+lDHxC8EOS2jMaVetYKqWZFuLIVrUAtzEhLmrnsr3DCFAovUlmbaFNEv58H mRlH36K9brVqV94q2QBQAZgaL7uRMF30FrHwgGR8MqknbP+JAVItVEqVPq0xlkun K13mkuRPqdVTnBXP9pVcdkuZycpQ+68RBvUnQWXIlxBnBtVso1BQkF/W+ebkL34w osj1aouiuYHyVMLzohpSy/ac4WMOml+YOxNZH1gBC5IpkT8OY8TP93foT2gW5hOb 1qHQVvze65nRR+I9OopBjSQ5M5Knw9CJh8XUpnpZiV7iIsJyM+ahC9DURuN9cCLj bE/d2TeZP8zWFzA0Pk3TVMMzowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwYHsuf uuHj4d3pBl1kXk+VBOIZMB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqBFMSCpLynYnmOZ3/RuRrC95GLS3NwSE2WYnINOu9e8VfV5erwxEo zX+wqGHPxRCjJM8oMtU/g/0uMtc9HrCWF+ruOWZmJ02o6Kw4tZTDYzo3HG4bb/46 8XaKQcIKgySL4YcHDtuoMv1sfn7HAxzxkQYchOIi5LRoBpBrl6ROK796Zccy88qk ih57aVxNHCMdIjxi8HGIYrQA6HptC0Y2hN7DiKFTGWg8wotVt/MNIfPYYpDu3diz WyUrSMJOwrkOzyidGwmV0c8qW7ow7CR7h+ylpZPJ2+vZQWX62eIjKijkWo3qa1YC YiSIQ8HmEZhwECaLUKjQg6FH3tkvBfM6 -----END CERTIFICATE-----Generated at Mon May 5 07:30:05 2025 by rpki-client