$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: GraMfVL6RD9WTRi4/e+bTNlBUVHgOCpyxrkfC7ngpwA= Subject key identifier: E5:55:E0:F4:4D:24:AB:C7:04:A2:CA:D8:E0:07:57:75:62:CB:3C:40 Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 01CF Signing time: Sun 11 May 2025 01:51:43 +0000 Manifest this update: Sun 11 May 2025 01:51:43 +0000 Manifest next update: Sun 18 May 2025 01:51:43 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: IopoVbjOWNN0/SRcSJPfr3HjH3OHtss4Hrog1cOr99U=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: May 11 01:51:43 2025 GMT Not After : May 18 01:51:43 2025 GMT Subject: CN=682002af-84af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:98:43:5b:55:d0:a9:19:dc:30:01:a9:57: 01:91:9a:0d:2b:83:7f:9a:c1:f4:ff:3f:5a:54:47: 3d:25:d9:73:7b:f3:f9:ac:42:60:4a:9d:e3:66:c3: 12:c1:82:1b:11:08:c9:89:08:90:54:e4:dc:d0:6b: 28:e3:cc:49:34:52:0b:25:e2:f7:26:47:76:2b:07: f3:ea:d8:80:d3:5b:37:16:b4:3a:ed:d9:04:4f:c2: 1f:a6:21:6a:d9:c6:f9:5e:9c:81:41:3c:01:87:93: 42:57:69:89:be:c0:af:52:de:31:05:ab:9c:a0:fa: dc:03:f2:de:48:29:1c:db:5e:25:bd:3e:12:c1:97: b8:4e:58:36:04:13:19:c4:0d:cb:92:5a:3e:4f:54: 20:e3:9f:f1:0f:aa:dc:1e:d5:3b:1c:c9:a8:ec:95: a2:cd:fc:c7:77:86:ff:4a:e8:3c:94:6b:e6:a3:ca: 63:8c:40:80:af:bf:d7:ad:1b:e9:f0:2e:49:5f:bb: 44:18:52:3a:58:cb:cc:49:d0:bd:43:e7:7a:06:bf: 3f:07:1d:89:61:dc:e6:30:6d:0c:a6:73:f6:89:01: 97:f0:be:a5:71:cf:c2:18:c7:da:d0:d8:f7:3a:9e: 20:5b:8f:10:7d:11:87:9b:72:07:5e:ac:d4:8c:a1: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:55:E0:F4:4D:24:AB:C7:04:A2:CA:D8:E0:07:57:75:62:CB:3C:40 X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:ef:65:5f:93:e7:0b:55:c6:31:ba:e1:07:cb:c6:82:27: 98:fa:5e:85:f4:6e:ee:c2:92:67:8b:06:f3:75:98:a4:c0:c8: 8c:15:0a:cf:49:ee:8c:41:1a:00:f7:71:82:8f:98:51:f8:ea: f6:42:d9:40:f8:0b:dc:7c:d9:4a:5f:53:da:7b:60:95:9c:d4: 5c:bf:ec:c1:2f:62:f7:13:49:1d:d5:8a:bb:7a:97:f8:48:78: 14:64:d1:47:1f:d0:03:6a:17:89:2d:9d:1b:cc:bf:aa:d5:a9: 01:0e:92:3c:77:23:2f:2e:f1:17:d0:19:38:49:e4:c0:94:d3: a0:e3:62:0f:c9:39:97:ac:67:76:9b:fa:7d:fe:6f:a0:8f:45: e3:2b:a0:1a:92:c5:70:32:2d:e1:27:d1:e3:fb:b4:08:5f:89: f9:50:ce:be:5d:b3:df:15:82:7d:72:95:f8:b3:f1:48:84:72: 32:fc:81:9a:e3:f4:f9:05:f1:3e:81:89:93:2e:d7:c3:9b:22: ac:f9:d9:42:f0:4b:6d:37:41:b6:46:fc:c9:68:c5:29:20:e0: 90:91:3c:19:3f:54:61:20:81:27:f7:d0:fd:f0:11:bf:8f:4e: 33:4a:2c:d2:74:2d:ba:c5:60:ff:1d:ec:89:ad:9f:aa:6f:d4: ee:5b:dc:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUwNTExMDE1MTQzWhcNMjUwNTE4MDE1MTQzWjAYMRYwFAYD VQQDEw02ODIwMDJhZi04NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfmYQ1tV0KkZ3DABqVcBkZoNK4N/msH0/z9aVEc9Jdlze/P5rEJgSp3jZsMS wYIbEQjJiQiQVOTc0Gso48xJNFILJeL3Jkd2Kwfz6tiA01s3FrQ67dkET8IfpiFq 2cb5XpyBQTwBh5NCV2mJvsCvUt4xBaucoPrcA/LeSCkc214lvT4SwZe4Tlg2BBMZ xA3Lklo+T1Qg45/xD6rcHtU7HMmo7JWizfzHd4b/Sug8lGvmo8pjjECAr7/XrRvp 8C5JX7tEGFI6WMvMSdC9Q+d6Br8/Bx2JYdzmMG0MpnP2iQGX8L6lcc/CGMfa0Nj3 Op4gW48QfRGHm3IHXqzUjKFPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVV4PRN JKvHBKLK2OAHV3ViyzxAMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3qO9lX5PnC1XGMbrhB8vGgieY+l6F9G7uwpJniwbzdZikwMiMFQrP Se6MQRoA93GCj5hR+Or2QtlA+AvcfNlKX1Pae2CVnNRcv+zBL2L3E0kd1Yq7epf4 SHgUZNFHH9ADaheJLZ0bzL+q1akBDpI8dyMvLvEX0Bk4SeTAlNOg42IPyTmXrGd2 m/p9/m+gj0XjK6AaksVwMi3hJ9Hj+7QIX4n5UM6+XbPfFYJ9cpX4s/FIhHIy/IGa 4/T5BfE+gYmTLtfDmyKs+dlC8EttN0G2RvzJaMUpIOCQkTwZP1RhIIEn99D98BG/ j04zSizSdC26xWD/HeyJrZ+qb9TuW9yB -----END CERTIFICATE-----Generated at Tue May 13 01:48:05 2025 by rpki-client