$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: vZT05kx2771QYn/i4mxl4+opvYdBl3YVqxCtmv0+bQo= Subject key identifier: 79:34:DC:80:2A:DC:DF:69:73:E2:1D:9E:C4:B6:A6:D2:08:36:E0:06 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 0790 Signing time: Mon 30 Jun 2025 21:40:51 +0000 Manifest this update: Mon 30 Jun 2025 21:40:50 +0000 Manifest next update: Mon 07 Jul 2025 21:40:50 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: hq0PnDPHUVEOc19vF7lBQeFG/Z+7aRS4Epb4aZXuc+I=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Jun 30 21:40:50 2025 GMT Not After : Jul 7 21:40:50 2025 GMT Subject: CN=68630463-63e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cc:99:04:11:4e:73:d4:7b:1b:eb:72:6f:49: 4b:05:9b:8e:ab:b9:f4:6e:bf:12:34:0b:bd:95:0e: a3:7c:c0:37:78:7c:0e:9e:31:28:d8:5d:59:e3:2d: bb:0e:46:b2:81:4e:97:d6:46:41:13:00:6f:0a:9a: fb:86:f3:96:97:d3:4f:40:98:3c:9a:74:85:58:d3: f3:2c:06:ba:0c:ab:50:95:1b:2e:63:1e:21:a2:57: be:54:fc:82:e3:91:ac:88:86:1f:3a:0c:85:3f:d1: b3:5f:f1:68:f7:d5:02:d5:de:e3:ae:44:b7:99:95: a5:ac:58:3b:d8:aa:59:12:de:1a:32:93:ff:95:d4: 0a:29:81:2d:1a:00:90:c0:86:bb:69:38:13:ab:98: ad:5e:14:dc:c3:d2:ae:3a:6c:52:86:21:c1:a4:ee: c6:b7:70:5e:89:ca:5a:66:19:48:f7:e2:ef:97:32: 00:ca:0c:c7:ee:6e:bb:30:49:aa:19:a5:09:73:8d: d7:7a:d7:85:d5:bc:a4:d7:b4:4b:8d:2f:38:29:18: f8:43:46:d6:8a:e0:1c:c8:7b:05:15:eb:47:2f:aa: 04:e5:d0:d0:30:79:6f:2a:7d:56:6e:d4:c9:a6:d6: 40:24:57:42:82:ca:a4:c0:45:19:72:b1:eb:82:94: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:34:DC:80:2A:DC:DF:69:73:E2:1D:9E:C4:B6:A6:D2:08:36:E0:06 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6c:25:b4:0e:b6:2c:8c:18:fe:de:5c:78:20:5a:c6:fc:3b: f4:0a:e2:38:02:c0:a6:8a:3c:be:74:bc:41:84:5c:ac:0c:8f: e7:0d:dd:ff:35:00:78:97:91:ca:39:52:b0:2d:ab:eb:10:f5: 37:f2:68:d9:50:f1:0c:53:e3:a7:61:bc:03:ea:40:56:44:b7: 5f:6e:40:ca:e0:d8:21:b0:8d:eb:60:a2:fa:32:ba:f8:06:fe: 8a:e0:8f:88:a6:1a:e8:64:d9:bc:a2:16:71:9c:54:79:ce:7d: 4c:0e:8d:24:42:96:f3:1b:c1:b4:00:34:cf:6f:17:8c:02:92: fd:aa:e1:69:30:ff:8d:eb:14:cd:af:1f:2b:6c:a3:b9:50:4f: 3a:4a:0c:fb:e8:bd:72:34:72:c6:75:23:e6:a3:96:ca:25:66: f3:5e:ae:21:6d:ca:0d:02:e7:7d:3f:91:a5:26:e6:38:57:bd: ac:b2:26:e3:fa:75:d1:3e:a9:a9:b1:1a:0c:f9:3b:35:9c:f0: 95:40:99:76:25:00:f2:30:4c:b2:66:6c:ac:df:7e:70:94:21: 4e:d9:91:19:4e:40:36:88:24:78:a7:c9:b9:8d:e6:62:e0:68: 73:50:ab:f9:55:96:02:fe:cd:18:b4:0f:52:35:65:69:e9:89: 05:a3:0e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNjMwMjE0MDUwWhcNMjUwNzA3MjE0MDUwWjAYMRYwFAYD VQQDEw02ODYzMDQ2My02M2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cyZBBFOc9R7G+tyb0lLBZuOq7n0br8SNAu9lQ6jfMA3eHwOnjEo2F1Z4y27 DkaygU6X1kZBEwBvCpr7hvOWl9NPQJg8mnSFWNPzLAa6DKtQlRsuYx4hole+VPyC 45GsiIYfOgyFP9GzX/Fo99UC1d7jrkS3mZWlrFg72KpZEt4aMpP/ldQKKYEtGgCQ wIa7aTgTq5itXhTcw9KuOmxShiHBpO7Gt3BeicpaZhlI9+LvlzIAygzH7m67MEmq GaUJc43XeteF1byk17RLjS84KRj4Q0bWiuAcyHsFFetHL6oE5dDQMHlvKn1WbtTJ ptZAJFdCgsqkwEUZcrHrgpQvmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk03IAq 3N9pc+IdnsS2ptIINuAGMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5bCW0DrYsjBj+3lx4IFrG/Dv0CuI4AsCmijy+dLxBhFysDI/nDd3/ NQB4l5HKOVKwLavrEPU38mjZUPEMU+OnYbwD6kBWRLdfbkDK4NghsI3rYKL6Mrr4 Bv6K4I+IphroZNm8ohZxnFR5zn1MDo0kQpbzG8G0ADTPbxeMApL9quFpMP+N6xTN rx8rbKO5UE86Sgz76L1yNHLGdSPmo5bKJWbzXq4hbcoNAud9P5GlJuY4V72ssibj +nXRPqmpsRoM+Ts1nPCVQJl2JQDyMEyyZmys335wlCFO2ZEZTkA2iCR4p8m5jeZi 4GhzUKv5VZYC/s0YtA9SNWVp6YkFow79 -----END CERTIFICATE-----Generated at Wed Jul 2 12:49:00 2025 by rpki-client