$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: BWnOHaPhZk/Blc5cwFDZvXDdlEZP3Pdc8HG8Mn9QulQ= Subject key identifier: 22:65:57:A8:42:5C:C8:AA:FD:DC:32:D9:EB:FA:5D:EB:AC:58:2E:19 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 34DF Signing time: Fri 22 Aug 2025 14:47:16 +0000 Manifest this update: Fri 22 Aug 2025 14:47:15 +0000 Manifest next update: Fri 29 Aug 2025 14:47:15 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: GGihaWUZ/VyQUCVf4wUL1uRZiscUFLuXGy3K6iY+z2E=) 2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: 23SEH6GtkOoGPdeGncTiVPXSvJeVSMOWjmIg/9JChj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Aug 22 14:47:15 2025 GMT Not After : Aug 29 14:47:15 2025 GMT Subject: CN=68a882f4-516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:98:c4:a4:3c:95:03:c9:5b:ba:4c:01:d6: 03:72:e6:b6:92:b5:c9:72:87:14:dc:b0:05:13:e6: 4b:81:5c:23:f2:ea:14:62:85:0f:bb:c9:49:da:c7: ba:a7:0b:62:9f:fe:c5:20:0a:30:be:26:f7:09:00: 3d:ea:77:d4:fb:f6:7e:3a:ec:62:26:a2:ad:b4:09: e8:b5:b3:76:bc:0d:0c:2d:cd:3d:cc:b7:b4:6b:d8: ba:c8:e1:bd:8f:2d:40:b6:8c:1e:0b:60:90:c6:25: 9e:d8:06:20:4d:93:19:f1:da:26:fb:01:e1:91:d3: 3d:4f:5b:a8:6a:4d:00:1e:24:46:a7:14:31:b8:31: dd:fd:10:c4:70:45:bb:fc:a8:46:1b:f5:79:49:41: 6d:25:4c:d2:29:69:34:72:5e:a3:2a:62:9f:e5:5b: 05:15:69:23:b9:f1:7c:64:53:b1:c2:e2:63:ce:31: 50:c2:4a:1d:97:c4:23:c3:76:02:20:aa:6d:a0:fc: ae:1d:16:04:e8:d2:05:a5:92:b2:14:05:62:ff:21: 26:85:2b:11:b8:bd:28:e7:7b:2c:87:94:6b:61:95: 70:bc:45:14:7a:c9:1e:fe:5b:37:cd:e0:59:4d:b7: e0:52:26:3b:78:47:e8:50:d6:03:23:e3:2d:06:c9: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:65:57:A8:42:5C:C8:AA:FD:DC:32:D9:EB:FA:5D:EB:AC:58:2E:19 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bc:22:d7:26:4f:6a:67:75:fe:fe:d5:74:1d:cc:a8:c3:66: cf:30:48:6e:c9:a2:ff:e7:54:83:ce:b8:5f:e8:1b:ff:12:eb: a6:ac:12:a4:6a:9f:40:1f:a5:0c:eb:1b:17:d3:d3:3d:59:ee: 4f:5f:5c:1a:7f:73:00:46:4f:15:28:37:9a:c6:97:40:d0:6d: b3:52:4f:62:06:96:6d:9c:fd:2e:a3:85:a8:ea:d2:07:2f:0c: 43:07:b2:2f:7a:fd:0e:8e:9c:65:91:eb:ff:5d:98:af:82:57: f2:2a:88:f4:af:c0:3f:93:63:c3:08:b9:3c:4f:e6:60:aa:ae: ca:0d:ff:3e:cd:f5:b8:eb:13:21:44:d8:50:d6:92:4f:b8:ff: d7:ea:50:9f:23:dc:f1:fc:45:db:bb:b4:cd:93:3d:25:b7:f8: 65:41:e7:fa:fc:d5:13:66:12:a5:f5:98:f6:ca:0c:63:5e:50: be:50:aa:40:55:cc:ec:cf:0c:de:3f:06:23:64:a5:8f:ce:82: 25:9a:96:d8:22:cc:ad:91:8f:fa:21:0d:45:cc:9e:ea:14:b3: 5b:b8:a0:11:34:0c:94:b7:a8:ba:2d:79:ad:b9:44:f2:4d:d9: ff:32:f2:88:55:2e:9c:26:2f:31:46:45:28:37:09:4f:1a:b3: b5:20:51:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwODIyMTQ0NzE1WhcNMjUwODI5MTQ0NzE1WjAYMRYwFAYD VQQDEw02OGE4ODJmNC01MTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZmYxKQ8lQPJW7pMAdYDcua2krXJcocU3LAFE+ZLgVwj8uoUYoUPu8lJ2se6 pwtin/7FIAowvib3CQA96nfU+/Z+OuxiJqKttAnotbN2vA0MLc09zLe0a9i6yOG9 jy1AtoweC2CQxiWe2AYgTZMZ8dom+wHhkdM9T1uoak0AHiRGpxQxuDHd/RDEcEW7 /KhGG/V5SUFtJUzSKWk0cl6jKmKf5VsFFWkjufF8ZFOxwuJjzjFQwkodl8Qjw3YC IKptoPyuHRYE6NIFpZKyFAVi/yEmhSsRuL0o53ssh5RrYZVwvEUUeske/ls3zeBZ TbfgUiY7eEfoUNYDI+MtBsk90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJlV6hC XMiq/dwy2ev6XeusWC4ZMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlvCLXJk9qZ3X+/tV0Hcyow2bPMEhuyaL/51SDzrhf6Bv/EuumrBKk ap9AH6UM6xsX09M9We5PX1waf3MARk8VKDeaxpdA0G2zUk9iBpZtnP0uo4Wo6tIH LwxDB7Ivev0Ojpxlkev/XZivglfyKoj0r8A/k2PDCLk8T+Zgqq7KDf8+zfW46xMh RNhQ1pJPuP/X6lCfI9zx/EXbu7TNkz0lt/hlQef6/NUTZhKl9Zj2ygxjXlC+UKpA VczszwzePwYjZKWPzoIlmpbYIsytkY/6IQ1FzJ7qFLNbuKARNAyUt6i6LXmtuUTy Tdn/MvKIVS6cJi8xRkUoNwlPGrO1IFG5 -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:10 2025 by rpki-client