$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: JfYmFBqnP11+mR8AmUF4RTOypzhpkKY+ePbalUllEFQ= Subject key identifier: FD:62:A9:7C:E4:63:25:4A:34:7A:69:CB:05:CF:D7:DE:61:F5:B3:65 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A00 Signing time: Wed 14 May 2025 19:58:25 +0000 Manifest this update: Wed 14 May 2025 19:58:24 +0000 Manifest next update: Wed 21 May 2025 19:58:24 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: IsoyKl8ykwLps0F5GJcrJzYhSELNqcoRW478B9CIwyE=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: May 14 19:58:24 2025 GMT Not After : May 21 19:58:24 2025 GMT Subject: CN=6824f5e0-f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:d9:b9:aa:0a:6a:cd:ca:d9:94:91:85:a7: fe:de:a8:3f:5a:16:a1:95:e5:29:51:bf:c3:4c:ff: 36:8f:94:e0:2d:74:3e:2c:10:85:03:34:40:17:c5: 7a:7e:08:6e:05:07:4a:ba:03:04:20:4c:3c:04:fc: 76:87:55:d4:49:32:cb:ef:cd:65:e4:e2:3c:f3:f7: 7c:5f:9b:82:eb:c8:4c:86:2f:a4:4f:95:e0:c5:ba: 7d:3f:4c:78:18:ba:20:47:6e:4b:36:e9:d4:ee:c9: 8e:f6:35:df:81:09:a7:e1:6f:14:9b:7a:34:9f:a9: 17:2e:34:e4:c2:31:ca:1a:21:b2:2d:2a:67:68:73: ed:3e:a6:1e:ab:20:d2:aa:32:66:43:2e:3c:7d:8c: 57:10:f2:cb:6a:58:e9:1e:96:7c:32:7f:50:58:ee: da:b4:03:dd:4b:9f:c5:6a:80:13:9f:7c:a4:94:55: ec:07:b7:de:1f:29:98:2d:cf:27:fc:5e:93:bb:52: 01:f2:dc:6c:05:d8:97:f9:f3:7f:c2:4f:ec:17:49: 7b:8d:27:ed:ad:15:ad:ab:fd:27:af:2b:c0:7d:d3: 31:7b:96:f0:dc:7b:d1:73:3e:5c:5f:a6:f7:05:f6: e3:58:a0:f7:da:64:77:f7:ad:90:67:c0:ce:ae:2c: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:62:A9:7C:E4:63:25:4A:34:7A:69:CB:05:CF:D7:DE:61:F5:B3:65 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ab:d0:df:a5:36:60:e4:cc:ba:f8:1d:35:dd:7e:b4:26:b5: 75:fc:be:27:ef:38:01:e5:96:6f:3e:a6:53:97:ca:3f:a0:5b: ae:6f:17:78:16:3a:19:e2:8c:ef:13:e8:2f:65:1a:38:f5:c1: 8a:40:6d:15:1a:9c:df:96:5f:b1:d6:52:34:90:06:f2:7e:35: 6c:5e:d2:0b:f5:5b:fe:32:89:6c:90:d7:ea:5f:56:e9:85:b1: bf:e7:e6:09:0d:e7:98:3b:d9:7d:78:0f:a0:a1:b9:c9:6a:e8: 54:b9:d4:c8:8d:62:77:5f:66:c6:5b:bf:06:d3:6a:14:83:a5: 2d:77:a1:cc:e3:5d:23:ee:78:02:1a:b3:54:3b:e5:c3:6c:d1: 12:d5:b4:9b:82:49:d4:26:56:5f:78:78:54:b0:83:ff:a2:ca: 23:a5:37:bc:66:4b:20:a8:24:43:5f:69:9f:ff:45:a1:76:03: b5:28:cd:41:90:67:42:c4:b5:62:bc:74:3a:8f:02:18:c8:5c: 76:65:fc:12:1d:ba:8c:9f:42:42:c8:1b:4a:03:d3:63:8e:40: f3:13:8d:83:cd:9a:4e:0f:44:2d:10:e6:98:1b:db:79:ed:49: fd:3a:97:33:10:6e:e1:b2:24:f8:a0:cd:2d:74:fa:36:5c:2d: 6d:4d:04:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwNTE0MTk1ODI0WhcNMjUwNTIxMTk1ODI0WjAYMRYwFAYD VQQDEw02ODI0ZjVlMC1mOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp/ZuaoKas3K2ZSRhaf+3qg/WhahleUpUb/DTP82j5TgLXQ+LBCFAzRAF8V6 fghuBQdKugMEIEw8BPx2h1XUSTLL781l5OI88/d8X5uC68hMhi+kT5Xgxbp9P0x4 GLogR25LNunU7smO9jXfgQmn4W8Um3o0n6kXLjTkwjHKGiGyLSpnaHPtPqYeqyDS qjJmQy48fYxXEPLLaljpHpZ8Mn9QWO7atAPdS5/FaoATn3yklFXsB7feHymYLc8n /F6Tu1IB8txsBdiX+fN/wk/sF0l7jSftrRWtq/0nryvAfdMxe5bw3HvRcz5cX6b3 BfbjWKD32mR3962QZ8DOrixkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1iqXzk YyVKNHppywXP195h9bNlMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwq9DfpTZg5My6+B013X60JrV1/L4n7zgB5ZZvPqZTl8o/oFuubxd4 FjoZ4ozvE+gvZRo49cGKQG0VGpzfll+x1lI0kAbyfjVsXtIL9Vv+MolskNfqX1bp hbG/5+YJDeeYO9l9eA+gobnJauhUudTIjWJ3X2bGW78G02oUg6Utd6HM410j7ngC GrNUO+XDbNES1bSbgknUJlZfeHhUsIP/osojpTe8ZksgqCRDX2mf/0WhdgO1KM1B kGdCxLVivHQ6jwIYyFx2ZfwSHbqMn0JCyBtKA9NjjkDzE42DzZpOD0QtEOaYG9t5 7Un9OpczEG7hsiT4oM0tdPo2XC1tTQSl -----END CERTIFICATE-----Generated at Thu May 15 03:35:33 2025 by rpki-client