$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: yrV8T/D3IOF5y+kmWSjfim1KsqzzOOMwbcHQ7Tn/mm8= Subject key identifier: 75:0E:09:24:33:85:46:54:CE:4D:2A:F3:D8:6A:DF:28:48:F7:FE:A7 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A18 Signing time: Wed 02 Jul 2025 20:01:49 +0000 Manifest this update: Wed 02 Jul 2025 20:01:49 +0000 Manifest next update: Wed 09 Jul 2025 20:01:49 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: OBYNAOuGTS8OJjrzCIpsiztWY7KNS7f3ftF4woeXkwI=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Jul 2 20:01:49 2025 GMT Not After : Jul 9 20:01:49 2025 GMT Subject: CN=6865902d-60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:fb:9b:ed:e2:e7:bc:00:d3:31:dc:a8:10: 5b:56:fb:07:84:2e:44:9e:d8:c9:14:58:94:37:00: f8:0d:2e:52:17:3d:a5:be:29:4f:85:26:48:c2:ac: 4e:9b:10:af:b8:7e:b2:43:7b:fb:f2:5e:81:3e:2b: a7:2e:87:51:16:3b:5c:10:b0:25:30:7b:4c:76:86: 0e:a4:85:dd:b3:a6:2a:2b:1f:97:60:66:8d:09:14: 87:25:e5:b1:03:16:e5:99:5c:4f:85:30:1f:30:b2: e5:10:37:55:eb:b9:9b:a2:08:62:fb:aa:75:4d:67: 4e:00:e7:16:f5:3b:d1:e7:1b:91:e9:c8:43:c2:56: da:50:e2:31:06:1c:30:04:8d:b2:e8:2a:2e:08:4a: 9f:b0:51:e3:ad:cd:41:66:55:e0:d4:81:74:c4:62: 2a:27:52:9d:ef:68:e1:61:e1:ae:11:91:f9:37:77: cc:48:49:3a:4a:3a:77:8a:3a:6c:22:c5:63:c8:5b: 78:7c:dd:2f:96:89:e0:4d:ac:c6:1e:fd:81:9a:02: 26:94:ca:74:a3:a3:0e:cb:ba:79:5a:ac:47:ed:f6: 30:ca:f3:aa:8b:ee:5f:8d:58:e7:ab:fb:88:2c:b9: cc:45:5f:58:08:92:b3:e5:5d:72:0a:8a:dc:2f:f3: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:09:24:33:85:46:54:CE:4D:2A:F3:D8:6A:DF:28:48:F7:FE:A7 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:3a:ea:d1:95:d5:00:cd:26:53:c8:8d:27:56:ac:1b:9a:f9: ad:77:d8:e2:68:f2:a6:4d:7f:5c:0a:93:83:21:04:34:2d:4b: b7:cb:e0:65:11:8e:6b:30:c8:ae:a9:bc:de:2d:f8:bb:69:18: 73:3f:56:69:07:b8:f5:49:e5:b3:39:49:85:a6:0f:a9:ab:aa: 7d:92:19:49:05:7f:5e:e7:90:98:e0:8d:61:55:b1:a8:a2:6c: ae:86:14:d7:f6:56:72:2e:1c:f6:f5:9f:a1:1e:27:08:5f:9f: 42:37:9c:2b:06:73:bc:9d:1a:31:86:fd:57:64:b8:ff:0e:c5: 10:ab:02:16:ec:66:79:d5:79:67:5b:ec:29:a7:2d:88:fb:71: 3e:4b:5c:b9:96:a3:fa:2a:8b:17:9e:29:8b:d5:8b:b9:ab:c5: 69:41:40:ab:2d:de:96:63:ab:c2:15:c8:74:3c:d4:d3:84:a8: 9a:0c:89:30:09:76:09:d8:7c:0c:86:ac:a8:4b:88:eb:1c:11: 86:19:8d:b1:02:ea:c2:2b:1b:37:94:4d:27:65:b4:ac:d4:84: c8:8a:21:fd:2e:46:5e:8d:77:81:9a:0b:43:8f:70:17:3c:66: 64:7c:37:9d:eb:9a:62:49:db:bc:b4:96:e8:95:92:78:cd:bf: 55:89:09:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwNzAyMjAwMTQ5WhcNMjUwNzA5MjAwMTQ5WjAYMRYwFAYD VQQDEw02ODY1OTAyZC02MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AT7m+3i57wA0zHcqBBbVvsHhC5EntjJFFiUNwD4DS5SFz2lvilPhSZIwqxO mxCvuH6yQ3v78l6BPiunLodRFjtcELAlMHtMdoYOpIXds6YqKx+XYGaNCRSHJeWx AxblmVxPhTAfMLLlEDdV67mboghi+6p1TWdOAOcW9TvR5xuR6chDwlbaUOIxBhww BI2y6CouCEqfsFHjrc1BZlXg1IF0xGIqJ1Kd72jhYeGuEZH5N3fMSEk6Sjp3ijps IsVjyFt4fN0vlongTazGHv2BmgImlMp0o6MOy7p5WqxH7fYwyvOqi+5fjVjnq/uI LLnMRV9YCJKz5V1yCorcL/OzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUOCSQz hUZUzk0q89hq3yhI9/6nMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4OurRldUAzSZTyI0nVqwbmvmtd9jiaPKmTX9cCpODIQQ0LUu3y+Bl EY5rMMiuqbzeLfi7aRhzP1ZpB7j1SeWzOUmFpg+pq6p9khlJBX9e55CY4I1hVbGo omyuhhTX9lZyLhz29Z+hHicIX59CN5wrBnO8nRoxhv1XZLj/DsUQqwIW7GZ51Xln W+wppy2I+3E+S1y5lqP6KosXnimL1Yu5q8VpQUCrLd6WY6vCFch0PNTThKiaDIkw CXYJ2HwMhqyoS4jrHBGGGY2xAurCKxs3lE0nZbSs1ITIiiH9LkZejXeBmgtDj3AX PGZkfDed65piSdu8tJbolZJ4zb9ViQnl -----END CERTIFICATE-----Generated at Thu Jul 3 05:55:39 2025 by rpki-client