$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: f9uEOxcPQo0vqJ5/JN7Q+FDjmGMhlyCIyhUe29W4k1M= Subject key identifier: 72:14:DF:9F:E8:9D:44:09:28:CF:13:CC:54:1B:9C:50:CE:D6:A7:12 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 03F3 Signing time: Tue 01 Jul 2025 01:00:49 +0000 Manifest this update: Tue 01 Jul 2025 01:00:49 +0000 Manifest next update: Tue 08 Jul 2025 01:00:49 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: H5U6nV0j3DmsCsGMIUWrhF7+l7QFVdV0yeEYlwJ3vT8=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: tkOHoIczvR2mvnPtwO2I6CTO8JqQ7Ha6TbdyLv7Jiak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Jul 1 01:00:49 2025 GMT Not After : Jul 8 01:00:49 2025 GMT Subject: CN=68633341-91d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:ec:9b:01:6f:4c:b3:57:cd:93:f4:dd:4f: fb:93:9b:b9:ef:63:20:1d:30:42:a8:fc:c6:c8:41: 53:91:ae:da:4f:ac:21:47:da:57:29:24:11:06:22: 21:7c:d4:3d:b4:66:77:32:ca:0e:10:8f:a9:ce:2b: 9f:f4:64:98:35:1c:fb:8b:fc:c3:20:08:4d:7a:ac: 04:9c:0e:71:f6:95:c2:df:9c:1f:b7:c1:8e:a5:8d: 8e:08:d6:83:1b:33:c4:a4:bb:d4:71:e9:6a:80:25: 91:fd:ff:cd:9c:b6:be:ef:e3:e0:74:f3:64:98:b1: 70:b2:d7:a0:86:ef:d2:2d:7e:4e:71:12:b2:31:2e: e3:d1:a0:4b:46:58:27:a3:9a:22:2e:4b:79:58:54: 96:e6:bb:f8:44:7e:16:55:59:19:31:34:39:e5:b4: 0b:4d:0b:07:df:b9:d8:eb:58:e6:de:ab:09:fb:cb: 29:d7:6c:f8:49:08:c9:a8:9f:a4:67:89:b4:b4:a2: 4f:50:09:58:5f:7b:92:2a:e0:1e:8d:96:1d:ce:e4: fc:09:fe:2d:13:4e:a0:ef:95:06:d8:82:74:39:7b: a9:e2:de:bf:27:04:f8:bf:f1:2d:3f:d0:2e:76:cf: b7:d9:ba:42:6c:cd:9a:c6:61:3f:a1:13:f8:26:e8: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:DF:9F:E8:9D:44:09:28:CF:13:CC:54:1B:9C:50:CE:D6:A7:12 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6b:90:f9:64:00:76:6b:92:01:24:35:88:41:d2:1e:57:99: 04:69:35:fb:4e:23:94:70:51:db:20:d6:1a:ed:31:ec:51:c1: 09:85:1f:11:05:6f:f3:c5:dc:a4:87:de:1e:af:bc:61:90:9a: 38:76:59:96:6e:00:6d:10:75:70:d4:f9:5d:09:00:88:7a:32: 73:09:e4:9c:99:c8:69:df:da:47:ec:87:a3:21:06:55:59:48: 2f:c5:4d:9e:0c:3c:45:75:04:c0:6e:67:6f:91:bd:5c:86:ae: de:47:2a:4f:34:1c:a5:90:d5:cf:d6:ad:cd:30:f6:72:b4:e7: 64:c3:17:3e:16:92:0e:c5:fb:e4:1f:c3:d9:25:1e:f8:b2:ee: 0f:59:2c:3e:bc:29:53:c2:6a:60:b1:47:aa:ee:42:2f:13:80: 12:53:a2:e1:1a:00:65:90:47:e2:38:2f:94:aa:5b:55:ad:c6: 45:6b:87:df:db:1c:6b:45:8b:b6:6a:9c:34:f2:46:f3:ba:93: 11:1d:ef:e9:d9:6f:8d:06:6a:1a:34:5b:4d:04:e5:b3:24:fe: b1:ea:eb:6d:c3:16:de:25:cd:47:e9:bf:06:f0:a9:53:5b:ac: ed:9c:d0:28:30:b5:c4:96:b3:41:b3:1b:02:9c:7e:c5:ca:de: 93:4b:43:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjUwNzAxMDEwMDQ5WhcNMjUwNzA4MDEwMDQ5WjAYMRYwFAYD VQQDEw02ODYzMzM0MS05MWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbTsmwFvTLNXzZP03U/7k5u572MgHTBCqPzGyEFTka7aT6whR9pXKSQRBiIh fNQ9tGZ3MsoOEI+pziuf9GSYNRz7i/zDIAhNeqwEnA5x9pXC35wft8GOpY2OCNaD GzPEpLvUcelqgCWR/f/NnLa+7+PgdPNkmLFwsteghu/SLX5OcRKyMS7j0aBLRlgn o5oiLkt5WFSW5rv4RH4WVVkZMTQ55bQLTQsH37nY61jm3qsJ+8sp12z4SQjJqJ+k Z4m0tKJPUAlYX3uSKuAejZYdzuT8Cf4tE06g75UG2IJ0OXup4t6/JwT4v/EtP9Au ds+32bpCbM2axmE/oRP4Jui/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIU35/o nUQJKM8TzFQbnFDO1qcSMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCga5D5ZAB2a5IBJDWIQdIeV5kEaTX7TiOUcFHbINYa7THsUcEJhR8R BW/zxdykh94er7xhkJo4dlmWbgBtEHVw1PldCQCIejJzCeScmchp39pH7IejIQZV WUgvxU2eDDxFdQTAbmdvkb1chq7eRypPNBylkNXP1q3NMPZytOdkwxc+FpIOxfvk H8PZJR74su4PWSw+vClTwmpgsUeq7kIvE4ASU6LhGgBlkEfiOC+UqltVrcZFa4ff 2xxrRYu2apw08kbzupMRHe/p2W+NBmoaNFtNBOWzJP6x6uttwxbeJc1H6b8G8KlT W6ztnNAoMLXElrNBsxsCnH7Fyt6TS0Ol -----END CERTIFICATE-----Generated at Tue Jul 1 20:35:55 2025 by rpki-client