$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: uV17ZIT+jnXxr1mcrIUYMJO3T5FVotv2LcFk0zmRR7w= Subject key identifier: 77:35:F2:9A:2B:89:89:23:9A:83:34:CA:7A:A5:6A:1E:7A:A2:89:11 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02BC Signing time: Tue 01 Jul 2025 02:11:45 +0000 Manifest this update: Tue 01 Jul 2025 02:11:45 +0000 Manifest next update: Tue 08 Jul 2025 02:11:44 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: e60PvnFEozm853mZHAOEKp6W6kpWW7WmxpLdK0fVKX4=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jul 1 02:11:45 2025 GMT Not After : Jul 8 02:11:44 2025 GMT Subject: CN=686343e1-d98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:38:46:ef:a0:ad:03:79:39:67:04:d4:ce: 31:be:72:71:ee:27:18:4c:f8:4e:a1:6e:87:f9:67: 85:b4:e5:62:e9:97:d4:7a:1e:3a:e2:c3:09:ee:10: 4f:8a:19:c4:d0:f5:4e:b5:6b:15:d2:77:c0:22:83: fd:9b:8a:a3:5f:97:93:2b:ce:f6:90:58:17:a3:0b: da:61:07:eb:45:86:95:bb:a7:5f:bd:61:96:7d:ff: 2b:0f:9b:1c:ad:62:51:a5:39:8c:31:6a:1f:49:38: f0:6e:bb:ac:33:94:65:f6:d2:3d:3f:4f:10:e8:13: d5:bc:d7:44:4d:31:24:a0:ce:33:56:e3:3f:cc:8d: ba:52:f0:f8:19:92:6f:da:78:f1:c6:ab:6e:38:7c: b9:7f:82:0b:7b:58:40:82:e7:88:d4:c2:ce:fe:47: f0:44:09:c7:ae:bb:ca:9b:03:82:fc:5f:92:75:1c: 67:ee:00:37:29:cb:bf:98:d4:0b:00:f8:03:6e:52: 4d:62:99:ec:1a:64:ce:b6:50:16:32:d7:ef:86:6f: 86:64:1b:10:33:1a:01:37:b5:f0:56:ef:3b:5f:bf: 7a:fb:ac:fe:83:34:3c:51:34:53:7e:41:01:15:d9: a7:ad:9d:e2:3d:ac:44:3d:8e:7c:a5:30:74:db:1f: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:F2:9A:2B:89:89:23:9A:83:34:CA:7A:A5:6A:1E:7A:A2:89:11 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2e:54:70:6d:1d:17:4b:00:5d:34:c0:b0:71:85:d2:0e:0c: 7e:b0:0c:36:6e:8c:90:4a:c3:03:d9:2b:17:19:dc:df:e6:c4: 16:3a:94:c3:1e:f6:b3:fc:e0:cc:5b:23:f0:d4:ae:cb:2c:a0: f9:c8:76:e5:56:49:be:51:92:75:8b:8a:42:ff:46:32:f0:16: 6e:b2:4d:88:dc:7c:db:b4:ed:f1:38:97:b1:0c:37:52:7d:20: c6:eb:19:de:28:52:ee:24:76:c2:f1:54:0b:a6:98:0d:ec:b5: c7:b4:1f:9b:c9:8e:1c:7d:69:31:c9:8e:d8:38:7d:9d:d4:11: 30:38:bd:84:dd:52:b9:f0:53:dc:c1:49:31:98:d9:5e:65:47: de:d5:f9:19:53:5c:a7:86:f5:34:de:cf:71:ff:eb:82:88:ce: f0:ac:a7:49:af:53:ad:a9:2e:f2:95:01:fd:77:40:ab:44:ad: 27:59:14:59:3e:8a:ed:74:be:78:79:82:c2:95:51:86:b2:7d: 91:2b:ea:85:53:5e:af:b6:36:df:11:b5:21:a0:7a:30:fb:98: 8b:6a:71:4e:ec:bf:0b:ab:86:02:29:ee:3c:5f:cd:1d:c0:cb: 64:b4:83:34:db:84:a4:99:f3:3b:50:95:38:b2:e9:bc:f5:a6: 22:9c:9f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNzAxMDIxMTQ1WhcNMjUwNzA4MDIxMTQ0WjAYMRYwFAYD VQQDEw02ODYzNDNlMS1kOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX04Ru+grQN5OWcE1M4xvnJx7icYTPhOoW6H+WeFtOVi6ZfUeh464sMJ7hBP ihnE0PVOtWsV0nfAIoP9m4qjX5eTK872kFgXowvaYQfrRYaVu6dfvWGWff8rD5sc rWJRpTmMMWofSTjwbrusM5Rl9tI9P08Q6BPVvNdETTEkoM4zVuM/zI26UvD4GZJv 2njxxqtuOHy5f4ILe1hAgueI1MLO/kfwRAnHrrvKmwOC/F+SdRxn7gA3Kcu/mNQL APgDblJNYpnsGmTOtlAWMtfvhm+GZBsQMxoBN7XwVu87X796+6z+gzQ8UTRTfkEB FdmnrZ3iPaxEPY58pTB02x/1gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc18por iYkjmoM0ynqlah56ookRMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLlRwbR0XSwBdNMCwcYXSDgx+sAw2boyQSsMD2SsXGdzf5sQWOpTD Hvaz/ODMWyPw1K7LLKD5yHblVkm+UZJ1i4pC/0Yy8BZusk2I3HzbtO3xOJexDDdS fSDG6xneKFLuJHbC8VQLppgN7LXHtB+byY4cfWkxyY7YOH2d1BEwOL2E3VK58FPc wUkxmNleZUfe1fkZU1ynhvU03s9x/+uCiM7wrKdJr1OtqS7ylQH9d0CrRK0nWRRZ PortdL54eYLClVGGsn2RK+qFU16vtjbfEbUhoHow+5iLanFO7L8Lq4YCKe48X80d wMtktIM024SkmfM7UJU4sum89aYinJ9u -----END CERTIFICATE-----Generated at Thu Jul 3 00:33:24 2025 by rpki-client