$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: BcZaUE7dfoMDrc9mph7SvwmdpJBzdGqgG6TCnRd+rlQ= Subject key identifier: 68:F0:F8:E8:DB:82:18:93:C1:9D:2C:06:94:EF:8D:32:A2:41:6C:10 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02A4 Signing time: Tue 13 May 2025 01:23:37 +0000 Manifest this update: Tue 13 May 2025 01:23:36 +0000 Manifest next update: Tue 20 May 2025 01:23:36 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 7JQoxcPCRoy5oapRBPVbiYdre44K2GsQJG8CDkfAmcg=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: May 13 01:23:36 2025 GMT Not After : May 20 01:23:36 2025 GMT Subject: CN=68229f18-00fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:96:95:2c:f9:fa:66:e0:7e:19:de:02:d0: c8:60:02:e2:52:d2:ac:a4:31:c7:a0:5e:5a:6e:81: c4:f2:56:2c:f7:7e:f2:b7:a5:8d:f0:c6:09:39:09: dc:7f:82:f2:3b:46:89:83:47:eb:32:24:9d:e4:7f: 6a:48:62:6f:8c:66:f3:08:6d:ef:dc:2d:11:93:3c: 86:e4:b8:00:7b:b2:40:a6:3f:b6:b2:25:70:af:cd: 79:f5:dc:97:40:96:a9:d6:f5:d4:ce:b0:87:e7:52: 08:ca:bd:78:68:5f:1e:0d:a1:0c:ba:e9:89:ed:18: ff:6f:7d:4b:f8:24:8d:8b:b1:5d:d9:3d:ce:b3:c2: 7d:cf:4b:03:dd:ad:f8:78:ee:e1:87:ad:32:83:e0: a8:dc:79:88:ba:c9:61:59:6e:0e:b3:10:57:b1:84: 07:09:1a:57:e6:6a:82:9e:db:03:71:1d:a0:f2:14: 30:76:26:49:fe:b7:79:ce:9e:9a:46:e1:0e:2f:3d: ea:44:8e:58:b2:b3:6e:c0:28:d3:51:3c:ed:3b:f3: 63:4c:b1:3b:32:66:6b:4a:2c:4b:6f:29:6f:af:22: 05:91:fe:62:22:ee:44:59:9f:9f:71:69:e2:3b:2b: d4:7c:96:e3:08:fa:29:e6:6b:34:ba:02:5d:6c:a0: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:F8:E8:DB:82:18:93:C1:9D:2C:06:94:EF:8D:32:A2:41:6C:10 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2c:5d:d3:e2:4b:97:e9:a3:22:45:ff:3f:34:7e:5a:5e:c7: 34:17:06:4c:e4:dc:e6:dc:7e:aa:ee:6b:77:ed:52:51:83:0f: cd:f2:bb:20:fb:3b:da:1d:c1:98:78:2e:20:4c:0a:5f:e6:76: a3:ca:af:47:2d:f7:e1:0e:00:06:d6:45:19:8b:47:c4:de:74: 79:99:6a:3f:64:6a:13:88:90:8e:18:1d:11:a9:8b:8f:42:00: 8d:4a:e9:48:93:1c:c0:9f:3c:eb:b5:d9:85:1f:a7:e8:15:08: a7:09:9d:a7:98:62:95:9b:c3:f3:cb:fb:28:fa:77:89:e3:f6: ca:4a:48:0d:f0:5e:0f:a8:66:91:23:08:9a:5d:9f:19:84:81: 8d:54:7d:82:10:2c:98:ff:8c:1c:a6:3f:b6:41:15:ce:83:58: bb:ea:f8:10:4f:14:48:57:3a:9c:ff:ea:50:75:94:e4:bb:a5: d9:a6:24:85:73:6f:f2:3d:ba:64:45:be:e6:be:99:7f:94:fd: 12:3f:fc:a9:93:d4:a2:af:ca:cd:ee:9b:f1:de:9a:02:29:6b: 0e:f0:75:24:b7:99:e6:08:b1:32:8e:b1:c7:88:f4:da:22:62: c5:00:35:78:e9:cf:4e:8a:fa:f9:c9:34:43:7f:b4:b9:cf:40: 9b:e0:1c:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNTEzMDEyMzM2WhcNMjUwNTIwMDEyMzM2WjAYMRYwFAYD VQQDEw02ODIyOWYxOC0wMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTKWlSz5+mbgfhneAtDIYALiUtKspDHHoF5aboHE8lYs937yt6WN8MYJOQnc f4LyO0aJg0frMiSd5H9qSGJvjGbzCG3v3C0RkzyG5LgAe7JApj+2siVwr8159dyX QJap1vXUzrCH51IIyr14aF8eDaEMuumJ7Rj/b31L+CSNi7Fd2T3Os8J9z0sD3a34 eO7hh60yg+Co3HmIuslhWW4OsxBXsYQHCRpX5mqCntsDcR2g8hQwdiZJ/rd5zp6a RuEOLz3qRI5YsrNuwCjTUTztO/NjTLE7MmZrSixLbylvryIFkf5iIu5EWZ+fcWni OyvUfJbjCPop5ms0ugJdbKCqrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjw+Ojb ghiTwZ0sBpTvjTKiQWwQMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByLF3T4kuX6aMiRf8/NH5aXsc0FwZM5Nzm3H6q7mt37VJRgw/N8rsg +zvaHcGYeC4gTApf5najyq9HLffhDgAG1kUZi0fE3nR5mWo/ZGoTiJCOGB0RqYuP QgCNSulIkxzAnzzrtdmFH6foFQinCZ2nmGKVm8Pzy/so+neJ4/bKSkgN8F4PqGaR IwiaXZ8ZhIGNVH2CECyY/4wcpj+2QRXOg1i76vgQTxRIVzqc/+pQdZTku6XZpiSF c2/yPbpkRb7mvpl/lP0SP/ypk9Sir8rN7pvx3poCKWsO8HUkt5nmCLEyjrHHiPTa ImLFADV46c9Oivr5yTRDf7S5z0Cb4Bwf -----END CERTIFICATE-----Generated at Wed May 14 14:15:33 2025 by rpki-client