$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: KmQ21rzeZLc5XmyRdVa453C6CVZZohGOqcZS5SWuZ3o= Subject key identifier: FA:86:3E:27:F8:9D:50:72:42:D8:43:DB:0B:7B:F0:BB:6D:75:BE:34 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C1B Signing time: Wed 02 Jul 2025 18:53:42 +0000 Manifest this update: Wed 02 Jul 2025 18:53:42 +0000 Manifest next update: Wed 09 Jul 2025 18:53:42 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: C+FrwJJNUzIh93uo0IZXBqCfGErPSCbi86usb0DLZv4=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Jul 2 18:53:42 2025 GMT Not After : Jul 9 18:53:42 2025 GMT Subject: CN=68658036-5112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:4c:c0:4b:fa:a4:97:46:1e:34:6b:2c:81: e8:3b:1a:e0:f5:ce:b2:c7:98:e1:16:1f:58:5a:ce: 1f:eb:58:15:c1:e7:cc:b8:3e:40:f3:5f:cf:94:3f: ac:12:b2:ea:f8:d1:d9:64:1c:0e:46:8d:33:c4:23: 4b:54:fb:1a:3e:45:98:66:ae:24:b4:70:04:1a:97: e6:28:0d:d8:81:5d:3b:af:3f:3d:5e:e6:53:52:a9: c0:3a:e7:2c:b7:73:bd:1c:3d:c6:7f:c8:b2:bf:ab: 84:b0:25:93:98:74:30:93:6e:9c:e1:d1:47:4a:43: 2c:19:84:e2:01:a9:7d:f2:87:0e:72:ff:6c:35:5d: f8:e1:e4:44:90:d2:7a:fa:04:c7:3b:87:93:9c:76: 28:37:f3:fc:55:a1:19:64:a8:0d:5e:58:6f:de:e2: c0:02:36:3e:bf:d6:db:05:14:98:c2:28:7e:f8:e1: 22:6d:5d:22:9d:20:94:ee:26:b8:9b:01:46:c8:70: 6b:88:70:2a:b2:4f:84:1e:9c:fe:5b:4e:10:b4:8d: d4:df:1c:ea:00:b0:e6:8e:fe:3d:f2:e3:0b:02:7d: d5:70:0e:21:31:3d:7a:44:16:dc:f2:07:48:4b:72: b1:82:41:21:f8:51:0c:f5:cb:09:00:76:dd:54:b1: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:3E:27:F8:9D:50:72:42:D8:43:DB:0B:7B:F0:BB:6D:75:BE:34 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5b:8e:e3:85:92:cb:44:0f:15:c9:a3:68:66:64:e6:58:b0: 3d:25:4f:da:52:39:e2:e6:9b:38:0f:be:b7:d5:e4:97:29:ce: 4e:58:01:9c:54:c5:d5:04:0f:a9:1d:a8:24:98:35:f1:b5:4d: f0:24:20:df:7c:d4:d7:c0:8c:1c:79:1a:cc:f5:81:18:38:24: 7c:29:97:88:84:98:e7:c8:67:b1:86:4a:71:df:04:81:99:3a: ad:6a:f6:df:76:c1:47:0b:cc:99:29:11:12:0e:17:8a:e2:38: 19:63:63:0d:e9:0e:33:a2:68:63:b7:2c:f6:50:d9:a7:96:1d: 83:98:14:7d:dc:45:48:ac:6f:7c:d5:1e:2d:35:79:92:f0:4a: fc:80:5c:3c:3e:7c:f7:58:2a:f1:41:18:5b:a8:37:37:ac:f3: 1a:d0:df:89:af:24:cb:ff:9c:c1:11:bb:93:6a:ea:bf:2f:e3: 4c:6b:d0:de:c5:c2:ca:83:a8:46:67:75:79:4f:95:e5:d3:ef: 5c:b6:26:f2:05:ec:20:4a:29:90:d9:4b:d3:50:fc:66:da:b5: ec:4f:a7:9f:34:64:62:ac:f4:d1:f2:dd:43:35:36:75:3e:fb: ac:1d:da:f3:92:53:91:da:e2:7e:c9:b6:c5:aa:4d:ea:26:4e: 94:9c:f6:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwNzAyMTg1MzQyWhcNMjUwNzA5MTg1MzQyWjAYMRYwFAYD VQQDEw02ODY1ODAzNi01MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhVMwEv6pJdGHjRrLIHoOxrg9c6yx5jhFh9YWs4f61gVwefMuD5A81/PlD+s ErLq+NHZZBwORo0zxCNLVPsaPkWYZq4ktHAEGpfmKA3YgV07rz89XuZTUqnAOucs t3O9HD3Gf8iyv6uEsCWTmHQwk26c4dFHSkMsGYTiAal98ocOcv9sNV344eREkNJ6 +gTHO4eTnHYoN/P8VaEZZKgNXlhv3uLAAjY+v9bbBRSYwih++OEibV0inSCU7ia4 mwFGyHBriHAqsk+EHpz+W04QtI3U3xzqALDmjv498uMLAn3VcA4hMT16RBbc8gdI S3KxgkEh+FEM9csJAHbdVLEdQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqGPif4 nVByQthD2wt78Lttdb40MB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNW47jhZLLRA8VyaNoZmTmWLA9JU/aUjni5ps4D7631eSXKc5OWAGc VMXVBA+pHagkmDXxtU3wJCDffNTXwIwceRrM9YEYOCR8KZeIhJjnyGexhkpx3wSB mTqtavbfdsFHC8yZKRESDheK4jgZY2MN6Q4zomhjtyz2UNmnlh2DmBR93EVIrG98 1R4tNXmS8Er8gFw8Pnz3WCrxQRhbqDc3rPMa0N+JryTL/5zBEbuTauq/L+NMa9De xcLKg6hGZ3V5T5Xl0+9ctibyBewgSimQ2UvTUPxm2rXsT6efNGRirPTR8t1DNTZ1 PvusHdrzklOR2uJ+ybbFqk3qJk6UnPbD -----END CERTIFICATE-----Generated at Fri Jul 4 01:11:06 2025 by rpki-client