$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: WprM5d9QzgefCaGBOW9GnMJdzTSLDwM+otiXXTgbBMo= Subject key identifier: 70:03:5E:06:C9:F9:3C:53:35:AC:91:8C:7D:B4:9B:01:9F:1D:F4:41 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C35 Signing time: Fri 22 Aug 2025 18:44:51 +0000 Manifest this update: Fri 22 Aug 2025 18:44:51 +0000 Manifest next update: Fri 29 Aug 2025 18:44:51 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: OTwem6/0bCj81sm5vdR9etN53Hhn72UW07PmnKeDf3Q=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Aug 22 18:44:51 2025 GMT Not After : Aug 29 18:44:51 2025 GMT Subject: CN=68a8baa3-2590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:93:38:1d:1d:3a:71:e3:13:05:ec:b8:08: 36:f4:05:6b:1c:d8:1a:16:6e:d3:06:02:da:4f:2c: 17:12:4b:f9:f6:3a:eb:d9:01:52:9d:c3:e5:85:20: dc:94:1e:00:13:1f:38:33:3a:e3:1c:61:40:41:10: e0:49:d8:34:11:a3:8a:5a:a9:fe:24:48:2f:63:1e: 2f:e7:6a:53:af:08:d9:6c:62:bc:40:e0:56:6d:8c: 30:57:53:1e:7b:7b:37:33:4a:80:b4:e2:31:7f:b6: 18:dc:51:a2:1d:4c:d7:03:0b:d9:9f:1a:95:95:b5: c0:2f:bb:a0:2d:a8:41:ee:7d:0d:58:77:6c:32:0c: c0:42:c5:0c:67:09:83:8c:37:31:4d:a5:21:24:c8: 2a:28:62:93:b9:5b:d0:83:0f:69:82:2b:e6:98:00: 5a:e3:68:3a:c1:35:b9:b4:46:57:2b:d5:c1:ef:b5: df:a4:61:b9:c0:55:d4:3d:df:cb:b3:cc:1f:d8:77: 89:da:63:e7:70:33:d0:c0:1d:c2:21:7c:96:de:3e: e6:dd:f5:66:52:c1:40:a1:5f:9f:2a:28:8f:79:8a: bd:7c:fa:dc:3f:71:d6:24:a8:ea:63:94:6c:3d:33: 05:e9:51:78:0b:14:d9:72:f5:05:0c:78:2e:ff:7a: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:03:5E:06:C9:F9:3C:53:35:AC:91:8C:7D:B4:9B:01:9F:1D:F4:41 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:c9:49:70:af:5a:90:15:48:c7:65:3a:1e:0e:6e:f0:05: 7a:25:23:83:9d:ec:66:ba:e8:d3:44:c9:5a:59:6b:da:f6:a4: 18:05:88:c2:61:cf:1c:b8:03:de:b4:2d:d0:ac:24:e7:c9:5f: 73:da:21:1f:cc:e1:c1:3d:4f:86:f4:c7:61:e4:01:a1:88:b6: 78:cc:bd:e2:ec:7a:15:e4:75:96:50:25:e4:43:33:6a:85:b8: 02:39:50:d9:a2:ce:cb:0e:f8:dc:f5:e4:31:bf:1c:eb:29:80: 4b:8e:08:15:7a:aa:9e:f6:d3:a9:e7:76:e8:8d:20:16:12:df: 59:23:59:9f:ae:fe:7d:38:8a:7f:fc:e1:3b:d0:54:56:3b:ef: e8:98:b4:f0:2f:81:99:d3:70:c1:0b:6a:f0:de:d8:14:98:7e: 3b:25:60:2f:2a:de:9b:4d:16:34:10:75:ba:aa:df:cc:55:26: 8e:b9:62:da:d7:6c:3e:e2:0e:d8:c5:7a:a8:74:23:e6:ca:f7: bc:55:5d:de:7b:38:18:77:93:df:ff:71:e2:6d:c9:87:7c:c9: 26:89:fa:4d:9e:4d:a0:01:cf:84:08:26:8a:83:58:ec:bb:20: 5c:51:02:f2:eb:b7:df:09:ec:e5:78:49:b9:1a:2c:43:61:d5: 10:1c:98:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwODIyMTg0NDUxWhcNMjUwODI5MTg0NDUxWjAYMRYwFAYD VQQDEw02OGE4YmFhMy0yNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVKTOB0dOnHjEwXsuAg29AVrHNgaFm7TBgLaTywXEkv59jrr2QFSncPlhSDc lB4AEx84MzrjHGFAQRDgSdg0EaOKWqn+JEgvYx4v52pTrwjZbGK8QOBWbYwwV1Me e3s3M0qAtOIxf7YY3FGiHUzXAwvZnxqVlbXAL7ugLahB7n0NWHdsMgzAQsUMZwmD jDcxTaUhJMgqKGKTuVvQgw9pgivmmABa42g6wTW5tEZXK9XB77XfpGG5wFXUPd/L s8wf2HeJ2mPncDPQwB3CIXyW3j7m3fVmUsFAoV+fKiiPeYq9fPrcP3HWJKjqY5Rs PTMF6VF4CxTZcvUFDHgu/3qWRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHADXgbJ +TxTNayRjH20mwGfHfRBMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxE8lJcK9akBVIx2U6Hg5u8AV6JSODnexmuujTRMlaWWva9qQYBYjC Yc8cuAPetC3QrCTnyV9z2iEfzOHBPU+G9Mdh5AGhiLZ4zL3i7HoV5HWWUCXkQzNq hbgCOVDZos7LDvjc9eQxvxzrKYBLjggVeqqe9tOp53bojSAWEt9ZI1mfrv59OIp/ /OE70FRWO+/omLTwL4GZ03DBC2rw3tgUmH47JWAvKt6bTRY0EHW6qt/MVSaOuWLa 12w+4g7YxXqodCPmyve8VV3eezgYd5Pf/3HibcmHfMkmifpNnk2gAc+ECCaKg1js uyBcUQLy67ffCezleEm5GixDYdUQHJhN -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:46 2025 by rpki-client