$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: Z6q5qHg3yvtX7CCcpncPuPMDD8Mp8VnOraOAdie2mBc= Subject key identifier: C8:77:67:0B:96:BA:E5:48:3D:A8:44:0F:D9:43:8F:A4:CA:30:79:E6 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 07EE Signing time: Wed 14 May 2025 21:04:58 +0000 Manifest this update: Wed 14 May 2025 21:04:58 +0000 Manifest next update: Wed 21 May 2025 21:04:58 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: pSHKIoQwywiidXHxiXGSxECSRaZ1GnMFSXeC6uto0hY=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: b+h/ppjl5OqZ84YHWzvHgFGwffNA/fcx3GbK/0z0P+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: May 14 21:04:58 2025 GMT Not After : May 21 21:04:58 2025 GMT Subject: CN=6825057a-070e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:2e:64:1e:a1:e3:37:36:22:07:58:89:95: b7:58:c5:06:6b:d6:35:1b:e4:e3:ce:43:59:87:a4: af:2d:8b:69:78:4a:c5:14:05:8f:77:da:f8:49:d4: e5:64:3a:af:b5:2b:59:ca:0f:de:fe:91:1d:9d:fe: 13:40:42:a0:aa:ea:f2:de:74:a5:91:b7:e5:68:63: f0:fc:5b:b2:9d:d1:74:1d:93:9a:26:bd:d7:79:4d: 54:0a:26:e8:02:2a:21:c2:22:9d:61:c6:7c:fb:93: 2b:25:0d:f3:bf:1b:6c:e7:ba:dd:8e:9a:6a:c4:af: e7:a9:50:9b:05:ed:65:7c:29:47:29:92:f7:6a:ab: 7c:23:27:20:ac:a4:d1:75:79:65:be:89:35:21:6f: 6a:0d:f0:94:12:c1:02:d2:9c:1a:28:82:69:7a:ee: 36:69:be:e6:46:39:d9:b4:b6:2c:06:0d:b1:e7:88: c0:ee:2b:88:56:7a:83:65:06:cd:66:41:ba:f6:3a: 60:26:df:56:ec:40:ce:2f:70:bd:1c:6c:74:5e:25: 38:12:84:2f:2c:1b:c2:9a:d2:cf:71:2b:d6:fd:dd: 49:99:d8:d9:49:6d:61:a9:fe:6a:18:c8:03:a2:7a: bc:20:b6:19:2f:5d:e6:fa:8d:42:ec:6e:af:50:70: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:67:0B:96:BA:E5:48:3D:A8:44:0F:D9:43:8F:A4:CA:30:79:E6 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ab:e1:c9:78:c1:7b:ba:33:53:8a:21:5d:56:ce:13:4a:31: c4:32:2f:bd:0b:91:1e:a6:99:d1:1f:8d:78:2f:b9:9d:f0:55: 30:ed:57:49:1c:0f:79:26:a2:f4:e6:c1:7d:ba:5f:34:56:1b: 3e:44:30:31:91:d7:f2:db:0c:9a:dd:e3:d1:19:b2:2c:ff:c5: 8e:9d:ab:bb:a1:f7:2d:30:af:77:45:1b:30:6d:e0:fa:f9:ef: 3c:af:ec:4c:0d:a8:07:d9:3b:bb:fc:68:e0:2a:c0:ce:3b:f1: f0:38:49:66:f6:2c:0f:73:1c:fe:26:52:62:d3:fa:44:ba:7b: a9:17:b5:aa:fd:d1:b7:f8:e8:25:5f:83:83:6f:5c:d7:5c:62: 68:94:ce:33:f3:f4:be:1c:6e:1c:91:63:8b:49:20:9c:71:69: a6:2e:45:84:ad:b2:89:e9:51:15:7c:9a:66:45:d4:83:37:33: 71:07:d1:10:40:4a:34:4f:1e:6e:11:c5:eb:c2:1b:e3:4e:33: cf:1b:25:2c:90:aa:07:06:63:6b:e2:86:7f:bb:03:b7:7d:1e: b8:c7:94:e1:17:87:2a:7f:c4:98:f6:59:29:0c:66:cc:a9:69: 06:df:a5:eb:91:7a:8c:c5:13:56:aa:21:96:2f:a0:7e:42:26: ad:b6:dc:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwNTE0MjEwNDU4WhcNMjUwNTIxMjEwNDU4WjAYMRYwFAYD VQQDEw02ODI1MDU3YS0wNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LkuZB6h4zc2IgdYiZW3WMUGa9Y1G+TjzkNZh6SvLYtpeErFFAWPd9r4SdTl ZDqvtStZyg/e/pEdnf4TQEKgqury3nSlkbflaGPw/FuyndF0HZOaJr3XeU1UCibo AiohwiKdYcZ8+5MrJQ3zvxts57rdjppqxK/nqVCbBe1lfClHKZL3aqt8IycgrKTR dXllvok1IW9qDfCUEsEC0pwaKIJpeu42ab7mRjnZtLYsBg2x54jA7iuIVnqDZQbN ZkG69jpgJt9W7EDOL3C9HGx0XiU4EoQvLBvCmtLPcSvW/d1JmdjZSW1hqf5qGMgD onq8ILYZL13m+o1C7G6vUHDQJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh3ZwuW uuVIPahED9lDj6TKMHnmMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzq+HJeMF7ujNTiiFdVs4TSjHEMi+9C5EeppnRH414L7md8FUw7VdJ HA95JqL05sF9ul80Vhs+RDAxkdfy2wya3ePRGbIs/8WOnau7ofctMK93RRswbeD6 +e88r+xMDagH2Tu7/GjgKsDOO/HwOElm9iwPcxz+JlJi0/pEunupF7Wq/dG3+Ogl X4ODb1zXXGJolM4z8/S+HG4ckWOLSSCccWmmLkWErbKJ6VEVfJpmRdSDNzNxB9EQ QEo0Tx5uEcXrwhvjTjPPGyUskKoHBmNr4oZ/uwO3fR64x5ThF4cqf8SY9lkpDGbM qWkG36XrkXqMxRNWqiGWL6B+Qiatttzq -----END CERTIFICATE-----Generated at Fri May 16 17:57:07 2025 by rpki-client