$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: xJG/TRLk7NZFSxKVZ2jX/KNhuK622iSSNVpVP0Aw/CM= Subject key identifier: E1:14:4C:8F:60:31:16:BB:A7:E4:8B:D1:1B:DA:C5:BE:1F:8F:70:C4 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0808 Signing time: Wed 02 Jul 2025 21:11:19 +0000 Manifest this update: Wed 02 Jul 2025 21:11:19 +0000 Manifest next update: Wed 09 Jul 2025 21:11:19 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: 73FCvAbmclBvAFGJZTc6dsHm86ScXRNtqiG6b84ttAY=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Jul 2 21:11:19 2025 GMT Not After : Jul 9 21:11:19 2025 GMT Subject: CN=6865a077-4cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:91:fe:7f:aa:95:f0:31:ce:f6:9f:30:bb: f3:41:2f:67:0c:5c:2a:41:46:1e:71:ef:b5:20:aa: ef:66:34:a7:10:d1:40:ee:8d:5b:ee:75:e4:2a:7c: 98:1a:4f:0d:c8:f1:7b:2c:3b:20:84:0c:40:75:5a: 7a:d6:36:71:eb:31:7c:2b:15:c7:e1:67:ca:40:68: be:fd:7c:ba:bd:ff:e3:e8:d8:46:6f:c4:1d:df:65: eb:ef:4a:97:67:ec:da:d2:29:8c:fa:d7:a2:0c:15: a0:6c:ff:a2:f9:b8:a6:39:ff:76:af:85:84:f9:3f: 89:c8:f7:7b:19:ff:0c:34:0c:95:5e:22:f5:6d:69: a5:42:23:cf:a6:a6:d5:86:e4:3e:c0:fb:9b:2c:c8: 5c:98:d6:b9:7d:b7:bd:4b:ef:2a:a8:31:d2:15:cd: b3:90:9b:d8:5a:75:a2:e3:71:a8:56:bd:7c:49:2a: 56:8f:3f:df:8f:b8:a6:5f:9e:43:6f:60:85:5b:56: 24:89:37:28:bf:39:21:d0:0c:da:7a:7b:23:f3:df: 8d:41:68:70:d6:37:04:02:bf:08:3e:59:b0:58:de: b1:92:35:91:39:68:fe:31:11:47:fd:51:ae:e2:e9: 46:86:19:27:c5:f5:08:d5:81:28:e9:6c:30:22:9f: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:14:4C:8F:60:31:16:BB:A7:E4:8B:D1:1B:DA:C5:BE:1F:8F:70:C4 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fe:f5:8a:8a:07:1c:83:2e:ea:20:90:93:d7:47:81:a0:40: a3:a5:83:58:f9:f1:96:51:22:62:97:5c:94:44:e0:a8:ca:08: fb:01:0d:6a:c7:20:7f:ad:f2:41:e6:fc:ad:fa:c2:c8:d5:7c: 3b:ab:38:79:f0:9b:40:42:04:c5:0b:bc:f8:ed:34:c9:ac:95: 04:74:c6:69:c4:07:17:83:ed:82:a6:fb:5a:75:41:3a:2b:03: 6d:53:6c:b7:54:87:d8:5a:48:b5:d1:0c:e2:53:9e:ee:af:8f: 3e:85:a8:76:d4:f6:70:2d:d7:8f:a0:da:22:0a:df:d9:41:6f: 28:cb:e7:6b:1f:f8:d1:fd:aa:2f:42:25:4e:94:22:a6:d8:0c: 97:29:ab:14:2e:a5:c3:8f:47:00:f4:6f:17:d8:90:2d:b0:d7: 42:b7:48:77:d1:08:16:43:93:1f:7e:6a:15:4e:8d:b3:53:6a: 8d:a9:02:34:e6:c4:b6:82:e8:c0:5b:5e:53:c1:73:9c:3c:22: c2:3e:8f:8c:7e:ae:a5:87:01:cc:69:d8:bc:58:c5:28:33:44: 41:19:74:28:d4:4f:7e:38:81:98:f6:a8:e1:04:b7:2d:62:c3: 46:58:00:14:be:90:ae:1d:9f:b9:3b:12:23:e7:de:0d:cb:c0: ef:7f:54:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwNzAyMjExMTE5WhcNMjUwNzA5MjExMTE5WjAYMRYwFAYD VQQDEw02ODY1YTA3Ny00Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+6R/n+qlfAxzvafMLvzQS9nDFwqQUYece+1IKrvZjSnENFA7o1b7nXkKnyY Gk8NyPF7LDsghAxAdVp61jZx6zF8KxXH4WfKQGi+/Xy6vf/j6NhGb8Qd32Xr70qX Z+za0imM+teiDBWgbP+i+bimOf92r4WE+T+JyPd7Gf8MNAyVXiL1bWmlQiPPpqbV huQ+wPubLMhcmNa5fbe9S+8qqDHSFc2zkJvYWnWi43GoVr18SSpWjz/fj7imX55D b2CFW1YkiTcovzkh0Azaensj89+NQWhw1jcEAr8IPlmwWN6xkjWROWj+MRFH/VGu 4ulGhhknxfUI1YEo6WwwIp8fGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEUTI9g MRa7p+SL0Rvaxb4fj3DEMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/vWKigccgy7qIJCT10eBoECjpYNY+fGWUSJil1yUROCoygj7AQ1q xyB/rfJB5vyt+sLI1Xw7qzh58JtAQgTFC7z47TTJrJUEdMZpxAcXg+2CpvtadUE6 KwNtU2y3VIfYWki10QziU57ur48+hah21PZwLdePoNoiCt/ZQW8oy+drH/jR/aov QiVOlCKm2AyXKasULqXDj0cA9G8X2JAtsNdCt0h30QgWQ5MffmoVTo2zU2qNqQI0 5sS2gujAW15TwXOcPCLCPo+Mfq6lhwHMadi8WMUoM0RBGXQo1E9+OIGY9qjhBLct YsNGWAAUvpCuHZ+5OxIj594Ny8Dvf1SU -----END CERTIFICATE-----Generated at Fri Jul 4 11:13:37 2025 by rpki-client