$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: Ggp8xTagEkRs/KmJCQpwX8nqcwyvxb8+wDBraPDboF0= Subject key identifier: EB:10:97:DD:F0:8F:82:B9:50:7E:F6:4D:7E:6D:F4:0C:82:30:5E:EA Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 0104 Signing time: Sun 11 May 2025 03:54:18 +0000 Manifest this update: Sun 11 May 2025 03:54:17 +0000 Manifest next update: Sun 18 May 2025 03:54:17 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: ZmJqEqZl5af+9RqPJb6/2tCXs5NcvnjNd8EQ3owtLh4=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: +frr+wTOoHrcgFMpLKILndUUUD44Ln0TV7/77IoTLr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: May 11 03:54:17 2025 GMT Not After : May 18 03:54:17 2025 GMT Subject: CN=68201f69-58cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:05:35:fc:6b:50:72:88:f3:91:1e:f2:94: c4:05:72:6e:1a:5b:70:e7:cd:e4:46:36:ca:45:25: 4c:65:06:70:cc:35:a7:7e:8b:6b:18:9b:bc:96:50: 67:87:5f:f3:ff:16:37:a4:24:e2:ef:0c:6d:bb:d7: ff:54:5e:53:49:a0:13:4a:d3:c1:70:fc:92:c5:5a: d5:49:9f:38:2a:5a:df:c9:48:20:06:a9:27:1c:63: 29:16:49:61:18:d0:6e:94:75:80:72:0d:3b:38:7e: 40:27:57:26:b4:d0:6e:38:18:6d:17:8f:c5:85:bc: 4b:32:cd:45:24:5b:a9:44:43:9e:75:6d:ce:35:fe: 44:11:49:e9:d9:d1:53:87:3e:64:f3:00:0f:3a:43: d6:0d:97:d2:b9:16:36:0f:3d:25:dd:cc:d6:81:d5: 19:e4:5c:a3:9f:2f:08:4d:34:36:e7:02:ec:72:9f: 35:6d:64:78:cb:86:92:df:a9:77:c1:f2:27:97:5c: ea:6b:98:d4:c9:84:c7:0d:4b:e3:11:e8:d4:99:3e: f0:51:3c:a9:b0:ba:72:4d:a9:b0:10:7c:75:58:d3: b5:60:0a:ab:ad:fe:dc:a3:64:72:70:d9:55:c5:e9: eb:4f:25:bd:94:ac:42:35:0d:04:f0:67:af:46:ea: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:10:97:DD:F0:8F:82:B9:50:7E:F6:4D:7E:6D:F4:0C:82:30:5E:EA X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9f:66:11:eb:0d:30:c2:d4:7e:c4:90:c7:8e:bf:1b:18:0f: 0d:19:66:ec:c1:02:c3:ae:3b:c8:52:2e:ab:0a:fb:f2:25:67: 92:8e:32:79:cf:7b:71:c7:96:f0:9c:38:40:52:04:58:42:ba: fa:54:5f:3c:c0:c1:5a:12:60:75:31:38:68:59:32:38:06:a6: 57:23:9a:f7:7d:12:07:9d:cc:fc:49:63:ab:f3:0c:41:1e:b3: 27:f7:7a:d6:b9:85:81:bb:84:dc:45:56:0f:0d:1d:5a:f6:b8: 91:ed:e9:24:d2:d5:82:4d:00:8c:41:d7:19:03:87:79:4f:8f: 25:69:38:91:2a:6c:84:f7:31:71:a6:18:9b:de:5c:9c:e6:7d: c6:ae:11:3d:e5:f5:fe:ce:94:bf:7d:73:85:eb:eb:97:cd:1f: df:d2:5a:cd:ec:da:12:5a:e2:ae:6a:57:37:9b:42:31:85:fb: fa:16:4e:e7:ea:07:43:92:18:98:af:67:e4:a1:54:90:cb:3c: 9b:d7:23:bb:f0:20:e1:1b:2d:02:31:cb:55:26:d5:2b:00:2d: 16:9d:1a:fa:20:39:f3:43:b1:8b:f5:29:b7:f8:aa:73:34:01: 38:0a:40:b8:a4:ac:7b:f8:45:cd:7a:5a:e7:6c:f7:c1:f4:32: 1d:5a:4f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwNTExMDM1NDE3WhcNMjUwNTE4MDM1NDE3WjAYMRYwFAYD VQQDEw02ODIwMWY2OS01OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCYFNfxrUHKI85Ee8pTEBXJuGltw583kRjbKRSVMZQZwzDWnfotrGJu8llBn h1/z/xY3pCTi7wxtu9f/VF5TSaATStPBcPySxVrVSZ84KlrfyUggBqknHGMpFklh GNBulHWAcg07OH5AJ1cmtNBuOBhtF4/FhbxLMs1FJFupREOedW3ONf5EEUnp2dFT hz5k8wAPOkPWDZfSuRY2Dz0l3czWgdUZ5Fyjny8ITTQ25wLscp81bWR4y4aS36l3 wfInl1zqa5jUyYTHDUvjEejUmT7wUTypsLpyTamwEHx1WNO1YAqrrf7co2RycNlV xenrTyW9lKxCNQ0E8GevRuqZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsQl93w j4K5UH72TX5t9AyCMF7qMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8n2YR6w0wwtR+xJDHjr8bGA8NGWbswQLDrjvIUi6rCvvyJWeSjjJ5 z3txx5bwnDhAUgRYQrr6VF88wMFaEmB1MThoWTI4BqZXI5r3fRIHncz8SWOr8wxB HrMn93rWuYWBu4TcRVYPDR1a9riR7ekk0tWCTQCMQdcZA4d5T48laTiRKmyE9zFx phib3lyc5n3GrhE95fX+zpS/fXOF6+uXzR/f0lrN7NoSWuKualc3m0Ixhfv6Fk7n 6gdDkhiYr2fkoVSQyzyb1yO78CDhGy0CMctVJtUrAC0WnRr6IDnzQ7GL9Sm3+Kpz NAE4CkC4pKx7+EXNelrnbPfB9DIdWk/F -----END CERTIFICATE-----Generated at Mon May 12 12:40:47 2025 by rpki-client