$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: QgckUz06RfSNG6weZgvN62+7QzbinvC8OShjRC7sk6A= Subject key identifier: E5:A9:BD:AB:F7:E6:B0:52:98:ED:F3:7D:72:87:F8:33:34:74:0E:1D Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 0121 Signing time: Sat 05 Jul 2025 05:01:43 +0000 Manifest this update: Sat 05 Jul 2025 05:01:43 +0000 Manifest next update: Sat 12 Jul 2025 05:01:43 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: W/vQ/iHIaD+4uHmh5e7gJYRSRqngu+yZfwn/XQ0pj+o=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: 3yiW508L3oftd11FyXYrUNBNgcv/84LhY7x8tmbtRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: Jul 5 05:01:43 2025 GMT Not After : Jul 12 05:01:43 2025 GMT Subject: CN=6868b1b7-b92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:32:33:0e:d2:39:d5:d4:b7:43:f5:a6:a5:df: a6:1d:ef:4a:6e:a2:58:4a:89:b7:16:26:bf:fd:71: 3e:be:ab:84:4a:4a:5f:59:36:0c:65:4c:0a:58:8c: 28:b1:f7:34:55:6e:cd:14:9b:b8:fc:72:ed:79:b3: e6:e8:fc:dd:a3:be:a0:01:f4:26:0c:08:d8:7b:8a: b0:0c:c1:a2:3b:5e:f2:db:7b:18:14:9b:58:54:03: 48:7c:89:86:c9:dd:f6:dd:9f:5b:26:d9:27:90:17: c0:4d:d9:ee:8c:80:99:8d:1a:03:81:75:5f:65:58: e1:90:86:d3:37:bf:bc:11:3a:f7:6d:02:ef:b2:0c: 28:3e:9e:4e:b1:a8:76:0c:d9:8f:51:a9:f5:1f:e8: 8a:71:a2:b5:e7:15:fb:f1:1d:ff:0d:d1:43:6d:75: 57:66:63:55:09:24:ed:ac:a7:b6:03:c4:77:53:e9: af:a1:ee:8a:d4:22:84:6f:14:47:28:89:14:a0:dd: f9:85:24:d6:25:29:64:f9:29:4f:e9:29:b3:ea:e3: 08:ee:70:2c:d0:30:6b:81:bd:fe:87:81:90:c9:fb: 17:76:9a:64:5e:d9:17:30:2e:17:a1:8f:68:ce:c4: ab:db:c1:da:ac:a4:cd:a0:51:40:6a:08:77:93:b5: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:BD:AB:F7:E6:B0:52:98:ED:F3:7D:72:87:F8:33:34:74:0E:1D X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:50:4d:89:c6:90:9c:00:b1:73:92:03:78:77:09:56:6b:12: 7c:1b:14:0f:c1:c5:c6:d1:17:31:b9:52:9e:db:e2:fc:e5:24: 62:49:15:44:4b:86:81:2d:2c:be:5b:17:d4:f8:eb:e1:3a:f0: 87:64:8d:34:4f:a6:b1:55:8e:21:d5:c5:e6:28:3d:78:7c:d2: 10:2f:11:25:e6:11:66:45:56:6b:03:cd:3e:7e:5e:e7:aa:aa: d5:58:63:24:1b:4a:9a:11:cf:3d:03:a5:3b:57:74:33:d1:d6: 8b:b1:4a:69:d0:20:b4:ec:d3:80:85:e8:49:3d:a3:94:ca:43: ba:25:0e:ec:a0:6f:48:13:be:0d:27:82:85:f3:7c:50:90:0d: 81:69:df:83:c5:ac:48:47:51:e8:6c:ff:2c:28:c6:bf:f0:8a: e6:06:30:6c:4e:df:89:a6:3f:33:98:e9:03:3f:68:98:ab:3d: 42:8a:1b:f7:12:66:7f:fa:ef:9d:18:b7:2a:f5:6a:24:57:75: 68:60:c1:c3:c3:88:01:f2:1b:75:92:b1:91:3b:ec:1d:4b:89: 11:a5:be:af:94:a6:14:06:35:cc:f4:05:08:68:f3:6b:df:21: b4:73:63:f0:4b:58:76:1f:31:d7:0a:7b:7c:e5:ad:53:94:d6: c9:01:f6:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwNzA1MDUwMTQzWhcNMjUwNzEyMDUwMTQzWjAYMRYwFAYD VQQDEw02ODY4YjFiNy1iOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jIzDtI51dS3Q/Wmpd+mHe9KbqJYSom3Fia//XE+vquESkpfWTYMZUwKWIwo sfc0VW7NFJu4/HLtebPm6Pzdo76gAfQmDAjYe4qwDMGiO17y23sYFJtYVANIfImG yd323Z9bJtknkBfATdnujICZjRoDgXVfZVjhkIbTN7+8ETr3bQLvsgwoPp5Osah2 DNmPUan1H+iKcaK15xX78R3/DdFDbXVXZmNVCSTtrKe2A8R3U+mvoe6K1CKEbxRH KIkUoN35hSTWJSlk+SlP6Smz6uMI7nAs0DBrgb3+h4GQyfsXdppkXtkXMC4XoY9o zsSr28HarKTNoFFAagh3k7WiOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWpvav3 5rBSmO3zfXKH+DM0dA4dMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzUE2JxpCcALFzkgN4dwlWaxJ8GxQPwcXG0RcxuVKe2+L85SRiSRVE S4aBLSy+WxfU+OvhOvCHZI00T6axVY4h1cXmKD14fNIQLxEl5hFmRVZrA80+fl7n qqrVWGMkG0qaEc89A6U7V3Qz0daLsUpp0CC07NOAhehJPaOUykO6JQ7soG9IE74N J4KF83xQkA2Bad+DxaxIR1HobP8sKMa/8IrmBjBsTt+Jpj8zmOkDP2iYqz1Cihv3 EmZ/+u+dGLcq9WokV3VoYMHDw4gB8ht1krGRO+wdS4kRpb6vlKYUBjXM9AUIaPNr 3yG0c2PwS1h2HzHXCnt85a1TlNbJAfZz -----END CERTIFICATE-----Generated at Sat Jul 5 14:35:05 2025 by rpki-client