$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: 5w22KbrNFnw7Pu4RzokUJDa+J8jPhuWT3VL0G4fZRQM= Subject key identifier: 34:C7:19:79:04:95:65:29:4F:96:11:5A:AE:8B:A7:41:80:97:08:C0 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: 67 Signing time: Thu 03 Jul 2025 07:14:25 +0000 Manifest this update: Thu 03 Jul 2025 07:14:24 +0000 Manifest next update: Thu 10 Jul 2025 07:14:24 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: CuCOtpCvNZtcTm3xbVubKxw00vU+ZUJdYh5TlGxYK+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Jul 3 07:14:24 2025 GMT Not After : Jul 10 07:14:24 2025 GMT Subject: CN=68662dd0-2191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:46:97:c3:ec:1f:0f:9c:7e:bf:ea:1b:88: d2:2f:58:30:af:9e:3a:09:7d:ef:f3:fa:5f:00:11: 86:eb:d3:8b:59:de:fe:a8:cc:23:71:47:50:ae:6f: 09:9c:3f:64:fa:b7:84:f6:63:7d:7b:ea:3a:14:dd: d0:ec:46:18:37:dc:72:29:0f:db:c0:ed:16:b5:f4: 28:8e:f6:27:6e:82:3f:0c:48:bf:5f:4e:06:61:a2: 28:bb:da:68:6e:90:26:c6:0d:7c:fc:59:64:da:b5: c2:6e:ab:e0:bb:55:e5:48:67:a2:63:1d:f1:5f:db: 3a:d5:f2:1e:40:eb:51:0e:f2:a3:cb:ce:ee:9c:5f: 63:91:51:58:e1:b7:f4:3c:d2:7a:11:1e:34:f9:c5: b1:34:21:4c:79:97:6c:d1:88:07:f4:f0:61:8c:5e: eb:9f:59:4a:5c:e9:1b:8a:48:90:b6:f8:29:b8:a3: c1:87:05:f4:a7:f2:8f:b7:3e:8d:ef:af:ce:86:73: 75:3a:1e:20:e2:e3:c0:21:55:a7:1d:6c:76:5e:5c: cc:09:6f:b5:97:4d:6b:73:e3:e4:7c:1b:7f:a3:f8: 21:3c:83:42:f2:7a:41:1d:c8:b3:10:3c:93:d7:b2: c1:3b:1d:c7:1b:7a:a8:7c:3f:18:87:56:75:9f:31: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:19:79:04:95:65:29:4F:96:11:5A:AE:8B:A7:41:80:97:08:C0 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ec:04:9b:bf:26:ac:21:e1:4d:7d:c9:f7:f0:09:97:07:09: 44:4b:a2:52:62:04:4b:66:31:f4:5f:c3:26:bb:c2:23:47:f0: 93:af:e6:68:bb:64:19:4f:10:62:84:fe:3e:b1:e2:26:b9:f2: a4:32:8b:b7:e0:56:84:af:43:db:36:bb:b8:42:e9:5d:c7:bb: 40:1c:9f:4b:16:14:63:15:e8:d4:03:f6:19:9e:6d:b6:38:14: 81:99:0a:8c:db:c1:c4:ce:7e:8f:1f:85:49:79:64:1a:bb:8f: b4:32:41:ee:bd:1d:47:f5:8d:55:44:b3:64:f3:24:bc:7c:72: db:82:5b:5f:1d:e1:e6:35:0d:0b:5c:08:2d:19:20:00:d6:73: e2:f4:f8:ab:94:bf:40:a4:5e:30:56:92:1b:6a:c5:2c:22:a9: 49:70:25:79:e6:66:4b:e7:13:61:db:14:c8:0d:9b:e9:02:97: 1d:32:6d:27:4e:a0:57:38:fe:c6:20:d6:f5:a2:3a:94:8b:cd: b0:62:cb:79:7b:fc:0f:eb:95:9e:20:62:fd:07:b9:a1:00:20: be:88:ea:bf:03:9e:7c:f8:2c:b7:70:f7:8d:ab:35:fd:47:5f: 6b:f4:6b:ba:6f:4a:12:f3:62:7b:07:e5:8a:a8:d9:de:37:74: 97:ad:d7:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDM4QjExMC8GA1UEBRMoMkY2QjFFN0UxNDAxREUwMEFDOEVFREI3QTg1OTBEMDNE QzU0MEY3ODAeFw0yNTA3MDMwNzE0MjRaFw0yNTA3MTAwNzE0MjRaMBgxFjAUBgNV BAMTDTY4NjYyZGQwLTIxOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB90aXw+wfD5x+v+obiNIvWDCvnjoJfe/z+l8AEYbr04tZ3v6ozCNxR1Cubwmc P2T6t4T2Y3176joU3dDsRhg33HIpD9vA7Ra19CiO9idugj8MSL9fTgZhoii72mhu kCbGDXz8WWTatcJuq+C7VeVIZ6JjHfFf2zrV8h5A61EO8qPLzu6cX2ORUVjht/Q8 0noRHjT5xbE0IUx5l2zRiAf08GGMXuufWUpc6RuKSJC2+Cm4o8GHBfSn8o+3Po3v r86Gc3U6HiDi48AhVacdbHZeXMwJb7WXTWtz4+R8G3+j+CE8g0LyekEdyLMQPJPX ssE7Hccbeqh8PxiHVnWfMY8zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNMcZeQSV ZSlPlhFarounQYCXCMAwHwYDVR0jBBgwFoAUL2sefhQB3gCsju23qFkNA9xUD3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMzhCL0ExQUIyQUJDQkE4 OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDJzZWZoUUIzZ0NzanUyM3FGa05BOXhVRDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MzhCL0ExQUIyQUJDQkE4OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dD c2p1MjNxRmtOQTl4VUQzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjsBJu/Jqwh4U19yffwCZcHCURLolJiBEtmMfRfwya7wiNH8JOv5mi7 ZBlPEGKE/j6x4ia58qQyi7fgVoSvQ9s2u7hC6V3Hu0Acn0sWFGMV6NQD9hmebbY4 FIGZCozbwcTOfo8fhUl5ZBq7j7QyQe69HUf1jVVEs2TzJLx8ctuCW18d4eY1DQtc CC0ZIADWc+L0+KuUv0CkXjBWkhtqxSwiqUlwJXnmZkvnE2HbFMgNm+kClx0ybSdO oFc4/sYg1vWiOpSLzbBiy3l7/A/rlZ4gYv0HuaEAIL6I6r8Dnnz4LLdw942rNf1H X2v0a7pvShLzYnsH5Yqo2d43dJet17g= -----END CERTIFICATE-----Generated at Fri Jul 4 00:22:32 2025 by rpki-client