$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: o0WZAunqIyPRJDaRBLK+nQWp8oCROXoahWqIxeGM2bQ= Subject key identifier: FA:43:B5:19:3F:F4:DE:7A:3C:AE:27:A9:A4:22:8A:8A:3E:E9:69:3F Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 17 Signing time: Thu 03 Jul 2025 08:13:36 +0000 Manifest this update: Thu 03 Jul 2025 08:13:36 +0000 Manifest next update: Thu 10 Jul 2025 08:13:36 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: +LbpiSTHJIgmq6+rlrNFEDzHCNoNTH9v5WDWtStDqAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: Jul 3 08:13:36 2025 GMT Not After : Jul 10 08:13:36 2025 GMT Subject: CN=68663bb0-6802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:f0:73:8f:51:7c:51:80:59:99:0c:92:51: ef:fb:fe:e6:7d:4b:e8:75:55:7d:c7:78:f6:58:95: 76:24:ee:31:63:62:7e:1d:4a:75:64:fc:59:95:c4: 07:90:d8:89:03:fa:ca:09:29:63:87:69:a4:7e:42: b5:fc:6c:92:1e:ad:5e:33:44:73:c7:df:5d:28:28: fb:f0:89:25:9a:bb:78:a7:ad:03:f7:22:67:2d:c9: d2:b1:4a:5c:6b:bb:00:9c:f3:5b:b6:12:b1:e2:2b: 7a:df:36:2a:d4:0a:0c:a9:b7:c8:02:1c:06:b9:24: bf:5f:b5:10:e2:7a:12:8a:d2:cf:a4:2a:b5:99:a8: 81:f9:d2:8d:85:90:d4:42:d2:06:8e:71:6b:a4:21: 0c:b5:1f:16:46:87:97:26:9a:12:51:7b:13:0b:39: fd:3e:02:50:a8:b3:4a:94:5a:ed:93:ad:9a:81:34: 43:90:cc:3c:d1:70:4c:aa:89:95:73:6f:0a:6e:7f: e3:e1:d9:15:08:4a:40:41:81:9d:18:d5:36:f8:41: 4e:75:db:67:ea:9f:ea:11:66:2d:ca:5f:66:d6:6d: cc:09:1b:16:3a:d5:cc:6a:b9:48:ee:ab:59:82:59: ad:1b:24:c9:b8:7a:dc:5a:e8:2b:15:f9:da:1f:2a: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:43:B5:19:3F:F4:DE:7A:3C:AE:27:A9:A4:22:8A:8A:3E:E9:69:3F X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0d:8d:74:12:76:e5:4a:c8:6d:96:47:5b:a2:e3:2f:2c:22: 1a:12:1d:ba:e3:1e:71:f6:82:ae:cd:b7:2f:46:b8:50:a1:92: e7:62:68:2a:5b:2e:84:69:34:b8:50:18:9c:88:55:d8:c8:b8: f2:43:68:a7:27:62:d4:c2:cf:72:ea:c1:23:93:55:a2:40:15: f6:75:49:0e:07:30:dc:2b:5f:ce:ba:3c:4f:3d:ab:00:db:b5: 88:a3:c3:2a:20:70:df:14:e3:31:3d:b7:d8:0a:ff:7c:41:b7: 0a:26:e4:4d:3c:22:b2:7a:2b:2a:99:10:44:5a:8b:08:14:b9: 5c:6a:fd:f6:bc:bb:cb:f0:22:5c:1d:cb:3f:e2:9d:ec:c9:3d: f3:32:d2:3b:b3:6f:95:9b:59:12:56:52:33:b4:e4:0d:9d:b6: fe:6e:d1:5a:09:6d:db:91:d3:c6:13:12:44:b7:4a:d7:60:c4: 80:6b:a2:f5:b7:35:15:36:89:f4:12:01:d3:56:45:79:d9:45: e1:47:af:09:a1:b5:b1:42:7b:f1:9c:9c:92:ef:fa:c7:73:b4: 49:b2:d6:08:5f:7d:44:3e:38:4e:10:90:cd:cd:0a:be:fe:0a: ea:22:2d:87:45:b3:01:f6:e5:a3:0c:2b:52:4f:07:f2:b6:eb: 1a:61:bf:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTA3MDMwODEzMzZaFw0yNTA3MTAwODEzMzZaMBgxFjAUBgNV BAMTDTY4NjYzYmIwLTY4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKRvBzj1F8UYBZmQySUe/7/uZ9S+h1VX3HePZYlXYk7jFjYn4dSnVk/FmVxAeQ 2IkD+soJKWOHaaR+QrX8bJIerV4zRHPH310oKPvwiSWau3inrQP3ImctydKxSlxr uwCc81u2ErHiK3rfNirUCgypt8gCHAa5JL9ftRDiehKK0s+kKrWZqIH50o2FkNRC 0gaOcWukIQy1HxZGh5cmmhJRexMLOf0+AlCos0qUWu2TrZqBNEOQzDzRcEyqiZVz bwpuf+Ph2RUISkBBgZ0Y1Tb4QU5122fqn+oRZi3KX2bWbcwJGxY61cxquUjuq1mC Wa0bJMm4etxa6CsV+dofKg5DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+kO1GT/0 3no8rieppCKKij7paT8wHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4NjXQSduVKyG2WR1ui4y8sIhoSHbrjHnH2gq7Nty9GuFChkudiaCpb LoRpNLhQGJyIVdjIuPJDaKcnYtTCz3LqwSOTVaJAFfZ1SQ4HMNwrX866PE89qwDb tYijwyogcN8U4zE9t9gK/3xBtwom5E08IrJ6KyqZEERaiwgUuVxq/fa8u8vwIlwd yz/inezJPfMy0juzb5WbWRJWUjO05A2dtv5u0VoJbduR08YTEkS3StdgxIBrovW3 NRU2ifQSAdNWRXnZReFHrwmhtbFCe/GcnJLv+sdztEmy1ghffUQ+OE4QkM3NCr7+ CuoiLYdFswH25aMMK1JPB/K26xphvws= -----END CERTIFICATE-----Generated at Thu Jul 3 11:04:33 2025 by rpki-client