$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: j4h5H6zCGUqZVQ7j3H4TFtUH5m2WEGKFQf29mIB9SJc= Subject key identifier: 04:80:69:E2:64:41:6B:39:1D:6B:81:AC:F0:C9:26:20:90:D7:4C:81 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 0765 Signing time: Fri 04 Apr 2025 21:43:47 +0000 Manifest this update: Fri 04 Apr 2025 21:43:46 +0000 Manifest next update: Fri 11 Apr 2025 21:43:46 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: Gp7gRflzTyTHCh+oyemezLHXaYh5tZuhN7OByjThzFY=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259 Validity Not Before: Apr 4 21:43:46 2025 GMT Not After : Apr 11 21:43:46 2025 GMT Subject: CN=67f05292-05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:d2:c0:09:1b:4e:f4:c6:1c:ed:37:78:e6: 5a:00:d1:52:c0:26:95:60:6b:b7:3c:7e:26:5a:9c: cb:83:77:cc:a9:b6:74:f7:f5:f3:54:ee:f9:a7:c4: 27:a5:f9:2a:0b:08:fe:54:1d:57:38:df:82:8a:50: c4:b3:42:1a:86:30:08:40:2a:c6:8d:c6:8f:36:22: 74:f4:0a:02:44:4e:84:ba:b1:28:22:20:b2:72:0c: b0:e9:fc:83:42:2e:d2:4e:77:eb:db:27:87:89:ea: 51:60:09:05:00:60:80:7a:af:87:4f:7e:73:da:f6: f2:1e:40:cc:b6:6a:74:bd:1d:18:44:43:e9:74:58: cb:00:e2:27:d4:46:e0:f6:bc:ac:da:b1:18:dd:06: ec:e0:33:50:e7:a1:01:6f:a6:e4:88:a3:ec:19:ac: 9b:e3:d6:2c:a8:fa:4b:62:66:9d:c9:a3:53:8b:54: 4a:bd:10:3b:53:87:4d:73:5e:dd:18:ea:f3:8d:1c: 50:0e:3f:08:05:76:1e:85:29:5d:37:16:ec:ba:27: 29:5c:ed:9d:d3:e7:c3:3a:21:bc:a8:67:be:92:ce: 04:64:93:74:da:46:b9:b2:3b:8b:7e:55:59:fd:8a: 1b:8f:7a:a6:f1:55:72:d4:6c:ea:07:21:24:f5:fd: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:69:E2:64:41:6B:39:1D:6B:81:AC:F0:C9:26:20:90:D7:4C:81 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c6:6b:4e:5d:bb:88:ad:13:65:b2:89:08:c7:2e:8c:e3:ac: 80:fb:85:ec:51:a6:cb:fd:4b:9b:a3:19:96:45:31:8f:b1:10: 44:45:90:c3:66:a6:0c:35:d2:9e:16:e9:a2:a6:df:c8:49:81: ca:0e:e0:4b:f2:a2:6a:b8:fe:39:72:02:9f:f8:b8:25:50:00: f7:78:09:d6:e7:3f:9f:9e:f7:78:6c:5c:c4:73:c0:40:1a:2d: 0c:39:e2:e7:05:81:8e:ba:b1:e7:97:93:0e:3f:a7:dc:26:24: 56:44:64:09:e0:8a:ad:98:e2:4a:d9:e2:88:12:fe:6e:12:56: de:fe:9f:55:10:bf:07:ed:ae:82:32:af:d9:93:fd:a4:ff:68: c5:bd:0f:90:0d:69:ee:b2:00:56:1f:2b:b8:7b:7f:cd:2b:fe: e2:ec:2f:f4:ad:03:44:bf:f9:93:50:27:36:58:1b:01:d2:a4: 76:23:ea:94:86:8f:e0:14:dc:60:4e:02:80:ec:2e:97:db:04: 5a:13:36:b9:f7:54:57:e0:15:1b:98:3d:9d:db:5c:eb:e9:b9: a4:02:97:5f:d2:18:25:9b:3d:f4:fa:c8:05:1f:4c:a5:cc:c3: 68:8b:8c:d6:b5:9a:a2:ac:33:a2:4c:a4:5b:16:dc:88:0d:cf: 40:52:2b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNDA0MjE0MzQ2WhcNMjUwNDExMjE0MzQ2WjAYMRYwFAYD VQQDEw02N2YwNTI5Mi0wNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjXSwAkbTvTGHO03eOZaANFSwCaVYGu3PH4mWpzLg3fMqbZ09/XzVO75p8Qn pfkqCwj+VB1XON+CilDEs0IahjAIQCrGjcaPNiJ09AoCRE6EurEoIiCycgyw6fyD Qi7STnfr2yeHiepRYAkFAGCAeq+HT35z2vbyHkDMtmp0vR0YREPpdFjLAOIn1Ebg 9rys2rEY3Qbs4DNQ56EBb6bkiKPsGayb49YsqPpLYmadyaNTi1RKvRA7U4dNc17d GOrzjRxQDj8IBXYehSldNxbsuicpXO2d0+fDOiG8qGe+ks4EZJN02ka5sjuLflVZ /Yobj3qm8VVy1GzqByEk9f3XBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASAaeJk QWs5HWuBrPDJJiCQ10yBMB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1xmtOXbuIrRNlsokIxy6M46yA+4XsUabL/UuboxmWRTGPsRBERZDD ZqYMNdKeFumipt/ISYHKDuBL8qJquP45cgKf+LglUAD3eAnW5z+fnvd4bFzEc8BA Gi0MOeLnBYGOurHnl5MOP6fcJiRWRGQJ4IqtmOJK2eKIEv5uElbe/p9VEL8H7a6C Mq/Zk/2k/2jFvQ+QDWnusgBWHyu4e3/NK/7i7C/0rQNEv/mTUCc2WBsB0qR2I+qU ho/gFNxgTgKA7C6X2wRaEza591RX4BUbmD2d21zr6bmkApdf0hglmz30+sgFH0yl zMNoi4zWtZqirDOiTKRbFtyIDc9AUivV -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:06 2025 by rpki-client