$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: s1HFkOtN0XL72xzKhWo5DESThip3i0H19LA0wUwxnq4= Subject key identifier: CA:35:EB:AE:76:D9:FA:B0:20:24:02:03:86:15:1A:FE:AF:EC:31:5E Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C40 Signing time: Fri 04 Apr 2025 18:58:25 +0000 Manifest this update: Fri 04 Apr 2025 18:58:24 +0000 Manifest next update: Fri 11 Apr 2025 18:58:24 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: iDlc3+BC4mXfM/q+9f1QRTrCEUa9CuxN7VwHsTpARIc=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC Validity Not Before: Apr 4 18:58:24 2025 GMT Not After : Apr 11 18:58:24 2025 GMT Subject: CN=67f02bd1-9a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:ab:4b:7b:9c:ba:94:c0:5f:de:74:3b:bf: 58:99:1d:97:bc:38:db:c4:4e:f0:ca:a1:72:c2:42: a6:6f:86:40:7f:5f:34:00:1d:08:1e:b7:52:5e:9e: 28:44:3f:59:02:c6:f0:5c:ef:64:a2:6e:ec:35:f5: f3:32:c2:94:32:d8:a5:b1:c0:e9:b1:c0:8f:ee:99: 98:21:1c:ae:05:85:b9:47:9a:d0:92:f4:aa:42:fd: 0a:8b:0d:21:5c:98:fa:fe:78:0f:93:c8:c7:4f:6b: d4:44:6e:f9:46:e7:2b:0c:d7:cb:0b:91:e0:48:26: 6e:f0:ed:1a:e2:04:e2:3c:cc:86:48:e4:72:9c:67: 4d:b7:e7:54:bf:6a:17:f7:c9:c5:73:c9:ac:51:58: 3b:aa:8b:a2:8e:af:04:2a:93:24:fd:93:84:0e:5f: 22:cb:f9:33:3d:35:da:10:9e:57:39:99:e9:b0:9e: 71:04:2f:3d:15:98:11:d2:0c:79:51:f6:e8:18:27: 87:07:82:c2:2e:56:4b:76:40:30:88:ad:15:66:9c: af:74:1b:79:7f:2c:ae:d0:dd:02:b9:f2:5f:4a:af: f3:da:33:eb:ae:b4:62:19:09:00:91:1b:6c:84:f6: 76:95:7e:8f:70:78:bb:b6:57:84:60:9e:51:d8:6e: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:35:EB:AE:76:D9:FA:B0:20:24:02:03:86:15:1A:FE:AF:EC:31:5E X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:92:bb:df:0c:ab:4e:b1:1a:ed:1f:11:80:d4:7c:b1:76:ac: 50:52:59:fb:8b:98:3b:06:a2:85:5e:0d:84:10:3c:bf:20:af: b5:a8:cf:0f:0e:80:ab:e9:2c:69:7e:04:18:bb:05:12:2e:bb: 48:34:6a:6a:da:ad:71:9f:00:42:3c:eb:a8:fc:4b:db:4c:3e: 89:d2:68:b2:73:27:af:e9:4c:a4:84:b0:15:24:26:c8:04:df: c1:c9:2e:d5:6e:3c:26:c5:d1:f1:56:0a:ef:4b:9a:9c:7c:58: c4:59:08:b7:00:f2:a1:e8:b8:ba:76:b6:05:8a:57:93:96:7d: cb:a7:8a:0d:c7:71:94:ca:53:bd:fb:d9:03:2c:12:00:ab:d6: 1e:0e:29:67:03:bc:6c:67:4d:07:db:9a:cf:66:af:81:af:82: bd:9d:e4:21:ed:e9:ab:5d:01:36:01:3c:8c:d8:db:bd:b6:44: 9c:b2:61:c8:81:8f:b3:61:1e:fc:76:bb:c9:bc:59:7c:c7:c7: 06:35:23:82:64:d6:46:39:a1:6b:20:0b:3a:8d:fa:22:e0:1f: 78:ba:be:e4:79:6c:55:9c:f9:26:78:63:e8:06:97:5b:c0:4e: 7d:fd:85:e8:3f:ca:e2:9f:1d:99:35:02:7e:ca:22:87:26:da: 36:c4:fd:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwNDA0MTg1ODI0WhcNMjUwNDExMTg1ODI0WjAYMRYwFAYD VQQDEw02N2YwMmJkMS05YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRurS3ucupTAX950O79YmR2XvDjbxE7wyqFywkKmb4ZAf180AB0IHrdSXp4o RD9ZAsbwXO9kom7sNfXzMsKUMtilscDpscCP7pmYIRyuBYW5R5rQkvSqQv0Kiw0h XJj6/ngPk8jHT2vURG75RucrDNfLC5HgSCZu8O0a4gTiPMyGSORynGdNt+dUv2oX 98nFc8msUVg7qouijq8EKpMk/ZOEDl8iy/kzPTXaEJ5XOZnpsJ5xBC89FZgR0gx5 UfboGCeHB4LCLlZLdkAwiK0VZpyvdBt5fyyu0N0CufJfSq/z2jPrrrRiGQkAkRts hPZ2lX6PcHi7tleEYJ5R2G41kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo16652 2fqwICQCA4YVGv6v7DFeMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGkrvfDKtOsRrtHxGA1HyxdqxQUln7i5g7BqKFXg2EEDy/IK+1qM8P DoCr6SxpfgQYuwUSLrtINGpq2q1xnwBCPOuo/EvbTD6J0miycyev6UykhLAVJCbI BN/ByS7VbjwmxdHxVgrvS5qcfFjEWQi3APKh6Li6drYFileTln3Lp4oNx3GUylO9 +9kDLBIAq9YeDilnA7xsZ00H25rPZq+Br4K9neQh7emrXQE2ATyM2Nu9tkScsmHI gY+zYR78drvJvFl8x8cGNSOCZNZGOaFrIAs6jfoi4B94ur7keWxVnPkmeGPoBpdb wE59/YXoP8rinx2ZNQJ+yiKHJto2xP10 -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:45 2025 by rpki-client