$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: vmyUOL18ic0ApwN4cfYYy+V3fAcVWRt/nrqCgPIlsmQ= Subject key identifier: FA:27:81:37:F8:5D:FD:42:7C:7B:26:1D:27:A6:FE:21:9A:03:D1:F0 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 07E1 Signing time: Fri 18 Apr 2025 21:04:30 +0000 Manifest this update: Fri 18 Apr 2025 21:04:29 +0000 Manifest next update: Fri 25 Apr 2025 21:04:29 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: 4VWDftaYq2+BLCLWNowR7EP0wPdQdh/nB8/KV2DJiEk=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: b+h/ppjl5OqZ84YHWzvHgFGwffNA/fcx3GbK/0z0P+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 21:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Apr 18 21:04:29 2025 GMT Not After : Apr 25 21:04:29 2025 GMT Subject: CN=6802be5e-003b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:2b:34:ce:fa:ec:6e:e5:3c:10:94:33:73: 6b:f1:21:ec:1a:37:f3:f9:6d:3c:d3:d2:0d:a0:27: 27:f5:42:11:1c:04:0a:54:c3:70:68:99:e1:b7:15: 89:3d:d2:90:a4:66:e1:6e:81:b8:84:fc:4d:d6:31: ed:cd:d2:93:3a:6d:ba:36:48:ef:4b:23:78:05:25: 8d:be:f6:e5:33:7a:d0:bd:28:3f:ca:cd:c0:d9:77: b0:b4:83:59:44:c3:9d:bf:e4:6e:7a:3e:27:ec:97: 6e:e1:f0:fc:72:f2:05:68:70:c5:7b:57:c7:57:66: 88:5d:29:96:1b:40:15:c7:4b:c4:5e:82:a7:ac:60: 57:21:5d:cf:f2:fe:56:72:78:e0:9c:da:95:87:1f: af:2e:db:e4:88:02:e7:7f:0c:9a:f7:8b:3e:14:17: f8:ab:18:ab:13:ab:ad:46:d1:84:75:db:31:09:c6: d1:d9:82:75:b9:00:88:ce:e7:32:fd:59:3b:26:2e: bf:ed:65:74:5b:04:1f:98:66:33:ff:48:df:98:03: e4:6f:ba:d1:dd:a9:a1:39:bb:1f:bd:08:85:10:26: 68:c3:af:03:ad:1b:99:14:aa:d4:cc:fc:dc:46:0d: e0:11:6a:f5:48:ee:0c:76:0e:2f:3a:5d:dc:fc:e5: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:81:37:F8:5D:FD:42:7C:7B:26:1D:27:A6:FE:21:9A:03:D1:F0 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1a:12:03:9d:0f:32:b9:8b:76:66:a2:f7:3b:05:c4:ee:8d: 69:f6:b7:12:9d:f5:ba:42:01:ba:58:cb:ec:f1:1c:df:a5:68: 6b:3a:7b:f1:9b:af:56:7f:f5:9e:9b:4b:69:05:bd:4f:22:9d: b1:ac:c5:43:37:de:b8:52:ac:27:4d:f0:bd:7a:f0:7c:7e:a9: 9f:78:c2:ec:b2:d8:34:64:2d:ed:cf:4d:c8:91:5c:88:9e:20: 48:98:17:18:db:bb:43:e8:9a:94:e5:59:9e:dd:f7:f8:f1:15: 21:a1:dc:6a:58:12:21:8a:1f:34:09:4c:99:49:6a:82:c2:54: cc:36:93:25:93:d5:d3:f2:fa:46:cb:28:cb:89:93:8a:36:8d: 4f:92:7d:2b:f0:73:e5:42:68:66:6d:91:75:41:2d:c2:7c:5a: 88:39:b6:e2:87:f4:5d:f8:9d:b0:40:4d:b5:30:fb:48:6c:28: 0d:b6:5e:1c:37:c4:69:0d:f5:b4:4d:31:31:eb:3d:2a:6d:5e: e3:eb:1a:68:d3:31:b6:cc:8a:49:83:a9:10:86:8a:4a:13:06: ca:53:9b:ab:c8:a8:f9:ef:2e:46:9b:bb:72:eb:ee:b3:b6:84: fc:50:06:4a:ae:a4:ce:92:a0:a4:11:7b:72:df:ad:84:b2:81: fd:df:5f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwNDE4MjEwNDI5WhcNMjUwNDI1MjEwNDI5WjAYMRYwFAYD VQQDEw02ODAyYmU1ZS0wMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G0rNM767G7lPBCUM3Nr8SHsGjfz+W0809INoCcn9UIRHAQKVMNwaJnhtxWJ PdKQpGbhboG4hPxN1jHtzdKTOm26NkjvSyN4BSWNvvblM3rQvSg/ys3A2XewtINZ RMOdv+Ruej4n7Jdu4fD8cvIFaHDFe1fHV2aIXSmWG0AVx0vEXoKnrGBXIV3P8v5W cnjgnNqVhx+vLtvkiALnfwya94s+FBf4qxirE6utRtGEddsxCcbR2YJ1uQCIzucy /Vk7Ji6/7WV0WwQfmGYz/0jfmAPkb7rR3amhObsfvQiFECZow68DrRuZFKrUzPzc Rg3gEWr1SO4Mdg4vOl3c/OWqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPongTf4 Xf1CfHsmHSem/iGaA9HwMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjGhIDnQ8yuYt2ZqL3OwXE7o1p9rcSnfW6QgG6WMvs8RzfpWhrOnvx m69Wf/Wem0tpBb1PIp2xrMVDN964UqwnTfC9evB8fqmfeMLsstg0ZC3tz03IkVyI niBImBcY27tD6JqU5Vme3ff48RUhodxqWBIhih80CUyZSWqCwlTMNpMlk9XT8vpG yyjLiZOKNo1Pkn0r8HPlQmhmbZF1QS3CfFqIObbih/Rd+J2wQE21MPtIbCgNtl4c N8RpDfW0TTEx6z0qbV7j6xpo0zG2zIpJg6kQhopKEwbKU5uryKj57y5Gm7ty6+6z toT8UAZKrqTOkqCkEXty362EsoH931+6 -----END CERTIFICATE-----Generated at Sat Apr 19 08:01:02 2025 by rpki-client