$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json) Hash identifier: DbjFItecg2zrwI6/YmV9IwjlMNQKJJLVg3Yl7wJakQ0= Subject key identifier: 8A:EC:B4:4D:87:15:F1:5D:CA:0A:61:B5:6B:DC:BB:92:DF:6A:5E:F4 Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft Manifest number: 0229 Signing time: Sat 31 May 2025 02:07:18 +0000 Manifest this update: Sat 31 May 2025 02:07:18 +0000 Manifest next update: Sat 07 Jun 2025 02:07:18 +0000 Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: YwUv2SapY9nWYG9gYJcOchzEHYkhhReG6rsyzK45mkc=) 2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: SvlTkdhfP2Vy/Mu+17rsFwHULfYPp5POSAbZ7IEAOKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Validity Not Before: May 31 02:07:18 2025 GMT Not After : Jun 7 02:07:18 2025 GMT Subject: CN=683a6456-651f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:0f:16:af:45:04:67:d9:4c:7d:c9:1f:af: 84:22:c7:17:90:9d:6b:9b:dc:93:58:75:c7:2d:89: 8d:ef:bb:f8:da:d7:50:f8:b3:fb:2f:2e:f1:c4:68: 76:6e:d2:95:b0:f1:fd:37:b9:a2:58:8f:9c:cb:b9: a4:31:10:62:5f:c7:e4:cd:f3:49:00:65:09:de:3f: dc:21:3d:e1:1d:32:b0:f5:9c:56:c2:91:38:79:b5: 9c:91:7f:76:eb:dd:0e:72:b6:7d:22:ff:bd:b6:5b: 3b:ac:87:86:6d:b6:ca:47:a3:2b:42:09:ce:70:04: 29:fe:16:78:ef:cf:be:3d:d4:f0:ef:41:76:01:ef: bb:5c:76:5d:c7:a0:65:34:19:71:bc:e8:88:88:8a: 6c:3d:10:e9:3a:2d:24:c6:95:4e:8e:c9:e5:cc:eb: bd:e2:04:1d:42:d4:8c:8a:91:f1:a2:96:92:1d:9d: ac:81:07:33:87:8c:e5:a1:6c:22:a5:db:d3:17:52: 90:dc:50:8b:3b:30:9e:ca:23:36:50:99:85:60:ba: 97:8c:35:ef:9e:16:e1:15:5d:5d:10:9d:0d:56:22: 01:97:f3:46:16:30:10:10:62:6a:8c:2c:5f:a1:e7: 9c:ba:c7:2d:b3:a2:99:22:12:f1:b6:a9:2b:4c:65: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:B4:4D:87:15:F1:5D:CA:0A:61:B5:6B:DC:BB:92:DF:6A:5E:F4 X509v3 Authority Key Identifier: keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:cf:d2:52:7d:c7:a1:a7:1c:9d:eb:ca:91:ff:4f:20:cc: 38:03:c1:26:87:c0:fc:dc:72:ba:54:24:a3:5a:bf:ed:87:15: 0b:d6:a1:7d:35:de:62:46:01:db:b1:2c:f7:a4:06:40:b4:51: 44:63:aa:90:be:a3:73:dc:17:a4:55:8c:dd:68:bd:67:c7:81: 79:18:ce:50:06:95:02:66:23:5c:7e:be:52:f5:1d:7e:6f:f7: 47:77:52:08:78:1d:01:ee:62:56:8b:93:bf:dd:94:7b:38:2f: 1e:51:30:55:f7:d4:b6:5d:59:e3:99:1d:9b:1f:17:e8:d4:04: 17:28:90:7e:bc:bb:03:bd:6e:4a:76:30:9b:65:ad:a5:da:35: 77:b2:eb:44:13:aa:60:1b:9d:60:ff:87:f7:e3:a1:e7:b5:ad: 9a:a7:35:ba:b1:29:1d:0b:44:d1:c2:58:76:29:9e:98:d2:0e: 27:d0:a6:65:7f:a2:37:1c:de:c3:f0:88:1b:d0:5d:b5:1c:68: da:93:9e:f6:d7:53:50:93:76:10:fe:71:41:3c:52:de:3e:7c: 0b:92:50:96:0d:57:50:11:3d:09:1c:2a:d2:a2:8c:2b:25:f8: 8e:85:9b:ab:c5:95:b5:e5:ee:48:bc:d7:20:f7:33:49:b1:bc: 84:3f:d6:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE N0IyNDY2RTUwHhcNMjUwNTMxMDIwNzE4WhcNMjUwNjA3MDIwNzE4WjAYMRYwFAYD VQQDEw02ODNhNjQ1Ni02NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4QPFq9FBGfZTH3JH6+EIscXkJ1rm9yTWHXHLYmN77v42tdQ+LP7Ly7xxGh2 btKVsPH9N7miWI+cy7mkMRBiX8fkzfNJAGUJ3j/cIT3hHTKw9ZxWwpE4ebWckX92 690OcrZ9Iv+9tls7rIeGbbbKR6MrQgnOcAQp/hZ478++PdTw70F2Ae+7XHZdx6Bl NBlxvOiIiIpsPRDpOi0kxpVOjsnlzOu94gQdQtSMipHxopaSHZ2sgQczh4zloWwi pdvTF1KQ3FCLOzCeyiM2UJmFYLqXjDXvnhbhFV1dEJ0NViIBl/NGFjAQEGJqjCxf oeecuscts6KZIhLxtqkrTGURgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrstE2H FfFdygphtWvcu5Lfal70MB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1 SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhM/SUn3HoaccnevKkf9PIMw4A8Emh8D83HK6VCSjWr/thxUL1qF9 Nd5iRgHbsSz3pAZAtFFEY6qQvqNz3BekVYzdaL1nx4F5GM5QBpUCZiNcfr5S9R1+ b/dHd1IIeB0B7mJWi5O/3ZR7OC8eUTBV99S2XVnjmR2bHxfo1AQXKJB+vLsDvW5K djCbZa2l2jV3sutEE6pgG51g/4f346Hnta2apzW6sSkdC0TRwlh2KZ6Y0g4n0KZl f6I3HN7D8Igb0F21HGjak57211NQk3YQ/nFBPFLePnwLklCWDVdQET0JHCrSoowr JfiOhZurxZW15e5IvNcg9zNJsbyEP9Zo -----END CERTIFICATE-----Generated at Sat May 31 17:57:52 2025 by rpki-client