$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: rh6ro1HuukyFkwa5wUjWYFC4PO9Q0GcZy5+d1e3H5Eg= Subject key identifier: F3:75:6C:E1:AF:B6:65:5B:3E:FF:81:08:1F:D9:B9:40:7B:B0:D3:7F Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 0780 Signing time: Fri 30 May 2025 21:43:00 +0000 Manifest this update: Fri 30 May 2025 21:43:00 +0000 Manifest next update: Fri 06 Jun 2025 21:43:00 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: gfK5QRrpFZ+OdJR+7AubaYmdskR9sBZktqRmcx7EZc8=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: May 30 21:43:00 2025 GMT Not After : Jun 6 21:43:00 2025 GMT Subject: CN=683a2664-fb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:90:f5:53:31:7c:4a:94:8b:27:99:96:fa: 4d:a7:dc:77:58:ec:76:a5:58:87:a2:a8:6b:09:be: 31:c2:3f:93:f2:7d:8b:6c:16:31:0d:e2:f8:1d:98: 84:0e:c2:cb:9c:65:ac:43:0c:64:53:af:59:d6:7d: 3a:b8:1d:59:b0:7b:25:da:9d:67:ca:d7:96:fe:eb: b3:e3:e5:46:bf:55:7f:3a:30:d3:84:fd:88:ee:c1: da:be:e4:5f:96:54:f2:e2:c9:3d:fa:37:fa:3d:8d: 8d:ba:c1:21:ab:77:6a:3b:71:b0:e4:51:7d:a3:ec: 6a:b0:c1:bd:a9:bc:0f:c3:5d:a5:10:ec:76:ce:f0: db:f1:2f:dd:05:4f:03:8d:d3:e9:1e:28:64:5b:ae: 42:e3:5e:ec:f4:4d:2b:30:60:b0:17:d8:6a:69:17: ba:7e:d7:b5:2e:e2:62:d2:52:7a:38:b7:82:6a:86: d9:90:3c:90:d5:fc:11:4b:ac:e6:8c:48:85:9b:9c: b5:ee:51:2f:80:6e:21:96:99:30:25:c4:f0:25:cc: bc:c9:45:c1:eb:c9:d3:23:10:fb:06:5c:03:26:ae: 51:8e:5d:a2:b1:e7:d2:c9:0e:3c:2f:6b:fb:37:ab: e9:d5:77:49:42:b2:8b:84:d0:78:55:59:02:b7:5d: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:75:6C:E1:AF:B6:65:5B:3E:FF:81:08:1F:D9:B9:40:7B:B0:D3:7F X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fe:64:ad:1f:d5:e3:b2:a1:a1:d0:a7:69:e8:5a:01:d5:4a: 68:dd:4c:ab:e5:9e:7a:70:c9:cf:af:cd:bf:72:1c:dc:8b:b7: 2c:4c:e7:a1:88:ef:91:64:66:4c:ac:c2:78:7a:73:77:5b:9d: bc:00:6e:9c:03:7b:61:9b:a8:5d:3b:33:f7:c2:5a:2a:86:43: 22:fd:8b:2d:e3:77:e1:01:6c:c9:5d:f4:22:49:38:77:9c:f7: 19:4a:33:a0:41:b1:ff:42:3d:1a:8f:8d:1d:bf:3f:5f:7f:c2: bd:d4:5d:88:36:4c:01:f0:c5:c0:c8:b2:c8:6a:9b:e7:0e:80: 9d:48:bf:d6:12:1f:77:a0:68:79:2d:aa:92:0b:fd:c6:fa:03: f1:b8:32:39:aa:96:c9:0e:3c:e6:98:65:12:3c:d8:ff:7f:8a: ee:59:18:c4:fd:69:25:4e:02:96:af:a0:6f:88:12:e2:e1:eb: 85:14:18:4b:2b:bc:15:75:78:1f:bf:8d:4a:3f:ad:f3:5c:84: 86:5f:46:26:5a:b1:0d:5a:7e:51:bb:60:63:bf:e0:de:a9:06: 22:83:f4:e6:c6:77:8b:3d:75:61:7f:29:e7:46:ac:b5:12:9c: c4:80:66:b9:8d:57:d0:c0:47:ba:56:d0:d7:50:41:ff:43:fa: 3b:50:0e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNTMwMjE0MzAwWhcNMjUwNjA2MjE0MzAwWjAYMRYwFAYD VQQDEw02ODNhMjY2NC1mYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O2Q9VMxfEqUiyeZlvpNp9x3WOx2pViHoqhrCb4xwj+T8n2LbBYxDeL4HZiE DsLLnGWsQwxkU69Z1n06uB1ZsHsl2p1nyteW/uuz4+VGv1V/OjDThP2I7sHavuRf llTy4sk9+jf6PY2NusEhq3dqO3Gw5FF9o+xqsMG9qbwPw12lEOx2zvDb8S/dBU8D jdPpHihkW65C417s9E0rMGCwF9hqaRe6fte1LuJi0lJ6OLeCaobZkDyQ1fwRS6zm jEiFm5y17lEvgG4hlpkwJcTwJcy8yUXB68nTIxD7BlwDJq5Rjl2isefSyQ48L2v7 N6vp1XdJQrKLhNB4VVkCt11s+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN1bOGv tmVbPv+BCB/ZuUB7sNN/MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ/mStH9XjsqGh0Kdp6FoB1Upo3Uyr5Z56cMnPr82/chzci7csTOeh iO+RZGZMrMJ4enN3W528AG6cA3thm6hdOzP3wloqhkMi/Yst43fhAWzJXfQiSTh3 nPcZSjOgQbH/Qj0aj40dvz9ff8K91F2INkwB8MXAyLLIapvnDoCdSL/WEh93oGh5 LaqSC/3G+gPxuDI5qpbJDjzmmGUSPNj/f4ruWRjE/WklTgKWr6BviBLi4euFFBhL K7wVdXgfv41KP63zXISGX0YmWrENWn5Ru2Bjv+DeqQYig/TmxneLPXVhfynnRqy1 EpzEgGa5jVfQwEe6VtDXUEH/Q/o7UA4a -----END CERTIFICATE-----Generated at Sat May 31 15:31:49 2025 by rpki-client