$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: K3k8E1QENqR3MSf5JoHgWB3NoeSG3NETuRra+Ofi7P8= Subject key identifier: 33:4A:D2:61:9A:8D:67:32:B6:B6:37:2E:DF:AA:E7:60:0A:5D:63:9B Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 53 Signing time: Tue 03 Jun 2025 07:05:50 +0000 Manifest this update: Tue 03 Jun 2025 07:05:49 +0000 Manifest next update: Tue 10 Jun 2025 07:05:49 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: KW6zU90sFOONAjQPVSs3R6w4ZHRFStOstrh7o6YpPoE=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Jun 3 07:05:49 2025 GMT Not After : Jun 10 07:05:49 2025 GMT Subject: CN=683e9ecd-5c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:91:cc:b0:e3:2b:9e:e4:8d:3b:54:d3:49: e2:c7:c7:8e:ab:45:44:40:14:40:c1:e6:31:52:7f: 1e:38:d1:e5:51:fa:6d:6e:16:cc:6f:e5:d4:95:ce: d3:06:f3:63:58:65:f6:fb:3c:0e:fa:44:76:48:b3: 37:08:ad:46:e0:dd:4d:1f:38:b6:2f:7d:0d:9a:4b: bb:1a:7d:ae:80:04:81:3d:7b:f4:3e:59:bb:19:48: da:52:bb:46:a5:04:d2:26:a2:f7:8b:70:31:91:36: 59:52:1b:04:d7:61:f9:e3:b8:10:be:65:5a:30:32: 59:f0:9c:16:f9:ed:09:de:f5:f2:4b:2e:ad:09:ff: e2:6d:02:21:05:f7:92:32:c5:67:17:f3:ef:df:81: 5b:84:b0:c0:75:2d:b8:1b:eb:a0:49:b8:bd:25:28: 46:f7:4b:88:55:c0:af:cc:7d:91:e8:fd:91:12:d5: 16:05:4f:ef:1a:20:bc:6e:08:a6:21:66:f9:fb:4e: f8:2f:6b:6b:7b:c1:7b:32:ee:11:63:16:11:3e:ab: 24:dd:56:6c:8a:6f:b1:45:5a:d7:a8:2a:96:eb:38: 0d:28:80:50:b5:7a:21:b6:4b:81:7c:f8:cc:42:0a: eb:6c:69:1d:fb:4a:81:4f:cd:77:7c:8e:b2:98:ff: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:D2:61:9A:8D:67:32:B6:B6:37:2E:DF:AA:E7:60:0A:5D:63:9B X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:92:38:e0:97:59:2c:04:3b:0c:8c:a8:a4:7a:2a:4c:68:ce: 76:dc:8a:2d:31:f2:a1:32:d7:ff:90:60:40:2c:e9:91:00:ae: f4:b4:6a:d7:b9:43:56:38:16:4e:07:0d:6b:c1:41:b7:cd:11: a8:8c:e4:8d:fc:d7:4d:00:41:21:88:0e:b9:44:12:fd:12:8e: 9e:3c:c0:91:fb:e7:c3:97:76:c8:be:93:38:33:e6:02:5d:e8: 3b:52:19:af:5b:e6:17:0c:18:ba:b7:e9:f7:21:cf:56:f0:e8: d3:0f:a1:02:09:99:60:78:cd:0e:09:7a:54:65:ad:c7:ee:85: d9:f8:d0:98:8c:d8:be:9b:a6:fc:14:b5:11:5f:fd:d8:1e:4f: 98:23:38:76:bc:7f:e5:2c:1a:3a:3a:4c:39:b0:9e:56:18:27: 80:62:84:cd:17:23:1c:7f:f7:ed:62:7a:62:8c:5c:3e:19:1a: ea:18:2d:71:c3:80:33:bb:a8:5e:20:ab:34:0a:e4:9b:dc:b7: 6d:b2:fd:47:b3:d4:9c:42:35:54:c9:22:35:7d:16:20:ad:d4: 80:5f:66:61:2c:f8:b9:9d:e7:27:6d:a7:38:24:dd:3f:94:b2: 89:dc:16:8a:5b:c1:9f:71:ae:74:07:ec:c8:1c:75:88:f2:e4: fe:01:f3:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA2MDMwNzA1NDlaFw0yNTA2MTAwNzA1NDlaMBgxFjAUBgNV BAMTDTY4M2U5ZWNkLTVjODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWr5HMsOMrnuSNO1TTSeLHx46rRURAFEDB5jFSfx440eVR+m1uFsxv5dSVztMG 82NYZfb7PA76RHZIszcIrUbg3U0fOLYvfQ2aS7safa6ABIE9e/Q+WbsZSNpSu0al BNImoveLcDGRNllSGwTXYfnjuBC+ZVowMlnwnBb57Qne9fJLLq0J/+JtAiEF95Iy xWcX8+/fgVuEsMB1Lbgb66BJuL0lKEb3S4hVwK/MfZHo/ZES1RYFT+8aILxuCKYh Zvn7Tvgva2t7wXsy7hFjFhE+qyTdVmyKb7FFWteoKpbrOA0ogFC1eiG2S4F8+MxC CutsaR37SoFPzXd8jrKY/1kzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUM0rSYZqN ZzK2tjcu36rnYApdY5swHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGSOOCXWSwEOwyMqKR6Kkxoznbcii0x8qEy1/+QYEAs6ZEArvS0ate5 Q1Y4Fk4HDWvBQbfNEaiM5I38100AQSGIDrlEEv0Sjp48wJH758OXdsi+kzgz5gJd 6DtSGa9b5hcMGLq36fchz1bw6NMPoQIJmWB4zQ4JelRlrcfuhdn40JiM2L6bpvwU tRFf/dgeT5gjOHa8f+UsGjo6TDmwnlYYJ4BihM0XIxx/9+1iemKMXD4ZGuoYLXHD gDO7qF4gqzQK5Jvct22y/Uez1JxCNVTJIjV9FiCt1IBfZmEs+Lmd5ydtpzgk3T+U soncFopbwZ9xrnQH7MgcdYjy5P4B8xg= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:10 2025 by rpki-client