$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: kzXzW/mVkPtfCkG2th9R7VaAryocKXZN2xt6IAaP+Sw= Subject key identifier: 34:D0:0A:D6:25:05:2F:18:84:E2:F9:E0:BA:7B:63:7B:1E:28:8A:5D Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 34B5 Signing time: Sat 31 May 2025 14:45:11 +0000 Manifest this update: Sat 31 May 2025 14:45:10 +0000 Manifest next update: Sat 07 Jun 2025 14:45:10 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: amINdRQwgQRb3NHpiPwQNMnP3mZv+RFSJZJQ3lf9tfA=) 2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: 23SEH6GtkOoGPdeGncTiVPXSvJeVSMOWjmIg/9JChj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: May 31 14:45:10 2025 GMT Not After : Jun 7 14:45:10 2025 GMT Subject: CN=683b15f6-0bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:31:02:2c:38:6f:f3:2f:a2:ce:d6:d7:bb: b4:62:31:81:6f:fe:b3:ae:2e:05:f7:60:4d:81:e4: 28:83:ef:a4:4c:58:90:f1:b2:87:2a:db:54:7f:6a: 3f:28:14:83:91:bc:7b:39:50:d3:d5:ac:5f:71:56: 0d:04:7a:e3:39:e4:c2:16:73:6a:19:6b:ab:14:16: 25:df:b5:5d:76:58:3d:2f:a8:aa:03:7b:f2:2d:d0: e7:60:b9:18:46:bd:f6:26:1a:2c:4f:7c:ce:9d:7c: 83:52:72:be:ec:ef:2e:bd:09:19:6d:df:92:51:54: bf:05:0f:7c:6f:f7:09:97:2a:6f:38:50:fd:13:70: dc:62:b6:77:a5:78:7c:2f:75:1e:d2:31:55:78:dd: 10:8b:bc:8c:6d:ce:21:e0:f7:15:80:e6:c4:fc:44: 7a:71:d9:7a:1a:47:60:ee:2c:92:ea:67:61:df:1d: e7:25:a6:55:43:d5:90:98:46:60:00:7a:43:90:41: 64:8c:b5:09:fc:aa:62:11:77:fc:bc:dc:09:a7:b0: a2:46:d9:ec:1f:83:57:86:a3:cd:e0:29:df:cb:4e: 0e:cf:69:ec:f2:ca:95:d9:a7:57:17:f0:e4:e1:2e: 9d:af:50:2c:ef:1a:46:5e:f2:18:56:16:15:cb:6e: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D0:0A:D6:25:05:2F:18:84:E2:F9:E0:BA:7B:63:7B:1E:28:8A:5D X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b3:f2:0f:05:76:cd:73:e1:5b:b0:73:f5:c7:4c:cd:ea:ea: 02:0f:b6:54:ab:b4:25:f4:00:f3:fe:6a:7b:8e:1f:37:b4:28: 57:bc:ec:47:f9:53:17:2c:cf:10:8c:f1:4a:d1:9c:da:7f:d4: 82:76:57:0f:63:0e:42:3e:49:84:77:a3:00:75:cf:d1:6b:d9: 9c:fd:5c:dc:5b:ad:6c:b2:db:ab:53:e0:2c:ef:68:3c:53:c7: a9:0b:7d:48:2c:d3:b6:1c:cd:4d:48:31:1a:70:1b:35:a0:b7: ad:f8:41:73:96:3e:06:3e:66:a7:2e:e7:a2:32:ef:1b:5f:d1: e0:78:f4:85:bf:f0:7c:ca:2f:dc:b6:bb:bd:a5:73:83:38:94: 62:63:15:5f:e4:3f:b0:95:51:5f:d0:33:5b:3b:56:16:ca:cb: dc:83:cc:c8:d0:bd:a7:8e:7f:eb:25:be:41:07:41:f8:76:4c: 96:1e:44:18:59:ec:79:71:53:ef:54:92:17:aa:9c:af:10:09: 13:bd:93:32:48:72:d8:38:3d:31:13:16:36:8d:32:fd:46:99: 50:fb:53:ba:7d:9c:ae:c4:a3:9d:75:dd:8e:94:dc:1f:68:4d: 26:e7:12:47:9e:9e:c0:50:be:33:37:db:b9:4f:12:bb:d2:2e: 5d:92:2e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwNTMxMTQ0NTEwWhcNMjUwNjA3MTQ0NTEwWjAYMRYwFAYD VQQDEw02ODNiMTVmNi0wYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqoxAiw4b/Mvos7W17u0YjGBb/6zri4F92BNgeQog++kTFiQ8bKHKttUf2o/ KBSDkbx7OVDT1axfcVYNBHrjOeTCFnNqGWurFBYl37Vddlg9L6iqA3vyLdDnYLkY Rr32JhosT3zOnXyDUnK+7O8uvQkZbd+SUVS/BQ98b/cJlypvOFD9E3DcYrZ3pXh8 L3Ue0jFVeN0Qi7yMbc4h4PcVgObE/ER6cdl6Gkdg7iyS6mdh3x3nJaZVQ9WQmEZg AHpDkEFkjLUJ/KpiEXf8vNwJp7CiRtnsH4NXhqPN4Cnfy04Oz2ns8sqV2adXF/Dk 4S6dr1As7xpGXvIYVhYVy27nIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTQCtYl BS8YhOL54Lp7Y3seKIpdMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEs/IPBXbNc+FbsHP1x0zN6uoCD7ZUq7Ql9ADz/mp7jh83tChXvOxH +VMXLM8QjPFK0Zzaf9SCdlcPYw5CPkmEd6MAdc/Ra9mc/VzcW61ssturU+As72g8 U8epC31ILNO2HM1NSDEacBs1oLet+EFzlj4GPmanLueiMu8bX9HgePSFv/B8yi/c tru9pXODOJRiYxVf5D+wlVFf0DNbO1YWysvcg8zI0L2njn/rJb5BB0H4dkyWHkQY Wex5cVPvVJIXqpyvEAkTvZMySHLYOD0xExY2jTL9RplQ+1O6fZyuxKOddd2OlNwf aE0m5xJHnp7AUL4zN9u5TxK70i5dki58 -----END CERTIFICATE-----Generated at Sat May 31 17:32:01 2025 by rpki-client