$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: xeQJE4s2fC0OpFmJAeCXVX2OOZ0NxyV3oPALdbQ/ycU= Subject key identifier: 98:6C:8B:A2:54:B6:87:BB:05:34:D1:EE:0F:89:8D:F8:E1:AA:61:B2 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 0517 Signing time: Fri 30 May 2025 23:49:35 +0000 Manifest this update: Fri 30 May 2025 23:49:35 +0000 Manifest next update: Fri 06 Jun 2025 23:49:35 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: kvjAekjWikO7HsuZfqiY1iGOYCU8REecZfuc2UxqWoY=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: May 30 23:49:35 2025 GMT Not After : Jun 6 23:49:35 2025 GMT Subject: CN=683a440f-4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:1e:ae:81:64:38:89:af:d9:26:62:cb:1a: 72:d8:35:8f:0a:4f:15:a0:d8:8e:b8:c3:b4:2a:1a: 63:c0:ce:0c:7c:85:3c:84:27:a5:c1:bd:23:b8:d2: fc:d3:a7:1c:43:13:bf:3f:d5:29:4e:72:ae:d9:ed: 0a:48:57:3d:55:3e:81:df:87:c4:ce:1b:50:4c:58: f5:38:d6:4b:b0:67:26:0a:dd:90:f3:af:20:65:f9: d1:f1:02:5c:40:9a:47:65:50:66:2f:78:99:50:ba: 99:23:c1:71:09:f7:b7:ec:4e:22:e9:98:8f:9c:35: 42:c2:77:20:71:e8:f7:58:d7:ab:56:3d:63:0d:c4: 2d:cc:1b:bb:82:48:a0:7e:c9:48:41:3b:b5:74:e8: b0:a6:ca:21:22:c6:34:9c:0b:83:6f:95:20:d4:8d: 5f:1b:e4:83:a1:fc:a9:99:9c:5a:22:fc:57:81:11: c5:df:4d:f5:d3:69:3b:46:1a:dd:a6:23:37:04:a6: 02:e1:53:cd:95:52:bb:ef:a0:41:45:51:a3:e4:84: b3:a1:4a:38:56:57:75:d3:f9:ab:90:89:ff:27:9d: 6c:f4:f7:e2:ff:b8:48:eb:25:fa:6c:a8:03:e6:c7: f9:6c:fc:4b:e8:28:2e:af:2d:40:98:88:77:99:a9: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:8B:A2:54:B6:87:BB:05:34:D1:EE:0F:89:8D:F8:E1:AA:61:B2 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:d7:5d:f5:db:76:7e:7a:20:a4:cd:7e:ba:12:08:d2:2c:31: 95:a7:9a:1e:5f:ee:63:1f:5f:42:c8:90:90:c9:5c:f1:07:c4: 87:0f:72:03:84:2e:5a:da:07:10:ea:a6:71:97:6a:b0:22:57: a5:df:43:b4:75:78:81:15:27:28:bf:d9:88:ed:57:9b:88:15: fa:0c:8b:e5:d9:7e:d6:c3:66:59:11:70:c2:61:03:13:29:16: 76:f2:db:91:b0:07:9c:b3:82:0d:9c:1e:10:75:5b:5c:0d:9d: c4:51:51:c0:ea:00:c6:48:03:35:ce:45:42:ab:c2:ac:82:3b: 9e:27:0f:a2:7b:63:a6:18:1e:78:7f:02:d8:aa:52:01:2e:3f: f5:e0:eb:44:75:12:cb:49:fb:fb:3c:fc:85:52:73:48:aa:ff: 82:ec:5b:05:09:94:31:14:f3:8d:be:8b:56:b2:8e:fd:a6:de: fe:8a:67:61:52:36:f9:11:ad:6c:5d:e8:c7:bf:37:f1:4a:ac: 51:e5:1d:57:cc:a2:f6:70:92:b9:78:b5:3e:9f:7a:56:47:64: 11:65:b2:88:66:43:a0:e3:48:2c:ec:41:60:b9:cd:66:96:06: 0f:15:88:a8:27:c4:03:eb:a8:10:6e:42:8d:a6:74:66:04:fb: 9d:2e:b2:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUwNTMwMjM0OTM1WhcNMjUwNjA2MjM0OTM1WjAYMRYwFAYD VQQDEw02ODNhNDQwZi00YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YIeroFkOImv2SZiyxpy2DWPCk8VoNiOuMO0KhpjwM4MfIU8hCelwb0juNL8 06ccQxO/P9UpTnKu2e0KSFc9VT6B34fEzhtQTFj1ONZLsGcmCt2Q868gZfnR8QJc QJpHZVBmL3iZULqZI8FxCfe37E4i6ZiPnDVCwncgcej3WNerVj1jDcQtzBu7gkig fslIQTu1dOiwpsohIsY0nAuDb5Ug1I1fG+SDofypmZxaIvxXgRHF303102k7Rhrd piM3BKYC4VPNlVK776BBRVGj5ISzoUo4Vld10/mrkIn/J51s9Pfi/7hI6yX6bKgD 5sf5bPxL6Cgury1AmIh3makbuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhsi6JU toe7BTTR7g+JjfjhqmGyMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX113123Z+eiCkzX66EgjSLDGVp5oeX+5jH19CyJCQyVzxB8SHD3ID hC5a2gcQ6qZxl2qwIlel30O0dXiBFScov9mI7VebiBX6DIvl2X7Ww2ZZEXDCYQMT KRZ28tuRsAecs4INnB4QdVtcDZ3EUVHA6gDGSAM1zkVCq8KsgjueJw+ie2OmGB54 fwLYqlIBLj/14OtEdRLLSfv7PPyFUnNIqv+C7FsFCZQxFPONvotWso79pt7+imdh Ujb5Ea1sXejHvzfxSqxR5R1XzKL2cJK5eLU+n3pWR2QRZbKIZkOg40gs7EFguc1m lgYPFYioJ8QD66gQbkKNpnRmBPudLrIp -----END CERTIFICATE-----Generated at Sat May 31 16:50:42 2025 by rpki-client