$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: ddnvds/dckpC1fxgy8HEPkEeA/yfc1SQ8NWMv65WXSM= Subject key identifier: 66:F7:97:21:AE:71:E2:70:C2:06:96:5B:1B:9E:9A:25:B2:43:CD:AF Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C5B Signing time: Fri 30 May 2025 18:45:16 +0000 Manifest this update: Fri 30 May 2025 18:45:15 +0000 Manifest next update: Fri 06 Jun 2025 18:45:15 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: t/CgJ33if8k5OqEkLwL1SHV0Y4REo1YNOFjLQpjUvTE=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: May 30 18:45:15 2025 GMT Not After : Jun 6 18:45:15 2025 GMT Subject: CN=6839fcbb-7cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:4f:da:fd:32:23:0f:50:aa:ef:60:9f:5c: 87:1f:7a:ae:5e:7c:e2:07:33:ba:54:ae:82:5d:a7: 6c:26:63:e1:98:ee:47:10:50:b0:9c:4c:d6:44:d4: 94:5f:d3:2d:ab:fd:fa:53:8a:e2:ef:39:4f:5d:6a: 6b:a0:db:bc:51:d8:64:ff:f5:a6:83:b0:e5:3a:7f: a3:9e:18:b7:17:d8:ac:e0:a4:c9:5f:a8:a6:3f:83: dc:8e:3a:16:15:1d:65:a9:ab:ac:36:3a:b1:71:ae: d3:8f:92:ce:28:6b:5c:d0:14:ed:93:49:7f:cd:e4: be:c4:23:00:b1:e2:c1:74:ec:4d:8b:41:53:44:59: 55:2b:82:cc:b4:4e:d5:e4:25:90:45:3a:3e:25:b5: f0:4a:09:64:58:28:d3:67:12:f0:46:57:3b:af:77: 41:36:ea:8b:d3:6b:82:b3:d4:0e:50:93:ad:33:6b: 7a:11:a0:fb:05:5e:b5:36:84:d2:75:e8:eb:07:4b: a0:33:6d:bd:ee:88:6d:9d:d6:09:cc:d6:c3:60:ac: 39:65:97:e4:91:16:88:67:bc:9f:f8:ca:6f:2e:7d: c4:f5:51:ff:a1:fd:8a:9e:45:02:32:08:41:5e:d5: 2e:e3:51:86:40:f8:e6:d3:11:01:6e:fb:27:81:fa: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F7:97:21:AE:71:E2:70:C2:06:96:5B:1B:9E:9A:25:B2:43:CD:AF X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f1:d4:aa:17:d9:66:e3:07:4d:1a:8e:fc:7a:39:bb:67:c2: 15:37:68:d7:55:e2:2f:62:3a:cd:d0:80:7f:33:eb:21:73:24: 0f:1a:41:0a:31:a5:3e:e5:41:7d:dd:3f:7d:e4:12:cb:f1:07: e1:14:b4:dc:39:eb:b6:e7:a4:93:de:4a:5a:09:62:d3:5e:bf: a8:f6:68:52:c5:67:5a:6b:80:af:a7:78:b1:dc:a4:18:5d:22: 6d:ff:ae:3e:7b:9a:8b:94:35:9b:c7:79:8a:03:83:f3:6d:8a: 86:8e:47:b2:3e:0c:35:47:aa:f2:72:57:50:91:af:9f:5b:e6: 55:c8:b2:39:31:e2:e3:56:fd:9e:59:3a:20:dd:c1:18:21:f5: 90:88:34:2a:74:6f:e8:e7:6e:90:5c:2d:26:96:c0:26:ab:19: b0:e9:e3:96:de:cf:2a:48:14:9c:60:a6:6f:47:24:c6:33:1d: 6d:90:38:b7:ff:eb:dc:1a:44:7d:30:a1:17:93:ba:44:d2:da: 46:1b:ae:86:e5:18:25:d3:b3:55:d7:83:82:be:72:d0:e6:cd: 70:9c:3c:d4:cb:0d:25:d1:19:64:0b:c5:45:e6:09:3b:ce:5e: 07:0c:43:f9:40:e5:49:ce:0c:20:1c:63:e2:d7:3a:77:ea:0c: fd:ff:d7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwNTMwMTg0NTE1WhcNMjUwNjA2MTg0NTE1WjAYMRYwFAYD VQQDEw02ODM5ZmNiYi03Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq5P2v0yIw9Qqu9gn1yHH3quXnziBzO6VK6CXadsJmPhmO5HEFCwnEzWRNSU X9Mtq/36U4ri7zlPXWproNu8Udhk//Wmg7DlOn+jnhi3F9is4KTJX6imP4PcjjoW FR1lqausNjqxca7Tj5LOKGtc0BTtk0l/zeS+xCMAseLBdOxNi0FTRFlVK4LMtE7V 5CWQRTo+JbXwSglkWCjTZxLwRlc7r3dBNuqL02uCs9QOUJOtM2t6EaD7BV61NoTS dejrB0ugM2297ohtndYJzNbDYKw5ZZfkkRaIZ7yf+MpvLn3E9VH/of2KnkUCMghB XtUu41GGQPjm0xEBbvsngfoduwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb3lyGu ceJwwgaWWxuemiWyQ82vMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG8dSqF9lm4wdNGo78ejm7Z8IVN2jXVeIvYjrN0IB/M+shcyQPGkEK MaU+5UF93T995BLL8QfhFLTcOeu256ST3kpaCWLTXr+o9mhSxWdaa4Cvp3ix3KQY XSJt/64+e5qLlDWbx3mKA4PzbYqGjkeyPgw1R6rycldQka+fW+ZVyLI5MeLjVv2e WTog3cEYIfWQiDQqdG/o526QXC0mlsAmqxmw6eOW3s8qSBScYKZvRyTGMx1tkDi3 /+vcGkR9MKEXk7pE0tpGG66G5Rgl07NV14OCvnLQ5s1wnDzUyw0l0RlkC8VF5gk7 zl4HDEP5QOVJzgwgHGPi1zp36gz9/9ee -----END CERTIFICATE-----Generated at Sat May 31 16:47:41 2025 by rpki-client