$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: yKi1mZxWaUVHJlIPO0I4/z1GxSIp/s21ZUDKwJpkJic= Subject key identifier: EF:8B:B3:C0:63:F0:FE:AB:02:67:17:3D:8C:D7:7A:74:FA:49:50:96 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02AC Signing time: Sat 31 May 2025 01:45:46 +0000 Manifest this update: Sat 31 May 2025 01:45:46 +0000 Manifest next update: Sat 07 Jun 2025 01:45:46 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 43XKFm2AIdJc7+ZPn5Ll/laF3+1Bgh2frJORsGAko9c=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: May 31 01:45:46 2025 GMT Not After : Jun 7 01:45:46 2025 GMT Subject: CN=683a5f4a-3fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:63:1d:f9:db:51:2c:1f:74:72:7e:a3:7d: 36:ee:87:60:23:ef:d8:04:97:17:81:df:7a:e7:da: 29:7c:d6:f6:07:e2:ac:d0:ac:9b:6b:09:a7:e5:e1: 68:37:bd:a1:7a:88:a6:eb:81:b4:97:97:27:18:bf: 69:98:0f:6b:5b:4d:f4:62:15:4d:26:99:6c:46:e3: 2e:5b:93:9b:4f:f1:81:12:52:4f:0e:75:19:03:70: 3b:72:52:e1:13:65:16:7e:d0:33:4d:f9:4d:a4:4f: 6a:a6:4d:80:5d:ee:d6:48:80:53:38:d4:cf:30:32: 80:bc:7b:26:47:59:33:c8:ff:8f:28:93:09:ff:e4: 16:00:f9:ad:7d:2f:e9:10:b5:d6:a8:90:56:26:85: 75:7c:8b:a3:6c:2d:99:fb:f5:79:29:cd:b8:af:77: 62:1d:c1:24:fb:e8:32:4e:a3:68:09:01:bc:64:95: 63:37:be:ea:4b:7a:7c:34:70:f6:57:e0:68:ad:b4: 4b:c2:dc:13:33:81:c1:94:e4:36:d9:03:5e:e7:d1: 8e:ea:98:78:ba:85:e9:94:81:fd:db:77:d8:d7:06: 80:00:68:a2:36:b8:5c:53:80:19:bb:dc:38:51:29: 07:11:a9:3c:b8:a8:fd:21:2a:ab:d7:a2:a1:fe:04: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8B:B3:C0:63:F0:FE:AB:02:67:17:3D:8C:D7:7A:74:FA:49:50:96 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8e:c7:31:f6:bf:6d:40:38:5c:76:f5:5b:83:cc:cc:9f:ea: f8:1a:3c:9d:da:4a:fe:19:ba:94:9c:8a:0c:0c:78:3f:34:28: f8:58:06:3e:0b:75:e2:93:5c:c6:b6:e1:be:10:a2:c7:3e:43: d6:aa:d2:55:48:01:9e:fa:d0:b0:64:b3:51:37:37:45:5d:92: 33:8b:c0:93:69:6d:da:1b:44:49:b6:1b:92:c2:f9:2c:fb:f0: 3f:8c:83:53:39:34:94:89:23:9c:73:7e:d7:b3:eb:52:5a:a6: 98:2a:ea:85:27:94:53:ab:80:3a:10:d8:d0:fd:fe:c6:7a:cd: 79:05:42:99:0b:4b:30:63:05:b0:7a:10:c2:94:3b:e4:eb:51: 1d:fb:6a:e9:5f:ba:9b:07:9c:c9:c3:b0:b3:0a:8b:43:15:7a: da:87:b4:0c:66:fb:b7:59:6a:2f:1b:3b:48:92:a3:98:94:53: 9f:3f:53:f4:20:fc:33:2c:48:1e:2b:b1:0c:f7:42:98:d7:d1: e4:33:d7:b7:fe:8b:4c:cd:fc:fa:77:d7:4b:8e:32:f8:33:26: 25:a0:bc:85:57:e1:01:7d:c1:7d:39:03:e2:e7:c6:14:31:b3: 32:a5:51:f6:c5:7f:80:de:04:a1:91:bc:84:fe:4f:19:50:20: 27:55:98:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNTMxMDE0NTQ2WhcNMjUwNjA3MDE0NTQ2WjAYMRYwFAYD VQQDEw02ODNhNWY0YS0zZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4U9jHfnbUSwfdHJ+o3027odgI+/YBJcXgd9659opfNb2B+Ks0Kybawmn5eFo N72heoim64G0l5cnGL9pmA9rW030YhVNJplsRuMuW5ObT/GBElJPDnUZA3A7clLh E2UWftAzTflNpE9qpk2AXe7WSIBTONTPMDKAvHsmR1kzyP+PKJMJ/+QWAPmtfS/p ELXWqJBWJoV1fIujbC2Z+/V5Kc24r3diHcEk++gyTqNoCQG8ZJVjN77qS3p8NHD2 V+BorbRLwtwTM4HBlOQ22QNe59GO6ph4uoXplIH923fY1waAAGiiNrhcU4AZu9w4 USkHEak8uKj9ISqr16Kh/gRKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+Ls8Bj 8P6rAmcXPYzXenT6SVCWMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZjscx9r9tQDhcdvVbg8zMn+r4Gjyd2kr+GbqUnIoMDHg/NCj4WAY+ C3Xik1zGtuG+EKLHPkPWqtJVSAGe+tCwZLNRNzdFXZIzi8CTaW3aG0RJthuSwvks +/A/jINTOTSUiSOcc37Xs+tSWqaYKuqFJ5RTq4A6ENjQ/f7Ges15BUKZC0swYwWw ehDClDvk61Ed+2rpX7qbB5zJw7CzCotDFXrah7QMZvu3WWovGztIkqOYlFOfP1P0 IPwzLEgeK7EM90KY19HkM9e3/otMzfz6d9dLjjL4MyYloLyFV+EBfcF9OQPi58YU MbMypVH2xX+A3gShkbyE/k8ZUCAnVZid -----END CERTIFICATE-----Generated at Sat May 31 16:00:16 2025 by rpki-client