$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: 1nQphXA4uJK0BIV5E49M2yb4RLYdSQj8WbLflSn5Gyg= Subject key identifier: 9D:2E:61:43:D1:BB:DE:54:1B:58:07:3C:AE:72:2C:EA:01:C3:90:DB Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02DF Signing time: Sun 07 Sep 2025 01:49:45 +0000 Manifest this update: Sun 07 Sep 2025 01:49:44 +0000 Manifest next update: Sun 14 Sep 2025 01:49:44 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: sUWPbYjDV4FQIkfBSmN0VhRI0y/wi/J6Eh+6/Hi4M2g=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Sep 7 01:49:44 2025 GMT Not After : Sep 14 01:49:44 2025 GMT Subject: CN=68bce4b9-e94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:45:f4:ae:2e:f4:48:0f:47:91:6c:1a:a8: 2d:c1:93:7a:37:89:f1:68:13:c5:6c:50:f8:47:0a: b3:3c:e2:45:fc:0a:16:d4:67:b8:47:d1:ee:15:64: 0c:f5:34:b5:b6:d8:39:07:ad:b4:bc:70:84:05:0b: db:7f:0f:b9:3c:c1:1d:21:3d:e2:48:8b:5e:8a:5d: be:f3:12:cf:3e:6a:f5:85:74:8a:dd:ac:58:46:62: 1b:4c:42:c0:73:32:99:01:f6:67:59:20:4d:4a:53: 14:13:1d:9a:97:16:b5:59:c3:75:c6:0f:b1:d7:d4: a7:30:6a:2c:33:e2:8b:d5:9c:0b:9d:b6:8c:8a:21: ed:15:ee:ee:19:b4:53:29:79:97:94:cc:6e:b5:8f: 45:9a:06:d1:be:df:4b:fa:df:da:73:3f:14:e5:e2: ff:90:40:f8:30:69:07:eb:32:16:57:7f:88:cd:ee: 08:87:72:2e:eb:3d:09:f1:f7:87:61:d5:22:7b:54: 67:70:a0:1b:59:39:72:f3:b7:e1:fe:bd:6a:25:bd: b0:46:7c:9b:a4:3b:56:a7:0f:0b:0d:76:c2:e2:d5: 07:e8:30:cb:be:6b:e6:20:06:f8:42:e0:1f:f5:d7: a4:cb:67:3a:ca:77:ab:56:49:f7:c4:46:f5:5f:44: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2E:61:43:D1:BB:DE:54:1B:58:07:3C:AE:72:2C:EA:01:C3:90:DB X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:65:a4:66:7a:87:c1:16:15:e0:0b:15:1f:1d:5c:b0:22:31: 31:91:e4:3c:5d:d1:8b:7f:16:f9:61:33:72:68:78:ca:b4:8a: 16:8f:94:97:0e:9e:c1:d8:11:ba:36:71:f0:2c:c0:87:02:31: cd:10:62:0a:0a:19:ef:77:8e:78:84:ab:84:c2:80:99:67:a4: f0:48:27:90:c7:60:b5:a5:05:80:86:14:a7:2f:a4:e6:0b:54: 79:c3:1e:88:d7:16:30:2b:ed:a6:38:64:66:c5:f6:79:1f:4f: f7:00:4d:3e:17:da:2d:f7:63:e2:9b:7e:57:e9:4b:68:90:c5: 89:50:a8:17:33:34:ab:35:b2:fd:81:52:e8:47:60:4c:43:ba: c0:7e:36:ce:cd:a5:65:6c:5b:d4:72:1d:f6:6e:62:63:59:6c: 73:ed:24:d3:76:a0:3c:df:0f:c0:04:6d:af:68:20:a6:72:b4: d2:14:51:14:bc:11:d4:cd:bf:cd:2f:24:f4:9d:43:c3:e6:75: f7:f1:59:72:1f:7c:9f:af:7c:7f:02:4c:fc:0a:bf:ec:8b:7d: 31:c1:a3:01:70:5e:01:7a:6d:b1:cb:e0:cb:2b:42:60:cf:7f: 0f:b5:2d:41:7e:32:41:1f:bf:a0:34:d8:6f:cc:3e:bb:7e:ff: 4c:2b:6b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwOTA3MDE0OTQ0WhcNMjUwOTE0MDE0OTQ0WjAYMRYwFAYD VQQDEw02OGJjZTRiOS1lOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EtF9K4u9EgPR5FsGqgtwZN6N4nxaBPFbFD4RwqzPOJF/AoW1Ge4R9HuFWQM 9TS1ttg5B620vHCEBQvbfw+5PMEdIT3iSIteil2+8xLPPmr1hXSK3axYRmIbTELA czKZAfZnWSBNSlMUEx2alxa1WcN1xg+x19SnMGosM+KL1ZwLnbaMiiHtFe7uGbRT KXmXlMxutY9FmgbRvt9L+t/acz8U5eL/kED4MGkH6zIWV3+Ize4Ih3Iu6z0J8feH YdUie1RncKAbWTly87fh/r1qJb2wRnybpDtWpw8LDXbC4tUH6DDLvmvmIAb4QuAf 9deky2c6ynerVkn3xEb1X0QYEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0uYUPR u95UG1gHPK5yLOoBw5DbMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmZaRmeofBFhXgCxUfHVywIjExkeQ8XdGLfxb5YTNyaHjKtIoWj5SX Dp7B2BG6NnHwLMCHAjHNEGIKChnvd454hKuEwoCZZ6TwSCeQx2C1pQWAhhSnL6Tm C1R5wx6I1xYwK+2mOGRmxfZ5H0/3AE0+F9ot92Pim35X6UtokMWJUKgXMzSrNbL9 gVLoR2BMQ7rAfjbOzaVlbFvUch32bmJjWWxz7STTdqA83w/ABG2vaCCmcrTSFFEU vBHUzb/NLyT0nUPD5nX38VlyH3yfr3x/Akz8Cr/si30xwaMBcF4Bem2xy+DLK0Jg z38PtS1BfjJBH7+gNNhvzD67fv9MK2uA -----END CERTIFICATE-----Generated at Sun Sep 7 14:32:03 2025 by rpki-client