$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: DyxSTmx7l+AGms7oskpblkyrEO6c4R0PmAy9qLHkZ1s= Subject key identifier: 8D:96:AF:81:00:7F:B8:C1:06:18:20:E8:4C:9B:C5:5B:F5:6C:C5:84 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 07FE Signing time: Thu 12 Jun 2025 20:39:58 +0000 Manifest this update: Thu 12 Jun 2025 20:39:58 +0000 Manifest next update: Thu 19 Jun 2025 20:39:58 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: xbb23HXOBrul9jLsrnKjb7Y2fttUIFtGVkxK31j+TGc=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: hdHi4xqpMBX0AQynSt0UCqWOxzfycEn8kuSXfk/h1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Jun 12 20:39:58 2025 GMT Not After : Jun 19 20:39:58 2025 GMT Subject: CN=684b3b1e-04a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:f1:16:94:77:fc:16:06:16:b0:31:55:5b: 4b:e4:8a:c3:fa:fe:29:b8:a6:22:13:f4:18:6e:92: 47:df:4b:56:39:7b:5b:3f:79:35:cb:20:24:4e:ad: 78:fc:d7:14:ac:9b:b6:30:4f:98:18:48:ac:14:37: b3:0a:1e:f4:14:be:7c:1e:9a:97:a1:6a:70:d0:36: 29:f7:9d:d7:dd:44:f0:a5:8d:dc:92:4f:7e:f5:9f: fa:53:23:b7:ab:2d:ed:d2:4e:c3:0e:15:4a:db:30: 4a:40:cc:97:a2:ce:64:73:0e:37:62:86:bc:91:8a: 4b:8e:3f:87:6d:46:1d:c2:88:86:df:4d:bc:74:ac: 6e:eb:f3:aa:a1:3a:3f:ae:03:10:be:53:c7:23:ea: f7:9d:2e:e7:26:7b:e4:2b:bb:ba:e9:ca:dd:c6:44: 39:ba:88:d4:83:03:ff:75:b3:a0:38:f1:02:8a:bd: 2e:9d:1d:e8:5d:14:94:2a:49:3f:86:88:5c:18:5c: 92:f7:12:8b:4d:9f:62:00:af:79:07:1f:da:71:b4: 34:6f:0f:ae:be:03:93:23:8d:d3:8f:fa:40:d5:13: 95:57:f1:e2:80:54:3b:73:17:f2:23:41:b3:77:75: f5:f6:12:1f:57:8e:6a:0b:6a:9f:44:9c:2c:75:71: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:AF:81:00:7F:B8:C1:06:18:20:E8:4C:9B:C5:5B:F5:6C:C5:84 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:41:26:8e:e2:d6:17:03:fc:d6:15:dc:11:34:d4:af:3c:6d: f5:a5:37:16:1d:86:a8:6c:f5:3e:1f:e5:49:2b:40:3f:d2:65: 51:dc:ff:0d:1c:9a:ca:b2:45:3f:6d:a1:a8:9c:b6:a9:26:a0: 06:a3:0f:a3:d3:44:60:47:ef:19:e6:ba:58:08:07:a9:b0:c5: 5a:8d:df:93:94:ac:1b:32:21:26:b6:d2:3e:9a:78:f6:af:64: 63:c8:e4:6f:e5:ee:8a:fb:c8:e4:e5:9b:23:b3:1f:bb:48:ef: 09:4c:e7:64:72:37:e6:db:18:a2:49:77:6b:89:58:44:3f:60: 71:f4:4f:73:73:30:7b:b9:4f:1a:d6:ac:3f:5d:73:4d:b7:cc: cf:35:b7:ae:e9:e5:cc:cb:18:b9:e6:b1:65:eb:2d:82:85:41: 35:b0:22:d5:da:c2:3c:5b:1f:aa:12:f9:a3:86:8b:06:14:da: a8:ea:6b:88:13:3c:1d:49:6f:a8:06:f6:a2:8e:99:a7:e5:de: 5f:4d:b3:2c:1b:dc:19:4a:03:ef:74:2d:f6:71:37:dc:9f:fe: 73:61:34:3c:02:78:da:0a:17:c6:d4:6b:30:59:c8:78:8e:c7: 3e:2f:7d:dd:71:34:54:24:98:5e:2e:b7:b2:1d:ef:9a:6c:b7: e5:45:11:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjUwNjEyMjAzOTU4WhcNMjUwNjE5MjAzOTU4WjAYMRYwFAYD VQQDEw02ODRiM2IxZS0wNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsHxFpR3/BYGFrAxVVtL5IrD+v4puKYiE/QYbpJH30tWOXtbP3k1yyAkTq14 /NcUrJu2ME+YGEisFDezCh70FL58HpqXoWpw0DYp953X3UTwpY3ckk9+9Z/6UyO3 qy3t0k7DDhVK2zBKQMyXos5kcw43Yoa8kYpLjj+HbUYdwoiG3028dKxu6/OqoTo/ rgMQvlPHI+r3nS7nJnvkK7u66crdxkQ5uojUgwP/dbOgOPECir0unR3oXRSUKkk/ hohcGFyS9xKLTZ9iAK95Bx/acbQ0bw+uvgOTI43Tj/pA1ROVV/HigFQ7cxfyI0Gz d3X19hIfV45qC2qfRJwsdXESlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Wr4EA f7jBBhgg6EybxVv1bMWEMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfQSaO4tYXA/zWFdwRNNSvPG31pTcWHYaobPU+H+VJK0A/0mVR3P8N HJrKskU/baGonLapJqAGow+j00RgR+8Z5rpYCAepsMVajd+TlKwbMiEmttI+mnj2 r2RjyORv5e6K+8jk5Zsjsx+7SO8JTOdkcjfm2xiiSXdriVhEP2Bx9E9zczB7uU8a 1qw/XXNNt8zPNbeu6eXMyxi55rFl6y2ChUE1sCLV2sI8Wx+qEvmjhosGFNqo6muI EzwdSW+oBvaijpmn5d5fTbMsG9wZSgPvdC32cTfcn/5zYTQ8AnjaChfG1GswWch4 jsc+L33dcTRUJJheLreyHe+abLflRRF4 -----END CERTIFICATE-----Generated at Sat Jun 14 01:50:57 2025 by rpki-client