$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: hROSPPwNu6/1ySbyTecaUNmQpSw/ZB0xNLcDIjK518o= Subject key identifier: B8:3C:49:AB:71:97:7F:B6:73:2F:3A:E8:FD:EF:F9:36:3D:C8:AE:D3 Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 010D Signing time: Sat 31 May 2025 04:34:52 +0000 Manifest this update: Sat 31 May 2025 04:34:51 +0000 Manifest next update: Sat 07 Jun 2025 04:34:51 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: +/dFSkGP9Wf6iLEaMDSYSh5EYJ75TIAYKWc7E2KaDV8=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: +frr+wTOoHrcgFMpLKILndUUUD44Ln0TV7/77IoTLr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: May 31 04:34:51 2025 GMT Not After : Jun 7 04:34:51 2025 GMT Subject: CN=683a86eb-6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:6c:bc:df:f4:11:f6:df:83:fe:3a:ed:41: b7:d3:01:cc:f7:96:4d:ba:cc:b8:ba:f6:6b:3e:b8: cb:d4:c6:2f:db:32:3f:0d:53:aa:da:a2:0b:93:88: df:41:e0:90:65:56:c4:fa:e9:69:6b:34:6e:55:6c: 98:15:ac:53:3f:bf:0a:f2:a0:d7:68:cb:35:15:9c: fb:27:a5:6a:9c:01:d8:45:2b:5b:19:92:90:73:16: 16:67:3e:0b:d6:2c:e6:50:57:f9:43:6e:e7:d1:c9: b9:14:80:f9:de:d1:25:45:21:00:b2:2f:45:5f:49: ac:bb:f6:97:d0:60:84:6b:cf:4f:23:f4:9d:b9:97: 1b:de:e5:92:2b:00:29:db:97:e2:88:fb:b1:a9:2f: 07:fa:be:2a:51:8d:44:03:4b:84:43:a6:5e:7b:9a: 8e:b3:e8:cd:f7:dc:05:44:1a:5d:54:41:11:31:01: 79:48:70:c8:73:89:e6:ce:84:dc:f7:df:fc:5a:a2: ce:3e:0c:ba:43:6b:a8:5b:08:fe:27:0a:fb:9c:7a: 55:bc:a3:49:47:d2:30:b2:2a:00:15:51:09:54:e2: 87:83:54:4a:ec:f1:1e:03:88:2d:c6:bc:fa:01:23: 07:cb:6c:14:c9:20:e3:87:6c:01:c9:53:64:4e:cf: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:49:AB:71:97:7F:B6:73:2F:3A:E8:FD:EF:F9:36:3D:C8:AE:D3 X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:3b:77:02:eb:16:49:44:4d:37:8b:dc:ee:07:b4:02:18: 96:b8:cc:04:7b:44:84:b9:b5:7c:06:0f:90:b3:06:57:43:4a: 0d:f8:35:ff:a2:6f:2f:90:a5:72:2c:b5:cd:a4:17:3f:67:f5: b5:e9:77:8a:3d:3a:41:ce:21:e2:84:ef:c2:ae:62:36:ee:c3: 8f:bd:16:a9:1c:4b:75:81:1e:72:6a:3d:64:2b:35:95:3f:58: 8b:37:96:4e:fc:cc:29:d0:be:57:1c:87:89:da:68:e5:9e:cc: 3d:0d:f9:c2:48:a8:f7:97:c2:65:7a:fe:d6:02:67:42:4d:2e: b9:7d:16:47:79:8e:33:0f:54:1b:18:a5:6c:57:5e:77:ba:a0: 65:21:87:d4:fa:53:1e:94:13:4f:a0:ac:2d:71:6d:2c:e5:fb: 51:5e:fc:43:b8:92:fa:8d:89:b2:d0:db:27:c0:a8:d2:ba:4b: 23:c4:21:0d:6b:90:d8:47:5a:70:d8:ec:89:1b:35:1f:47:a0: 3b:f8:fe:04:37:ae:ea:81:97:15:f9:f6:39:6b:09:ae:80:ef: 7d:bb:c6:2f:c9:bd:d2:5c:c1:70:20:ce:27:9e:72:fa:33:31: 33:6b:aa:6d:4e:27:b0:d3:b4:88:7d:25:95:b7:21:e4:7c:0f: cc:16:df:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwNTMxMDQzNDUxWhcNMjUwNjA3MDQzNDUxWjAYMRYwFAYD VQQDEw02ODNhODZlYi02ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xlsvN/0Efbfg/467UG30wHM95ZNusy4uvZrPrjL1MYv2zI/DVOq2qILk4jf QeCQZVbE+ulpazRuVWyYFaxTP78K8qDXaMs1FZz7J6VqnAHYRStbGZKQcxYWZz4L 1izmUFf5Q27n0cm5FID53tElRSEAsi9FX0msu/aX0GCEa89PI/SduZcb3uWSKwAp 25fiiPuxqS8H+r4qUY1EA0uEQ6Zee5qOs+jN99wFRBpdVEERMQF5SHDIc4nmzoTc 99/8WqLOPgy6Q2uoWwj+Jwr7nHpVvKNJR9IwsioAFVEJVOKHg1RK7PEeA4gtxrz6 ASMHy2wUySDjh2wByVNkTs8IfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg8Satx l3+2cy866P3v+TY9yK7TMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/zt3AusWSURNN4vc7ge0AhiWuMwEe0SEubV8Bg+QswZXQ0oN+DX/ om8vkKVyLLXNpBc/Z/W16XeKPTpBziHihO/CrmI27sOPvRapHEt1gR5yaj1kKzWV P1iLN5ZO/Mwp0L5XHIeJ2mjlnsw9DfnCSKj3l8Jlev7WAmdCTS65fRZHeY4zD1Qb GKVsV153uqBlIYfU+lMelBNPoKwtcW0s5ftRXvxDuJL6jYmy0NsnwKjSuksjxCEN a5DYR1pw2OyJGzUfR6A7+P4EN67qgZcV+fY5awmugO99u8Yvyb3SXMFwIM4nnnL6 MzEza6ptTiew07SIfSWVtyHkfA/MFt+9 -----END CERTIFICATE-----Generated at Sat May 31 16:52:19 2025 by rpki-client