$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: A/6vhbG8OUxxgX0H7AjONgO7LUtT9/rcEIY7uch179M= Subject key identifier: 1E:44:4C:D1:20:00:5B:1E:6C:0E:24:A2:1C:A7:7B:1F:A6:F0:6D:2E Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 01D5 Signing time: Tue 19 Aug 2025 03:07:15 +0000 Manifest this update: Tue 19 Aug 2025 03:07:14 +0000 Manifest next update: Tue 26 Aug 2025 03:07:14 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 7wzhrPxt84ChtqhA+lQq26XgqGubY3vTgE6RFMLrCWo=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Aug 19 03:07:14 2025 GMT Not After : Aug 26 03:07:14 2025 GMT Subject: CN=68a3ea62-4f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:38:8d:63:3e:58:ab:a6:be:a3:3c:e0:31: 66:bb:ff:5f:58:89:4a:86:af:c4:57:d1:8d:8b:e3: 01:2e:b9:93:94:59:c6:6c:9f:54:0e:5c:90:a9:e1: d9:65:1e:b4:f0:5c:0c:1b:25:3d:ef:4f:8d:2c:9c: 40:db:a4:98:bc:ca:c4:4c:5f:1a:43:4f:a7:70:93: 6b:56:2b:14:e0:62:e4:c3:7f:31:72:e7:74:64:cb: 83:3a:3f:0a:0e:a3:8c:35:54:c3:65:13:8e:1b:26: 32:dc:5a:0d:55:d9:59:db:16:40:e7:14:81:95:fa: 60:1c:60:65:9c:67:ba:8d:ac:02:46:67:33:dd:8d: 22:61:8f:95:1b:db:42:07:9b:0d:10:68:c2:6d:f2: 85:4b:a9:e2:be:c3:c2:20:f5:7c:64:ec:2f:05:c4: 73:6f:74:10:e6:b7:88:f6:20:ed:e5:40:2d:31:ec: 44:5a:c8:1b:1e:0f:b5:cc:8c:4d:fe:3c:28:9a:32: dd:7f:ae:e1:03:4e:eb:68:41:4d:11:06:a4:f6:e0: 46:ce:26:20:0f:4b:a8:fc:31:33:1c:5e:f2:89:c7: e8:2f:c2:94:e7:84:3f:c9:8b:bf:65:a3:46:ee:05: 58:df:c4:f3:01:87:0f:1c:b6:98:9d:15:d8:fa:01: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:4C:D1:20:00:5B:1E:6C:0E:24:A2:1C:A7:7B:1F:A6:F0:6D:2E X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:35:09:02:57:63:19:d0:a7:65:8e:a9:e6:9f:50:42:4f:af: 25:d1:da:2c:c8:f7:2f:a2:f5:7e:70:40:48:41:44:e9:c7:0e: 53:36:c9:23:97:a7:66:ca:b7:7f:af:80:79:b0:60:06:60:a5: 46:f7:cc:df:77:09:1f:3a:d8:b3:24:b8:d7:a5:ac:89:55:d6: ea:62:7f:94:0b:a5:eb:65:39:95:73:88:f6:70:74:7c:8a:63: 92:87:ea:e9:bc:77:ce:2f:b1:97:2a:2b:0f:83:89:cd:86:2e: 17:36:cf:bf:64:27:f3:32:b1:fa:b1:27:5c:68:8f:d9:28:f4: 5f:51:d7:30:ad:d9:1e:d4:5a:54:e0:b1:cf:93:cc:83:32:aa: 97:74:1a:38:bb:35:4e:60:5d:9c:ef:64:b2:6e:2a:f2:e6:28: 0e:7a:62:07:d8:99:e8:4c:40:96:6e:03:59:ee:9f:f7:87:9a: 92:12:5b:7e:5b:ec:1d:cc:1d:84:fd:11:be:67:eb:c6:d6:4f: 25:95:dd:9e:60:f7:42:08:ca:6a:18:9f:90:50:b8:62:5c:ef: a8:b5:1d:84:4a:ec:b7:40:9c:51:57:57:9a:a5:99:a9:2c:e0: 80:fa:f3:05:ea:eb:8a:5b:32:f9:c0:8d:5f:52:65:cc:5f:c3: f7:d5:af:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwODE5MDMwNzE0WhcNMjUwODI2MDMwNzE0WjAYMRYwFAYD VQQDEw02OGEzZWE2Mi00ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx84jWM+WKumvqM84DFmu/9fWIlKhq/EV9GNi+MBLrmTlFnGbJ9UDlyQqeHZ ZR608FwMGyU970+NLJxA26SYvMrETF8aQ0+ncJNrVisU4GLkw38xcud0ZMuDOj8K DqOMNVTDZROOGyYy3FoNVdlZ2xZA5xSBlfpgHGBlnGe6jawCRmcz3Y0iYY+VG9tC B5sNEGjCbfKFS6nivsPCIPV8ZOwvBcRzb3QQ5reI9iDt5UAtMexEWsgbHg+1zIxN /jwomjLdf67hA07raEFNEQak9uBGziYgD0uo/DEzHF7yicfoL8KU54Q/yYu/ZaNG 7gVY38TzAYcPHLaYnRXY+gE3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5ETNEg AFsebA4kohynex+m8G0uMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjNQkCV2MZ0Kdljqnmn1BCT68l0dosyPcvovV+cEBIQUTpxw5TNskj l6dmyrd/r4B5sGAGYKVG98zfdwkfOtizJLjXpayJVdbqYn+UC6XrZTmVc4j2cHR8 imOSh+rpvHfOL7GXKisPg4nNhi4XNs+/ZCfzMrH6sSdcaI/ZKPRfUdcwrdke1FpU 4LHPk8yDMqqXdBo4uzVOYF2c72Sybiry5igOemIH2JnoTECWbgNZ7p/3h5qSElt+ W+wdzB2E/RG+Z+vG1k8lld2eYPdCCMpqGJ+QULhiXO+otR2ESuy3QJxRV1eapZmp LOCA+vMF6uuKWzL5wI1fUmXMX8P31a8/ -----END CERTIFICATE-----Generated at Wed Aug 20 15:36:08 2025 by rpki-client