$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: F3bf88MTmi/AizJeJ2ur8s9SezgpP/qQQ1eAo07qElE= Subject key identifier: 00:4A:9F:EA:00:49:1C:1E:23:94:E5:01:9C:88:7D:FB:74:29:54:1B Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 01AE Signing time: Tue 03 Jun 2025 03:02:16 +0000 Manifest this update: Tue 03 Jun 2025 03:02:15 +0000 Manifest next update: Tue 10 Jun 2025 03:02:15 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: F9NjiVzHgtFAsq+xn61WGUvyaVbgdPDVWKXaSvYvXIw=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Jun 3 03:02:15 2025 GMT Not After : Jun 10 03:02:15 2025 GMT Subject: CN=683e65b7-4c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:ec:44:94:a4:a0:49:33:a2:1d:1f:71:81: a0:b8:4a:a9:7f:1d:7c:76:6d:fb:7f:bd:70:ae:53: eb:f5:47:ae:76:43:3b:b1:54:07:b4:21:d2:a3:f7: 7e:90:47:d0:83:2f:8c:20:20:c7:9a:95:a3:3a:05: 00:cc:64:fc:23:28:6d:d2:59:e4:c1:6d:f3:6d:33: 07:24:76:3b:2c:c6:95:c3:ef:3c:7b:45:07:15:42: 8b:1e:7e:07:2f:54:c8:70:45:e0:13:b7:d0:05:1d: 06:02:ec:c9:76:b3:f4:ff:7e:1a:6f:2a:a5:d5:4c: bb:00:19:7a:2c:99:76:b6:be:40:16:74:7e:60:70: 5f:52:64:e7:cf:6b:17:39:54:c1:19:bc:d4:72:fe: 2a:c9:22:fc:fd:24:6e:28:6a:3b:c4:1c:b9:eb:d0: 06:7e:13:cc:1d:e0:9b:0f:b8:d0:2d:ae:44:b6:9a: 0d:45:6f:47:25:3e:09:ba:0c:8e:26:77:23:87:ec: 29:7f:d1:7b:d6:e5:36:8b:cd:4d:a1:ca:c3:3c:a0: b9:87:e5:a5:cb:80:18:ad:1a:70:50:e4:ba:d7:43: 1f:89:76:15:cd:b2:64:05:3b:db:1f:2d:30:8a:be: b1:ef:45:b2:89:81:e3:4a:c9:5b:5e:3b:29:fa:2d: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:9F:EA:00:49:1C:1E:23:94:E5:01:9C:88:7D:FB:74:29:54:1B X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f7:54:6d:f3:dc:2f:2d:f7:ec:02:21:96:b1:00:32:1c:c3: ca:17:bd:00:eb:d7:6b:7e:c3:57:46:be:53:86:f1:ce:4f:5e: f8:ad:a3:4b:6b:7f:4d:63:38:fa:6e:c4:ff:0b:b9:5b:64:0c: de:fb:3b:03:8d:47:bc:93:28:fe:91:81:24:f3:37:1b:bf:92: dc:9f:5d:92:dc:06:01:94:d9:a2:70:57:c2:4f:2c:1c:be:fd: 15:fb:fa:7f:c0:be:43:dc:71:20:1a:42:74:36:c1:c9:70:ff: ea:b3:80:18:d6:9e:48:bb:5c:6b:ca:b9:98:82:e1:bb:24:31: a3:3b:f7:f9:88:d3:a7:1d:66:2e:7a:e0:dd:76:04:61:79:fb: 15:76:fa:ac:b2:5b:f8:de:9f:3c:a3:14:fb:7c:4e:b9:50:b4: d6:77:b4:66:82:55:83:93:a3:18:00:2d:d5:d2:10:d5:0a:6d: 2f:82:ee:0a:b5:c7:5b:8c:77:c0:74:77:de:9a:c3:5b:4e:7a: 27:8a:7e:a0:c2:3d:a7:45:0d:cb:e6:c0:32:71:53:a2:33:48: 51:49:d4:5f:b8:6d:dc:2d:f9:24:df:3a:f4:75:6e:35:d4:a6: c9:9b:05:a6:52:e2:78:4d:76:ab:52:af:72:77:33:e4:4b:46: f1:28:a0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwNjAzMDMwMjE1WhcNMjUwNjEwMDMwMjE1WjAYMRYwFAYD VQQDEw02ODNlNjViNy00YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xnsRJSkoEkzoh0fcYGguEqpfx18dm37f71wrlPr9UeudkM7sVQHtCHSo/d+ kEfQgy+MICDHmpWjOgUAzGT8Iyht0lnkwW3zbTMHJHY7LMaVw+88e0UHFUKLHn4H L1TIcEXgE7fQBR0GAuzJdrP0/34abyql1Uy7ABl6LJl2tr5AFnR+YHBfUmTnz2sX OVTBGbzUcv4qySL8/SRuKGo7xBy569AGfhPMHeCbD7jQLa5EtpoNRW9HJT4JugyO Jncjh+wpf9F71uU2i81NocrDPKC5h+Wly4AYrRpwUOS610MfiXYVzbJkBTvbHy0w ir6x70WyiYHjSslbXjsp+i2c3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABKn+oA SRweI5TlAZyIfft0KVQbMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC91Rt89wvLffsAiGWsQAyHMPKF70A69drfsNXRr5ThvHOT174raNL a39NYzj6bsT/C7lbZAze+zsDjUe8kyj+kYEk8zcbv5Lcn12S3AYBlNmicFfCTywc vv0V+/p/wL5D3HEgGkJ0NsHJcP/qs4AY1p5Iu1xryrmYguG7JDGjO/f5iNOnHWYu euDddgRhefsVdvqsslv43p88oxT7fE65ULTWd7RmglWDk6MYAC3V0hDVCm0vgu4K tcdbjHfAdHfemsNbTnonin6gwj2nRQ3L5sAycVOiM0hRSdRfuG3cLfkk3zr0dW41 1KbJmwWmUuJ4TXarUq9ydzPkS0bxKKDY -----END CERTIFICATE-----Generated at Wed Jun 4 12:14:00 2025 by rpki-client