$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json) Hash identifier: zT6VQxF23sDT8cAKiXiZn8H7zrwcGEHoJLYw6d57Ljo= Subject key identifier: B0:66:9B:A7:83:2D:7A:24:04:76:1A:70:CA:27:5D:CA:22:E4:25:43 Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft Manifest number: 079F Signing time: Fri 30 May 2025 21:32:21 +0000 Manifest this update: Fri 30 May 2025 21:32:20 +0000 Manifest next update: Fri 06 Jun 2025 21:32:20 +0000 Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: T4JpHlIfcRO/rhbNmYgOaj6buHRpG7zocySz8eLDvk0=) 2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Validity Not Before: May 30 21:32:20 2025 GMT Not After : Jun 6 21:32:20 2025 GMT Subject: CN=683a23e4-923f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:02:d3:d4:25:eb:1d:1e:8c:42:4c:5b:dc: 35:fe:c2:b3:cc:ab:15:b1:a6:bc:81:59:d5:ba:ff: 03:33:89:42:2d:de:f3:38:41:25:10:e7:f3:54:d9: 8f:f3:44:e1:c9:58:f5:56:81:63:fc:6e:a4:86:7b: 4d:d0:58:bc:76:2f:1f:c3:44:d1:99:08:df:01:55: eb:e2:10:78:23:8d:63:62:2d:8f:57:87:80:43:09: b1:1c:f4:be:24:7a:fa:fc:4f:b9:26:e3:66:d4:0b: c7:d0:b8:f2:ad:49:41:5f:2f:5e:ec:18:68:c9:15: 30:df:41:32:98:fd:ae:0e:ee:ec:33:35:17:0b:5a: b0:21:7e:64:01:bf:5a:e8:3c:2c:c2:7f:75:22:85: 38:03:d7:61:9f:06:b8:7b:a0:74:60:f7:a4:f7:06: aa:32:94:52:89:54:c4:9a:b1:7e:7f:35:26:8c:84: 39:9a:a0:7b:76:60:fa:c7:30:46:19:21:19:d3:3b: c9:91:e3:32:15:fa:94:e8:a1:0e:97:a8:84:df:f1: 5e:d7:5f:5f:78:c5:d5:22:05:f4:c2:e6:84:82:73: f3:60:6c:d2:24:2f:db:84:91:c5:05:3f:d3:5c:34: 9e:8c:3c:86:bf:08:1f:cd:a6:12:d8:ff:d9:90:cd: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:9B:A7:83:2D:7A:24:04:76:1A:70:CA:27:5D:CA:22:E4:25:43 X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:33:21:8b:13:17:30:25:f6:0b:c7:0d:22:9e:b6:e9:24:41: 02:7a:f2:3c:a8:e4:8d:fa:5a:99:c9:3a:32:71:2a:d4:03:f0: 1a:9d:a7:ea:f9:b8:ab:d2:55:ad:53:68:65:8a:44:c2:32:8c: 34:a0:d8:29:87:b2:f8:8c:7e:40:dd:c0:f4:3e:23:5b:f3:71: 92:a8:09:93:12:f3:04:17:1f:45:f6:2b:dc:11:0a:98:60:01: e0:6b:9b:83:61:d7:e2:18:e0:b9:8a:be:ef:93:47:3e:e4:72: b7:f7:7b:8a:d5:55:27:8d:e9:5a:ce:9c:75:ff:9b:61:72:a1: cc:41:d8:80:f1:27:c9:6b:a8:f3:7c:8e:3a:25:dd:40:32:dd: 9b:63:c6:41:2f:e1:c4:61:47:31:44:7f:c6:24:88:a6:3f:53: 08:6c:ed:9b:b8:8d:62:92:72:e4:3d:03:c6:9f:51:8d:88:5b: 3b:c5:c3:b7:24:32:d8:ef:34:8e:8c:e2:38:de:30:92:c7:db: 1d:3e:b1:f9:e5:30:fd:9b:81:05:be:b6:73:4f:75:43:32:9d: aa:6d:bf:bd:b5:49:83:32:e6:98:3e:22:90:74:d6:b5:7f:7c: 32:b8:ea:5c:49:e5:5b:38:07:f7:01:03:93:22:91:fe:a2:86: 19:2c:20:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjUwNTMwMjEzMjIwWhcNMjUwNjA2MjEzMjIwWjAYMRYwFAYD VQQDEw02ODNhMjNlNC05MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iEC09Ql6x0ejEJMW9w1/sKzzKsVsaa8gVnVuv8DM4lCLd7zOEElEOfzVNmP 80ThyVj1VoFj/G6khntN0Fi8di8fw0TRmQjfAVXr4hB4I41jYi2PV4eAQwmxHPS+ JHr6/E+5JuNm1AvH0LjyrUlBXy9e7BhoyRUw30EymP2uDu7sMzUXC1qwIX5kAb9a 6Dwswn91IoU4A9dhnwa4e6B0YPek9waqMpRSiVTEmrF+fzUmjIQ5mqB7dmD6xzBG GSEZ0zvJkeMyFfqU6KEOl6iE3/Fe119feMXVIgX0wuaEgnPzYGzSJC/bhJHFBT/T XDSejDyGvwgfzaYS2P/ZkM3c1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBmm6eD LXokBHYacMonXcoi5CVDMB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy NEI0al9IQllSOS1wUklUYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhMyGLExcwJfYLxw0inrbpJEECevI8qOSN+lqZyToycSrUA/Aanafq +bir0lWtU2hlikTCMow0oNgph7L4jH5A3cD0PiNb83GSqAmTEvMEFx9F9ivcEQqY YAHga5uDYdfiGOC5ir7vk0c+5HK393uK1VUnjelazpx1/5thcqHMQdiA8SfJa6jz fI46Jd1AMt2bY8ZBL+HEYUcxRH/GJIimP1MIbO2buI1iknLkPQPGn1GNiFs7xcO3 JDLY7zSOjOI43jCSx9sdPrH55TD9m4EFvrZzT3VDMp2qbb+9tUmDMuaYPiKQdNa1 f3wyuOpcSeVbOAf3AQOTIpH+ooYZLCDV -----END CERTIFICATE-----Generated at Sat May 31 16:49:10 2025 by rpki-client