$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: 5+Lix3jIoWeAhcJHGsutWNjc3y/Y+CQSPkl3lfpdiYY= Subject key identifier: BC:3F:3E:20:12:89:23:E3:5F:B6:B0:6B:99:06:F6:D1:B7:1E:6E:6A Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: 56 Signing time: Sat 31 May 2025 06:47:17 +0000 Manifest this update: Sat 31 May 2025 06:47:16 +0000 Manifest next update: Sat 07 Jun 2025 06:47:16 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: h6u6wkHrjlZBK8lCjl78IarhbLGeB4HVDvFuWA8H/Oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: May 31 06:47:16 2025 GMT Not After : Jun 7 06:47:16 2025 GMT Subject: CN=683aa5f5-0fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:5b:c8:fa:5e:1d:26:c9:27:29:95:b0:1c: b7:87:b0:1e:0c:c1:84:d5:1d:be:c1:50:a9:40:bb: 91:8d:93:f4:55:5f:20:b7:7d:e5:bb:a7:c3:8e:9d: 1a:ad:40:b4:5c:18:ff:87:d5:d7:a4:f7:18:5c:ae: 32:aa:cf:3e:cd:a3:11:b3:01:04:e9:67:6b:0b:a9: b3:11:33:f7:bf:ab:03:3c:2d:c4:39:42:ec:af:dc: 32:b6:83:1c:e9:a2:5c:31:55:4c:31:eb:c2:fa:a2: 1d:cb:d1:4e:b5:94:7a:20:b9:d0:9c:93:ce:7b:8a: 8a:3d:30:7b:77:57:b6:02:c3:82:41:e4:e0:36:1f: d5:c8:15:64:70:27:c6:bf:d5:4e:1b:30:84:b1:95: 9f:f4:13:83:17:10:d0:b3:31:88:81:79:ce:bb:b1: f4:55:69:dc:ae:0d:22:73:f4:5c:1e:70:71:6e:b9: be:7c:26:1e:ce:df:b5:c7:d0:02:a9:9f:b9:1d:fe: 0e:d4:6b:92:41:ce:9c:6b:de:b2:df:b4:a9:ee:13: d3:7a:15:3a:61:51:9a:be:8c:a4:7c:a2:f3:2c:1c: 7f:f6:4d:a8:47:a0:af:28:8a:f1:e9:fa:bc:aa:b0: dc:60:35:2d:71:a5:95:62:7a:27:fa:00:87:d7:d9: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3F:3E:20:12:89:23:E3:5F:B6:B0:6B:99:06:F6:D1:B7:1E:6E:6A X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:32:4e:81:93:03:cb:4e:2e:4b:36:6e:13:d3:17:97:23: 85:ee:bc:41:d5:12:96:b1:5f:e2:b7:c6:04:20:bb:04:b9:14: 97:4d:07:83:34:c3:46:ba:2b:86:69:31:9d:10:10:c2:4a:b5: 24:80:bf:55:f9:c9:41:55:a2:9d:c7:1c:e7:0c:77:89:56:16: 1d:86:a4:70:34:6f:29:d0:f0:fe:f9:fb:58:3b:c3:42:86:eb: de:b8:10:3f:0e:69:dd:11:92:f6:81:5e:05:05:60:46:d3:21: ad:fb:49:e1:dc:70:2b:a4:a2:74:ac:ff:f9:a4:d3:92:c2:82: 9e:05:03:cf:43:73:e5:7d:49:91:50:bc:61:58:74:6d:c7:48: 2f:2e:29:f6:6b:50:32:ca:77:60:2c:5a:91:8a:7e:4a:db:dd: 04:f3:a1:55:bf:ea:c8:a8:46:e2:c7:5e:ef:54:82:c9:c3:1c: d0:96:aa:e5:f0:f6:e2:8f:2d:c3:95:4f:0f:98:ff:cf:c9:ba: df:d7:9b:8d:8f:25:67:aa:da:5d:f6:cf:f2:20:71:19:e9:da: 42:e0:71:9a:5d:2b:b1:7e:d5:bb:8d:10:e2:56:60:e7:b4:92: 5b:6e:66:87:4c:32:8d:c1:69:85:a0:4b:68:16:ba:0c:5d:bd: d8:d9:56:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDM4QjExMC8GA1UEBRMoMkY2QjFFN0UxNDAxREUwMEFDOEVFREI3QTg1OTBEMDNE QzU0MEY3ODAeFw0yNTA1MzEwNjQ3MTZaFw0yNTA2MDcwNjQ3MTZaMBgxFjAUBgNV BAMTDTY4M2FhNWY1LTBmYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV61vI+l4dJsknKZWwHLeHsB4MwYTVHb7BUKlAu5GNk/RVXyC3feW7p8OOnRqt QLRcGP+H1dek9xhcrjKqzz7NoxGzAQTpZ2sLqbMRM/e/qwM8LcQ5Quyv3DK2gxzp olwxVUwx68L6oh3L0U61lHogudCck857ioo9MHt3V7YCw4JB5OA2H9XIFWRwJ8a/ 1U4bMISxlZ/0E4MXENCzMYiBec67sfRVadyuDSJz9FwecHFuub58Jh7O37XH0AKp n7kd/g7Ua5JBzpxr3rLftKnuE9N6FTphUZq+jKR8ovMsHH/2TahHoK8oivHp+ryq sNxgNS1xpZVieif6AIfX2RPPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvD8+IBKJ I+NftrBrmQb20bcebmowHwYDVR0jBBgwFoAUL2sefhQB3gCsju23qFkNA9xUD3gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMzhCL0ExQUIyQUJDQkE4 OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDJzZWZoUUIzZ0NzanUyM3FGa05BOXhVRDNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MzhCL0ExQUIyQUJDQkE4OTExRUY5QjMzODUxMkM0RjlBRTAyL0wyc2VmaFFCM2dD c2p1MjNxRmtOQTl4VUQzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzhMk6BkwPLTi5LNm4T0xeXI4XuvEHVEpaxX+K3xgQguwS5FJdNB4M0 w0a6K4ZpMZ0QEMJKtSSAv1X5yUFVop3HHOcMd4lWFh2GpHA0bynQ8P75+1g7w0KG 6964ED8Oad0RkvaBXgUFYEbTIa37SeHccCukonSs//mk05LCgp4FA89Dc+V9SZFQ vGFYdG3HSC8uKfZrUDLKd2AsWpGKfkrb3QTzoVW/6sioRuLHXu9UgsnDHNCWquXw 9uKPLcOVTw+Y/8/Jut/Xm42PJWeq2l32z/IgcRnp2kLgcZpdK7F+1buNEOJWYOe0 kltuZodMMo3BaYWgS2gWugxdvdjZVpg= -----END CERTIFICATE-----Generated at Sat May 31 17:33:00 2025 by rpki-client