$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft File: L3LcETktqlBahWLidjiGBgPNvr8.mft (raw, json) Hash identifier: HB8ih3p62FnhOogDGVa20Njkh9HazX8Wpqm0OzZ2tKY= Subject key identifier: CE:3E:54:CB:21:EF:59:7C:D4:FC:45:00:6E:82:DF:A2:45:6E:C0:9C Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF Certificate issuer: /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft Manifest number: 06 Signing time: Sat 31 May 2025 07:43:08 +0000 Manifest this update: Sat 31 May 2025 07:43:08 +0000 Manifest next update: Sat 07 Jun 2025 07:43:08 +0000 Files and hashes: 1: L3LcETktqlBahWLidjiGBgPNvr8.crl (hash: HzcskBJuQLkWzvk6aDD1wF9jgjLsGdG6fhk8cmRBwyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF Validity Not Before: May 31 07:43:08 2025 GMT Not After : Jun 7 07:43:08 2025 GMT Subject: CN=683ab30c-cc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:cf:d5:4b:2b:d4:48:29:32:1e:f6:42:3d: 40:06:d0:eb:a8:a0:7e:1f:9d:20:e0:7a:9d:81:7c: d1:95:3a:08:69:8b:d5:ba:c7:57:be:0a:0a:75:1a: fc:d3:d5:25:7c:fd:37:63:ce:6a:bd:7b:ce:67:ce: 25:e6:5b:e5:db:af:79:b8:69:79:5b:f0:01:66:1e: 79:9a:ba:2b:c0:f2:ac:c9:7e:8d:f0:7e:8f:1f:04: c9:41:f2:24:0d:4a:27:d2:da:61:a9:43:99:78:36: 47:eb:fe:72:88:48:eb:cb:36:5d:83:e8:3a:47:86: b0:53:70:8b:d6:f6:b8:70:11:d3:e8:83:58:ef:bc: 89:f1:7e:ff:ec:1e:5e:3d:4b:84:f2:81:ad:a6:d1: c4:f1:17:cf:5a:a7:09:fd:d0:bd:eb:f2:5d:48:db: 31:58:fa:c6:6e:dd:9d:71:20:d1:15:60:4d:df:a5: 6c:c9:d0:bc:ec:51:bc:64:64:e4:8c:c8:4b:f0:00: f2:77:12:83:3a:36:b5:43:1a:fb:9e:ef:d8:37:b4: 1a:b1:ff:fb:be:ec:13:a3:9c:b0:f5:83:43:d3:ba: be:4e:0b:e1:e8:e8:56:6d:8c:53:25:52:26:d5:fc: 63:fc:67:d5:c0:cb:81:42:9a:5c:14:1d:49:56:54: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:54:CB:21:EF:59:7C:D4:FC:45:00:6E:82:DF:A2:45:6E:C0:9C X509v3 Authority Key Identifier: keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:64:41:d9:93:81:7e:28:c1:a1:20:6f:79:a0:48:69:ba: 26:cb:bb:92:28:4b:6f:38:47:37:c9:2e:fd:df:15:61:cb:7b: 3b:d2:b5:b6:12:68:a1:9d:10:15:d6:c5:48:16:dc:7c:41:60: 81:b7:bb:fe:55:ba:22:7c:ed:e6:a8:1a:40:43:2f:4b:b2:75: e1:98:68:b8:7a:eb:60:18:cd:00:ec:86:bb:40:d3:52:70:63: 33:26:73:1a:37:ea:93:67:1d:82:aa:8c:a1:52:8e:54:2f:2d: af:e2:2b:e3:12:50:88:a4:f9:af:59:6f:a9:1b:cd:4c:54:b3: 61:60:88:d0:04:2c:0c:2a:eb:db:9b:9a:55:5b:a4:91:fc:78: cd:b3:c7:b1:d4:4e:d1:29:48:0d:9d:42:f0:6b:53:79:d9:71: d6:a1:85:df:34:e1:09:36:f2:0b:18:3b:73:c2:18:30:46:28: b8:33:4e:78:e5:14:14:e5:e3:72:0b:67:33:de:cf:26:24:75: 43:a5:02:03:3d:5b:00:f5:df:90:7b:6e:78:3d:e8:51:6e:3b: 7a:fa:c9:18:8a:d8:1a:94:51:76:1b:1b:fe:ed:6e:d3:cd:07: 7a:14:88:f2:e0:4e:73:ed:e1:29:48:08:61:f4:a0:1d:e7:c9: ba:ec:3a:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDU5RjExMC8GA1UEBRMoMkY3MkRDMTEzOTJEQUE1MDVBODU2MkUyNzYzODg2MDYw M0NEQkVCRjAeFw0yNTA1MzEwNzQzMDhaFw0yNTA2MDcwNzQzMDhaMBgxFjAUBgNV BAMTDTY4M2FiMzBjLWNjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoQM/VSyvUSCkyHvZCPUAG0OuooH4fnSDgep2BfNGVOghpi9W6x1e+Cgp1GvzT 1SV8/Tdjzmq9e85nziXmW+Xbr3m4aXlb8AFmHnmauivA8qzJfo3wfo8fBMlB8iQN SifS2mGpQ5l4Nkfr/nKISOvLNl2D6DpHhrBTcIvW9rhwEdPog1jvvInxfv/sHl49 S4Tyga2m0cTxF89apwn90L3r8l1I2zFY+sZu3Z1xINEVYE3fpWzJ0LzsUbxkZOSM yEvwAPJ3EoM6NrVDGvue79g3tBqx//u+7BOjnLD1g0PTur5OC+Ho6FZtjFMlUibV /GP8Z9XAy4FCmlwUHUlWVC2pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzj5UyyHv WXzU/EUAboLfokVuwJwwHwYDVR0jBBgwFoAUL3LcETktqlBahWLidjiGBgPNvr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENTlGLzAxOTA0M0YwMzNG NjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDNMY0VUa3RxbEJhaFdMaWRqaUdCZ1BOdnI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NTlGLzAxOTA0M0YwMzNGNjExRjA5Q0UzOEU0MUM0RjlBRTAyL0wzTGNFVGt0cWxC YWhXTGlkamlHQmdQTnZyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7PZEHZk4F+KMGhIG95oEhpuibLu5IoS284RzfJLv3fFWHLezvStbYS aKGdEBXWxUgW3HxBYIG3u/5VuiJ87eaoGkBDL0uydeGYaLh662AYzQDshrtA01Jw YzMmcxo36pNnHYKqjKFSjlQvLa/iK+MSUIik+a9Zb6kbzUxUs2FgiNAELAwq69ub mlVbpJH8eM2zx7HUTtEpSA2dQvBrU3nZcdahhd804Qk28gsYO3PCGDBGKLgzTnjl FBTl43ILZzPezyYkdUOlAgM9WwD135B7bng96FFuO3r6yRiK2BqUUXYbG/7tbtPN B3oUiPLgTnPt4SlICGH0oB3nybrsOjQ= -----END CERTIFICATE-----Generated at Sat May 31 17:31:56 2025 by rpki-client