$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: XdHomTpT1H0/5Ba/DFl74fM+wm0twIoQ9YG+1ipPqsA= Subject key identifier: 15:5A:F1:0C:B6:78:A2:69:F8:01:CC:99:01:30:DC:ED:CB:FD:50:0C Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C40 Signing time: Fri 30 May 2025 18:38:29 +0000 Manifest this update: Fri 30 May 2025 18:38:29 +0000 Manifest next update: Fri 06 Jun 2025 18:38:29 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: HocoBi41wt3ipW21uigCl6TrmhJZT6H7mHWKDNKbp6w=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: May 30 18:38:29 2025 GMT Not After : Jun 6 18:38:29 2025 GMT Subject: CN=6839fb25-b3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:1e:e1:75:37:3d:e3:ba:4d:b6:6f:37:cc: f2:b1:12:23:b1:97:c1:4e:f3:d4:28:70:df:4d:e8: 70:f4:54:36:c4:9f:3f:de:4e:17:e4:2c:79:ad:18: 8d:b1:02:42:8a:28:63:55:16:78:3c:2c:c7:ab:b2: 4f:76:a7:7b:4e:33:77:e9:8a:1f:ee:ec:9a:2c:42: d0:7c:1d:0f:23:f8:a6:2b:ca:8e:c2:46:d3:23:13: 5a:c5:47:6a:55:16:38:3e:f7:81:c4:78:21:16:7d: 46:0f:ac:ce:f1:c4:76:e2:05:2d:cc:4b:f6:8a:4d: b7:f1:4c:c3:0c:84:a6:ef:ab:7b:ab:8b:d6:7d:7e: cc:a1:61:c7:b0:58:33:1b:74:27:42:2a:89:b0:a2: 61:f6:ba:58:88:90:e6:c7:0e:42:77:de:50:4e:7b: 68:bc:59:66:87:0d:9e:f3:0a:7c:74:cb:5a:5d:a4: 40:9c:28:97:ff:3e:29:43:cc:fb:ed:2c:f1:e8:e0: 03:ad:25:8a:e1:d7:8b:85:0c:4a:ea:18:9b:ca:df: 7d:d7:b5:f2:8c:38:2c:62:a3:12:27:e1:0c:c6:f2: c6:9f:7c:52:b2:5c:23:f3:03:cf:dc:aa:cd:00:7e: 18:7e:d2:91:5d:34:6e:54:01:80:61:75:87:87:12: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:F1:0C:B6:78:A2:69:F8:01:CC:99:01:30:DC:ED:CB:FD:50:0C X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:9a:38:5d:df:06:ec:66:1f:93:8d:f2:99:09:0a:1d:6f:18: 1b:d5:18:95:a4:c1:37:59:0e:6b:c2:be:b5:50:e4:79:5d:ef: 74:94:93:ca:0f:18:af:45:fa:b6:de:4c:d6:8c:e4:ba:ed:15: ea:fe:7d:e1:1d:a4:42:80:74:6e:20:73:e2:2c:d5:11:cf:8c: dc:90:f6:25:7d:62:87:64:9c:da:a1:f9:f1:31:17:2a:ff:e6: 81:9e:3a:a7:3d:d3:f9:ef:2b:9f:e4:67:6b:e7:10:5d:8c:68: 01:ea:9c:88:b0:fd:00:42:5e:cb:82:d1:00:11:84:a8:26:58: ac:5e:95:8f:bf:c9:1c:91:4d:a6:ad:49:ed:60:75:cf:cf:63: 79:da:22:d9:44:76:bd:3f:17:c7:5b:72:ec:0f:5c:e6:59:d4: fc:af:aa:60:06:e7:13:6b:e1:96:14:e4:af:37:d4:f8:6b:be: 75:ac:7f:20:b7:8b:3d:41:8a:c8:2b:e0:2e:34:64:92:04:ac: e3:6f:49:7d:d9:48:06:63:33:f1:43:1f:05:b0:14:e4:8d:24: 44:3b:57:76:cd:da:3c:d4:c2:c5:85:57:34:59:ba:cd:66:39: c0:d1:c3:09:34:4f:3a:70:15:86:0b:c5:48:5b:cb:4e:de:7c: 58:52:62:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwNTMwMTgzODI5WhcNMjUwNjA2MTgzODI5WjAYMRYwFAYD VQQDEw02ODM5ZmIyNS1iM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSke4XU3PeO6TbZvN8zysRIjsZfBTvPUKHDfTehw9FQ2xJ8/3k4X5Cx5rRiN sQJCiihjVRZ4PCzHq7JPdqd7TjN36Yof7uyaLELQfB0PI/imK8qOwkbTIxNaxUdq VRY4PveBxHghFn1GD6zO8cR24gUtzEv2ik238UzDDISm76t7q4vWfX7MoWHHsFgz G3QnQiqJsKJh9rpYiJDmxw5Cd95QTntovFlmhw2e8wp8dMtaXaRAnCiX/z4pQ8z7 7Szx6OADrSWK4deLhQxK6hibyt9917XyjDgsYqMSJ+EMxvLGn3xSslwj8wPP3KrN AH4YftKRXTRuVAGAYXWHhxKEMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVa8Qy2 eKJp+AHMmQEw3O3L/VAMMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8mjhd3wbsZh+TjfKZCQodbxgb1RiVpME3WQ5rwr61UOR5Xe90lJPK DxivRfq23kzWjOS67RXq/n3hHaRCgHRuIHPiLNURz4zckPYlfWKHZJzaofnxMRcq /+aBnjqnPdP57yuf5Gdr5xBdjGgB6pyIsP0AQl7LgtEAEYSoJlisXpWPv8kckU2m rUntYHXPz2N52iLZRHa9PxfHW3LsD1zmWdT8r6pgBucTa+GWFOSvN9T4a751rH8g t4s9QYrIK+AuNGSSBKzjb0l92UgGYzPxQx8FsBTkjSREO1d2zdo81MLFhVc0WbrN ZjnA0cMJNE86cBWGC8VIW8tO3nxYUmI7 -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client