$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: vCUuacIopHL9IQ5d7m3Gv+vkQvVE0fIQY4UFSb0y610= Subject key identifier: CC:4E:A7:15:CE:A8:71:49:9D:03:E9:56:41:DA:B4:70:ED:6C:EA:CB Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 348C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 348C Signing time: Sat 14 Jun 2025 15:01:22 +0000 Manifest this update: Sat 14 Jun 2025 15:01:22 +0000 Manifest next update: Sat 21 Jun 2025 15:01:22 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: T9Es3ZMiXC1Tz90AHAIxy5Z3RMhVZn0UgaQsgH2Jkrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13452 (0x348c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2, serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: Jun 14 15:01:22 2025 GMT Not After : Jun 21 15:01:22 2025 GMT Subject: CN=684d8ec2-5f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:53:13:b2:f7:27:83:55:63:ee:18:82:ee: df:c3:45:22:e8:3d:7c:7b:25:aa:d8:5a:d0:02:28: 01:74:35:fb:0e:23:5d:df:88:9a:ab:d7:4e:78:8c: 38:4c:d8:b7:09:08:eb:f1:32:56:c3:19:81:98:67: 1c:1c:4f:ff:25:ff:3b:89:5a:e9:51:b4:05:35:e2: 2b:52:07:77:e8:37:05:a2:24:56:15:f1:18:ec:1a: af:12:7c:7d:1d:ff:2a:64:3c:ae:78:f9:e5:9f:74: f7:27:26:72:99:ae:f2:9d:fc:1d:5e:6d:c4:a3:2b: 59:cf:9d:ed:c1:fc:90:61:21:64:2e:38:33:9d:8e: b0:85:7d:5e:8f:1f:fe:bb:99:46:ce:a4:f9:72:b6: 6c:42:59:44:02:43:ef:1d:53:69:fb:9b:2c:86:58: f3:f7:81:0a:98:ec:82:10:83:24:2a:53:88:f2:88: b5:97:58:91:1a:96:03:ce:91:53:a3:1f:39:a5:53: 58:a0:aa:0d:13:44:62:58:0f:37:e5:43:97:53:53: e8:06:48:d7:f5:f3:81:7d:41:68:89:5c:d8:5d:2d: f2:3c:21:37:aa:8c:d9:26:a2:d6:37:ce:29:ff:cb: 76:41:06:10:5a:80:21:c2:3c:9b:a7:1d:69:28:96: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:A7:15:CE:A8:71:49:9D:03:E9:56:41:DA:B4:70:ED:6C:EA:CB X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:50:b9:04:19:c5:b6:5a:e6:40:b9:8c:ef:f1:56:98:9d:fe: 6f:27:8c:40:9a:a7:63:5d:73:d6:35:31:70:0a:c3:22:88:e6: 6a:fe:16:13:66:09:c5:fe:8e:a1:f6:06:6a:0f:a1:51:5a:37: 6e:43:a8:0d:f1:51:56:2b:a0:9e:bb:89:8a:53:f4:d3:8e:34: 32:8e:5c:88:0f:cb:33:6f:37:6e:6d:51:4f:6b:8f:17:16:08: b4:5d:ac:12:8b:52:e4:7b:22:29:0f:63:d9:58:95:8b:cf:75: 2c:21:d7:7d:db:46:b1:bb:4f:0f:23:4c:c1:b1:ba:2b:04:d0: b5:ce:e0:28:c6:ad:0e:3b:56:a8:d0:2e:c9:1c:f4:e7:8f:95: ac:8d:7c:fe:8b:51:2e:89:c2:24:0a:11:84:09:c1:ae:4d:38: 67:de:9d:96:73:21:7a:6e:8d:6f:3d:19:eb:09:50:b6:df:4b: c7:1d:11:df:8a:7e:f7:97:48:10:96:bc:93:03:22:dd:99:e0: e6:c9:47:86:38:56:a0:8d:af:c6:40:13:fa:f7:27:11:c9:8c: a8:85:25:5c:fa:44:e7:32:77:5a:1a:59:c0:18:2e:c5:8d:2a: a6:4f:97:68:ee:79:4c:84:05:b8:51:86:94:7b:f6:14:22:c4: 1a:d8:ff:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjUwNjE0MTUwMTIyWhcNMjUwNjIxMTUwMTIyWjAYMRYwFAYD VQQDEw02ODRkOGVjMi01ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vxTE7L3J4NVY+4Ygu7fw0Ui6D18eyWq2FrQAigBdDX7DiNd34iaq9dOeIw4 TNi3CQjr8TJWwxmBmGccHE//Jf87iVrpUbQFNeIrUgd36DcFoiRWFfEY7BqvEnx9 Hf8qZDyuePnln3T3JyZyma7ynfwdXm3EoytZz53twfyQYSFkLjgznY6whX1ejx/+ u5lGzqT5crZsQllEAkPvHVNp+5sshljz94EKmOyCEIMkKlOI8oi1l1iRGpYDzpFT ox85pVNYoKoNE0RiWA835UOXU1PoBkjX9fOBfUFoiVzYXS3yPCE3qozZJqLWN84p /8t2QQYQWoAhwjybpx1pKJY3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxOpxXO qHFJnQPpVkHatHDtbOrLMB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtULkEGcW2WuZAuYzv8VaYnf5vJ4xAmqdjXXPWNTFwCsMiiOZq/hYT ZgnF/o6h9gZqD6FRWjduQ6gN8VFWK6Ceu4mKU/TTjjQyjlyID8szbzdubVFPa48X Fgi0XawSi1LkeyIpD2PZWJWLz3UsIdd920axu08PI0zBsborBNC1zuAoxq0OO1ao 0C7JHPTnj5WsjXz+i1EuicIkChGECcGuTThn3p2WcyF6bo1vPRnrCVC230vHHRHf in73l0gQlryTAyLdmeDmyUeGOFagja/GQBP69ycRyYyohSVc+kTnMndaGlnAGC7F jSqmT5do7nlMhAW4UYaUe/YUIsQa2P8g -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:23 2025 by rpki-client