$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: 6p+5+R3VA52Yj9oUaU6/3FawnkRNfkWpidRDLhQ4AE4= Subject key identifier: 07:81:A5:4A:1C:F8:2C:3E:38:EA:E3:6E:93:B5:FB:D1:11:F4:A4:1F Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 3472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 3472 Signing time: Thu 24 Apr 2025 15:02:24 +0000 Manifest this update: Thu 24 Apr 2025 15:02:24 +0000 Manifest next update: Thu 01 May 2025 15:02:24 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: NFP7mAApLfC6YYFYHptBiI4aiRcNXnL3k4WS9qy16Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13426 (0x3472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2, serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: Apr 24 15:02:24 2025 GMT Not After : May 1 15:02:24 2025 GMT Subject: CN=680a5280-06c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:a5:0d:5d:6a:99:6e:1a:ef:1f:32:0c:3a: a3:c0:49:9e:eb:e9:cc:66:9c:ce:8f:85:f0:e0:19: cc:50:eb:44:bb:29:e1:27:ab:ba:e0:93:f7:7d:dd: e0:e2:18:cf:e2:9a:b2:ac:78:a8:32:09:32:92:68: 43:7f:0e:60:21:be:84:e8:47:55:a6:84:10:dd:76: 1e:2b:ae:be:63:37:7c:f9:cc:06:95:0c:e1:2d:61: 3e:78:a9:7d:d2:cb:c0:23:39:7f:7c:b5:48:32:83: 89:5f:38:7c:fc:51:52:95:47:a4:43:cf:cd:79:ec: 1a:9a:5b:59:ef:79:73:00:2d:ff:92:c6:3d:93:83: ee:dc:e9:25:8c:2b:80:93:ed:fe:f6:6d:c8:c3:e5: f3:4d:e7:bb:f3:00:34:59:61:3b:d9:33:7b:94:3d: aa:71:69:0e:ee:cd:f2:9b:87:17:67:00:bc:29:e1: 1d:98:d7:a4:cf:ef:a1:ec:4c:cc:dd:41:38:e6:19: 2b:fa:58:b1:1b:40:b8:cf:61:e6:61:e0:03:16:73: fb:89:24:ae:35:00:19:ab:73:8e:c4:dc:af:56:40: a0:25:09:ac:9d:0c:4f:a3:29:df:f9:85:5f:de:2a: 5c:a6:21:d7:59:ac:3f:2b:0b:77:2c:78:31:a7:2b: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:81:A5:4A:1C:F8:2C:3E:38:EA:E3:6E:93:B5:FB:D1:11:F4:A4:1F X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4f:e2:21:33:ea:a3:6c:9b:c4:23:39:7a:bd:fb:65:52:90: 1d:97:6e:2d:c9:19:e5:3e:7d:0b:a5:0b:be:fa:5f:62:50:ff: b4:07:46:2a:4d:2a:20:43:30:8f:a7:0f:7a:0c:70:b5:c9:96: 74:08:86:6b:03:44:48:a9:15:a0:4f:1c:32:43:01:43:7c:26: a8:ab:b6:36:a0:1c:93:d3:04:89:ee:58:d7:93:e3:03:06:9f: 88:30:f7:22:8f:cc:8d:37:a8:56:eb:18:96:b6:28:2d:61:02: eb:83:58:4e:fd:fb:d7:9e:4b:f4:60:a4:48:a3:5b:a2:37:52: fe:ae:55:cb:eb:79:37:79:0e:66:12:09:a6:e2:fc:44:17:4e: 29:56:8d:3e:ab:cc:a9:64:09:1d:8f:34:20:99:97:b1:ed:2c: 8d:ce:eb:22:6a:3d:1c:e3:67:29:be:84:2f:69:4e:c0:ba:41: 72:b4:e8:a3:60:32:f4:ff:22:aa:e5:43:b7:1d:70:3a:b1:a3: 01:2e:c0:d4:00:11:03:bb:7d:ff:12:66:1a:eb:6d:7b:4b:0f: 51:e1:1a:be:29:e3:66:89:b9:ed:6b:83:44:9f:64:7a:22:86: 84:aa:35:1d:10:3b:e1:93:27:45:eb:9f:d2:ef:43:23:fe:fa: f2:03:3e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjUwNDI0MTUwMjI0WhcNMjUwNTAxMTUwMjI0WjAYMRYwFAYD VQQDEw02ODBhNTI4MC0wNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5GlDV1qmW4a7x8yDDqjwEme6+nMZpzOj4Xw4BnMUOtEuynhJ6u64JP3fd3g 4hjP4pqyrHioMgkykmhDfw5gIb6E6EdVpoQQ3XYeK66+Yzd8+cwGlQzhLWE+eKl9 0svAIzl/fLVIMoOJXzh8/FFSlUekQ8/NeewamltZ73lzAC3/ksY9k4Pu3OkljCuA k+3+9m3Iw+XzTee78wA0WWE72TN7lD2qcWkO7s3ym4cXZwC8KeEdmNekz++h7EzM 3UE45hkr+lixG0C4z2HmYeADFnP7iSSuNQAZq3OOxNyvVkCgJQmsnQxPoynf+YVf 3ipcpiHXWaw/Kwt3LHgxpytNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeBpUoc +Cw+OOrjbpO1+9ER9KQfMB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaT+IhM+qjbJvEIzl6vftlUpAdl24tyRnlPn0LpQu++l9iUP+0B0Yq TSogQzCPpw96DHC1yZZ0CIZrA0RIqRWgTxwyQwFDfCaoq7Y2oByT0wSJ7ljXk+MD Bp+IMPcij8yNN6hW6xiWtigtYQLrg1hO/fvXnkv0YKRIo1uiN1L+rlXL63k3eQ5m Egmm4vxEF04pVo0+q8ypZAkdjzQgmZex7SyNzusiaj0c42cpvoQvaU7AukFytOij YDL0/yKq5UO3HXA6saMBLsDUABEDu33/EmYa6217Sw9R4Rq+KeNmibnta4NEn2R6 IoaEqjUdEDvhkydF65/S70Mj/vryAz5N -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:01 2025 by rpki-client