$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft File: L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json) Hash identifier: Ba5/6IJYiQKdvKoSoqy0t26rneHPIP0h802VuvcPRjM= Subject key identifier: 44:20:16:9E:99:0B:61:54:7C:18:89:06:16:AA:5D:DE:9F:BC:3D:26 Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 Certificate issuer: /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft Manifest number: 34A8 Signing time: Wed 06 Aug 2025 15:04:20 +0000 Manifest this update: Wed 06 Aug 2025 15:04:19 +0000 Manifest next update: Wed 13 Aug 2025 15:04:19 +0000 Files and hashes: 1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: MDuq7HFFTQLJOYZsX9AdOrrwWDW2SJb9cKCSrGz31fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111EE2, serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0 Validity Not Before: Aug 6 15:04:19 2025 GMT Not After : Aug 13 15:04:19 2025 GMT Subject: CN=68936ef4-7af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:73:ea:03:40:7b:a0:4f:6a:57:1d:48:2b: 7b:be:6b:2a:1a:db:34:18:15:7d:33:46:50:7f:de: 95:51:44:27:89:42:30:90:6e:07:35:73:2e:81:90: b1:27:36:77:f7:7d:13:9f:fb:a5:27:26:1c:25:72: c5:40:83:2f:86:40:36:d5:07:8f:9d:26:fb:60:09: 24:f3:f1:2a:fb:8e:58:27:9d:44:8c:cc:76:f6:be: 52:5a:9a:95:1c:94:db:b4:9c:27:d3:fe:4b:3d:27: 55:57:b6:ea:76:88:a6:e8:c5:bd:1c:7b:aa:31:3f: f7:62:e1:7f:aa:0f:58:cd:37:7f:ab:cf:cf:81:4c: 59:59:e8:2a:dc:ca:9c:f9:94:86:92:ca:86:47:a8: f1:81:b1:bc:5c:f0:c7:94:f2:96:c4:46:9a:5e:92: 90:3c:6c:e3:84:35:a6:1d:e2:8b:fc:f6:66:45:b8: 75:a7:2d:b9:b4:f3:25:e0:6d:56:bf:fd:bb:db:9e: 5b:e7:cc:e7:90:33:b0:04:f3:77:4a:63:d5:11:ae: 68:47:e8:f8:61:c5:38:4d:fd:1d:a6:c9:6f:c2:dd: 8b:ef:cf:30:66:08:cc:cc:9d:7f:41:40:9a:cf:32: 18:1c:c2:5e:d2:12:01:5a:ac:71:e5:61:f2:60:65: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:16:9E:99:0B:61:54:7C:18:89:06:16:AA:5D:DE:9F:BC:3D:26 X509v3 Authority Key Identifier: keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2b:49:ee:a0:e9:fb:cc:24:43:9d:46:04:48:1d:8e:12:60: 53:d8:38:db:f7:8b:bc:04:c9:89:86:e7:d3:4b:33:2b:38:f2: e9:2f:54:7a:95:aa:82:f3:8f:89:1d:6f:e6:9a:b8:2d:50:0c: 83:02:7f:35:da:59:fd:a3:6d:f3:4a:87:c7:a6:c5:0a:21:3a: 77:28:ae:80:cd:5d:57:df:6d:7f:58:b1:cb:10:0e:e6:6d:b7: 96:0a:c4:0f:3d:c0:31:c0:ae:54:13:bf:52:dc:91:92:c3:5f: 41:cf:74:ca:e4:ac:5d:13:0e:ad:0d:c6:67:cd:ca:b6:53:7b: 50:6d:db:ff:a9:4e:7c:36:73:15:45:9c:67:5c:96:08:7f:93: 5d:60:9a:37:e1:e7:6c:bc:e4:68:02:7f:e6:96:4d:5e:96:58: f7:18:55:28:39:73:3f:7a:2d:ba:80:9f:2d:2d:c3:60:36:85: f2:8a:36:c0:29:a8:e8:71:f1:d9:7c:a1:ee:ce:82:94:d3:01: 26:a9:57:8e:9b:0b:72:3b:bc:5b:4b:9a:36:d1:74:e2:56:85: 96:fa:e8:46:00:1c:d6:ac:61:cf:fa:a6:c7:b0:60:75:3a:f5: 05:a0:86:78:27:d4:cb:4f:1b:6f:0b:4d:11:40:5d:ac:d0:d3: 86:a0:90:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRTIxMTAvBgNVBAUTKDJGRUM0NEFGQzMzMURGOEE1QTYzQTJGNTg0MUU4MDlE OTdCMkY3RDAwHhcNMjUwODA2MTUwNDE5WhcNMjUwODEzMTUwNDE5WjAYMRYwFAYD VQQDEw02ODkzNmVmNC03YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfFz6gNAe6BPalcdSCt7vmsqGts0GBV9M0ZQf96VUUQniUIwkG4HNXMugZCx JzZ3930Tn/ulJyYcJXLFQIMvhkA21QePnSb7YAkk8/Eq+45YJ51EjMx29r5SWpqV HJTbtJwn0/5LPSdVV7bqdoim6MW9HHuqMT/3YuF/qg9YzTd/q8/PgUxZWegq3Mqc +ZSGksqGR6jxgbG8XPDHlPKWxEaaXpKQPGzjhDWmHeKL/PZmRbh1py25tPMl4G1W v/27255b58znkDOwBPN3SmPVEa5oR+j4YcU4Tf0dpslvwt2L788wZgjMzJ1/QUCa zzIYHMJe0hIBWqxx5WHyYGUxGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQgFp6Z C2FUfBiJBhaqXd6fvD0mMB8GA1UdIwQYMBaAFC/sRK/DMd+KWmOi9YQegJ2XsvfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVFMi80MjBGNjMwQTFE OUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0cGFZNkwxaEI2QW5aZXk5 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wteEVyOE14MzRwYVk2TDFoQjZBblpleTk5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVFMi80MjBGNjMwQTFEOUYxMUUyQTcyRkJCOEYwOEIwMkNEMi9MLXhFcjhNeDM0 cGFZNkwxaEI2QW5aZXk5OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFK0nuoOn7zCRDnUYESB2OEmBT2Djb94u8BMmJhufTSzMrOPLpL1R6 laqC84+JHW/mmrgtUAyDAn812ln9o23zSofHpsUKITp3KK6AzV1X321/WLHLEA7m bbeWCsQPPcAxwK5UE79S3JGSw19Bz3TK5KxdEw6tDcZnzcq2U3tQbdv/qU58NnMV RZxnXJYIf5NdYJo34edsvORoAn/mlk1ellj3GFUoOXM/ei26gJ8tLcNgNoXyijbA KajocfHZfKHuzoKU0wEmqVeOmwtyO7xbS5o20XTiVoWW+uhGABzWrGHP+qbHsGB1 OvUFoIZ4J9TLTxtvC00RQF2s0NOGoJDc -----END CERTIFICATE-----Generated at Thu Aug 7 11:22:22 2025 by rpki-client