$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: ulgsoEDmbpXi5bn41IkXP8Z0c9AEchTXH3JYhCvsUZQ= Subject key identifier: E7:26:04:41:0B:8C:E5:ED:54:B6:D9:DC:4F:C3:AA:81:26:A6:3B:37 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 0789 Signing time: Mon 16 Jun 2025 21:12:27 +0000 Manifest this update: Mon 16 Jun 2025 21:12:26 +0000 Manifest next update: Mon 23 Jun 2025 21:12:26 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: tXv74oSYYNpchJtqb2zoyNGWysGUKFLWh4EESBaTalg=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Jun 16 21:12:26 2025 GMT Not After : Jun 23 21:12:26 2025 GMT Subject: CN=685088bb-1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:9d:be:78:c8:43:35:8d:a9:93:26:1f:80: 80:c3:b3:1e:ce:bd:4f:bb:82:fa:91:91:1b:62:93: c3:1e:ac:73:78:9e:98:c9:4f:0e:8f:86:75:86:70: 89:19:9e:dc:a0:a2:36:29:b9:48:09:c0:e0:13:24: 12:dc:ab:50:b1:e8:6d:74:fb:80:32:0c:29:af:6d: a7:36:04:91:8d:67:c8:59:4f:9b:8d:c1:69:6b:f9: 9e:57:ce:ee:2c:fd:2e:44:25:62:41:e0:e5:a7:64: 3b:5f:4c:98:26:f7:f0:c8:74:48:59:da:22:e7:5a: d4:d6:26:54:e4:3c:c3:d9:a0:f6:36:8f:cb:8f:81: 99:a4:1f:10:d1:72:ab:84:19:b3:98:b9:01:db:0b: 13:e8:af:6f:12:33:d1:6c:f2:d9:7c:a1:2a:67:c9: 9c:ba:b9:fb:f9:9b:03:de:8e:d9:50:6b:28:7e:54: fc:9f:22:d5:60:33:71:58:4a:5b:51:d2:02:ee:88: 53:81:6f:57:91:c2:1f:30:b7:ce:87:67:cc:9b:10: f3:a5:f0:55:cb:d7:ca:dd:bb:fe:47:3c:5a:55:2d: 06:d1:75:41:08:ee:1f:4e:a8:28:39:48:6a:1d:81: 1c:e8:5b:95:3f:fb:57:2a:04:3c:65:05:49:48:1c: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:26:04:41:0B:8C:E5:ED:54:B6:D9:DC:4F:C3:AA:81:26:A6:3B:37 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:06:b3:5f:e9:83:26:aa:a8:98:a9:25:53:50:db:98:25: f2:f2:80:a2:37:7a:a4:bf:e3:a0:f6:df:31:4c:af:23:a9:39: b4:44:eb:50:f0:9a:00:1c:ff:42:64:9f:59:a1:f4:80:6d:11: ef:8c:da:aa:ce:c1:5e:46:a4:6f:27:a0:e8:ec:a2:ea:ae:c4: 61:f0:f2:a5:e8:2b:79:38:97:12:7c:5c:58:d9:30:2e:ec:fa: d9:84:86:09:aa:10:05:f0:8a:33:57:15:68:4b:bb:00:8c:e6: 40:38:91:3d:ad:70:1e:6b:8d:1e:81:26:97:70:d7:83:66:c3: 75:7b:d1:90:db:9d:98:52:77:88:7e:42:6e:33:d7:90:7c:a7: 67:c8:81:81:31:ed:d4:7d:d3:1e:91:bb:35:67:c3:a6:b6:88: b9:d6:bf:07:0d:7e:81:30:f0:ba:c7:3d:a0:78:0f:f9:b9:65: 24:96:0d:92:ca:13:c2:36:35:6d:39:09:30:be:a1:4c:02:92: cf:2f:40:bc:c4:8e:7e:ca:58:6f:6c:a1:af:4b:65:99:ee:8c: ee:46:79:dc:12:d0:4f:c4:7c:e4:25:8b:9e:33:78:a6:a1:98: 22:2f:f7:cf:d3:d2:99:b3:84:55:4a:35:89:70:93:31:c7:24: 3c:73:e4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNjE2MjExMjI2WhcNMjUwNjIzMjExMjI2WjAYMRYwFAYD VQQDEw02ODUwODhiYi0xNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP6dvnjIQzWNqZMmH4CAw7Mezr1Pu4L6kZEbYpPDHqxzeJ6YyU8Oj4Z1hnCJ GZ7coKI2KblICcDgEyQS3KtQsehtdPuAMgwpr22nNgSRjWfIWU+bjcFpa/meV87u LP0uRCViQeDlp2Q7X0yYJvfwyHRIWdoi51rU1iZU5DzD2aD2No/Lj4GZpB8Q0XKr hBmzmLkB2wsT6K9vEjPRbPLZfKEqZ8mcurn7+ZsD3o7ZUGsoflT8nyLVYDNxWEpb UdIC7ohTgW9XkcIfMLfOh2fMmxDzpfBVy9fK3bv+RzxaVS0G0XVBCO4fTqgoOUhq HYEc6FuVP/tXKgQ8ZQVJSBzmgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcmBEEL jOXtVLbZ3E/DqoEmpjs3MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/cAazX+mDJqqomKklU1DbmCXy8oCiN3qkv+Og9t8xTK8jqTm0ROtQ 8JoAHP9CZJ9ZofSAbRHvjNqqzsFeRqRvJ6Do7KLqrsRh8PKl6Ct5OJcSfFxY2TAu 7PrZhIYJqhAF8IozVxVoS7sAjOZAOJE9rXAea40egSaXcNeDZsN1e9GQ252YUneI fkJuM9eQfKdnyIGBMe3UfdMekbs1Z8Omtoi51r8HDX6BMPC6xz2geA/5uWUklg2S yhPCNjVtOQkwvqFMApLPL0C8xI5+ylhvbKGvS2WZ7ozuRnncEtBPxHzkJYueM3im oZgiL/fP09KZs4RVSjWJcJMxxyQ8c+QJ -----END CERTIFICATE-----Generated at Wed Jun 18 11:47:29 2025 by rpki-client