$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: pU/Dum58KftvviV1n2eMFBpJXrnKr4sU35Ppot56UHs= Subject key identifier: E5:DF:D7:62:E4:5C:FD:F3:FD:E1:12:05:8C:67:92:3B:D5:A9:E5:3D Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 0779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 076F Signing time: Thu 24 Apr 2025 21:21:31 +0000 Manifest this update: Thu 24 Apr 2025 21:21:30 +0000 Manifest next update: Thu 01 May 2025 21:21:30 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: BWJDGiFB9zU1a4t6XObwsjn4HEkJDvzJkf0d6mQt0BY=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Apr 24 21:21:30 2025 GMT Not After : May 1 21:21:30 2025 GMT Subject: CN=680aab5a-3f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:35:f1:ef:ee:d3:41:33:8e:d2:df:15:6c:25: 1f:78:54:c5:39:49:9e:e9:40:7e:46:69:a0:fa:9e: e6:00:82:e2:5b:e1:01:0f:23:c6:9f:66:99:6b:e6: 9a:a6:dd:6c:cc:17:8c:90:d3:4d:dc:e9:bb:43:9c: 2e:05:1d:3b:ec:ae:56:5e:8f:9d:9c:50:ab:cd:61: f4:db:b8:1d:0a:91:ba:4c:a0:c7:42:19:2c:9c:5d: 3c:47:09:a8:41:df:13:44:5b:0d:7d:5f:8d:2b:c6: be:65:85:f5:54:a9:04:ad:dd:8a:a3:f0:cc:86:6e: 2d:86:78:95:66:18:f3:38:c2:f2:c7:09:59:bf:59: fa:f5:37:fa:41:2e:25:81:9f:7d:cf:62:82:dc:07: 0d:87:8c:83:d1:f8:ba:a6:11:aa:dd:30:90:27:98: e1:df:47:67:2f:f2:4b:96:22:34:8b:92:a6:9d:8e: dc:50:1b:d1:78:c2:a9:47:c5:79:04:47:37:84:05: 2e:b5:83:e5:43:fb:20:4a:f7:0b:32:cd:58:a4:00: 5f:52:56:3d:9e:4b:c7:6a:9b:8b:ae:f0:6e:ad:95: 2d:e0:a0:d1:40:7a:9e:75:f1:69:c1:72:e4:05:c8: c8:b3:40:1d:33:ad:9a:dc:9c:76:db:92:e7:43:73: 30:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:D7:62:E4:5C:FD:F3:FD:E1:12:05:8C:67:92:3B:D5:A9:E5:3D X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:76:34:8d:82:e9:12:22:fe:af:a6:71:ea:da:ef:46:d7:5b: aa:f3:ec:9c:ae:4a:bb:a3:77:d5:80:f7:a6:70:b2:45:e3:43: 78:2c:a6:b7:a7:6f:73:ad:67:b2:34:01:24:6b:2c:05:b6:88: 4c:73:44:c2:c7:8a:f3:a4:d9:48:52:cd:d9:a3:27:04:69:f3: 6e:d8:14:71:48:d1:15:08:8d:8b:ec:ac:d0:e8:2e:ab:a6:e1: d3:c9:64:92:d9:0d:72:91:66:50:74:21:34:2f:5e:b2:ee:ac: 6e:da:bd:5b:b3:35:a8:ba:1b:e4:58:63:5b:5b:b9:81:e6:10: 20:2f:3f:44:e1:aa:f8:99:cd:0b:52:db:e3:38:92:b5:17:9a: ac:26:e0:37:a3:45:11:b5:d6:24:e3:03:f9:b9:b0:32:7c:9d: 74:e9:ac:ce:17:ce:80:8f:18:a2:ef:32:c2:84:c2:c2:30:d5: cf:8a:4a:2d:1b:00:8f:37:10:d1:ff:17:b0:f7:23:3a:c4:cc: cd:a1:a0:58:d2:3e:88:29:b0:f8:06:ba:2f:a3:6e:1d:95:a5: 2d:16:42:90:f4:5d:00:97:7a:38:15:5e:0c:99:e4:11:88:9d: 20:d8:97:a1:bb:d6:f6:98:e0:7d:fc:3a:b9:fe:76:9b:bb:8d: 57:7c:5d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNDI0MjEyMTMwWhcNMjUwNTAxMjEyMTMwWjAYMRYwFAYD VQQDEw02ODBhYWI1YS0zZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DXx7+7TQTOO0t8VbCUfeFTFOUme6UB+Rmmg+p7mAILiW+EBDyPGn2aZa+aa pt1szBeMkNNN3Om7Q5wuBR077K5WXo+dnFCrzWH027gdCpG6TKDHQhksnF08Rwmo Qd8TRFsNfV+NK8a+ZYX1VKkErd2Ko/DMhm4thniVZhjzOMLyxwlZv1n69Tf6QS4l gZ99z2KC3AcNh4yD0fi6phGq3TCQJ5jh30dnL/JLliI0i5KmnY7cUBvReMKpR8V5 BEc3hAUutYPlQ/sgSvcLMs1YpABfUlY9nkvHapuLrvBurZUt4KDRQHqedfFpwXLk BcjIs0AdM62a3Jx225LnQ3MwiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXf12Lk XP3z/eESBYxnkjvVqeU9MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCndjSNgukSIv6vpnHq2u9G11uq8+ycrkq7o3fVgPemcLJF40N4LKa3 p29zrWeyNAEkaywFtohMc0TCx4rzpNlIUs3ZoycEafNu2BRxSNEVCI2L7KzQ6C6r puHTyWSS2Q1ykWZQdCE0L16y7qxu2r1bszWouhvkWGNbW7mB5hAgLz9E4ar4mc0L UtvjOJK1F5qsJuA3o0URtdYk4wP5ubAyfJ106azOF86Ajxii7zLChMLCMNXPikot GwCPNxDR/xew9yM6xMzNoaBY0j6IKbD4Brovo24dlaUtFkKQ9F0Al3o4FV4MmeQR iJ0g2Jehu9b2mOB9/Dq5/nabu41XfF2H -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:31 2025 by rpki-client