$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: dPiMixdIVEKAsIzHshsZpqmhI0oGPvuLeUQNMNLuN9s= Subject key identifier: 65:53:98:F9:B6:71:90:F5:E7:59:1B:41:D4:1D:45:B7:C5:23:00:E6 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 34D9 Signing time: Sun 10 Aug 2025 14:45:12 +0000 Manifest this update: Sun 10 Aug 2025 14:45:12 +0000 Manifest next update: Sun 17 Aug 2025 14:45:12 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: +Fm3UykF08gSBt812ypKREI+gJ/OfU/nLn6nGWasjyk=) 2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: 23SEH6GtkOoGPdeGncTiVPXSvJeVSMOWjmIg/9JChj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Aug 10 14:45:12 2025 GMT Not After : Aug 17 14:45:12 2025 GMT Subject: CN=6898b078-a1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:6d:3b:73:61:78:dc:96:99:93:0d:50:f7: 4b:17:76:0a:1c:db:3b:bd:1e:9d:4e:e0:6f:b2:c6: 7c:29:dc:8f:c4:db:53:a9:f9:ce:50:03:a2:f6:9b: 8f:db:9e:59:9d:6a:46:f5:c9:3d:29:b6:7e:ba:ce: ba:f1:a6:5c:3c:8c:e7:40:72:2a:a5:ae:bf:85:e2: e0:36:1c:44:41:20:a2:34:56:b7:fe:6f:fa:b9:04: e5:9f:dd:ae:9d:2e:e8:e7:4c:c2:5e:2f:d1:d9:1c: 10:a4:3d:b1:d6:0f:99:fc:f7:0b:0b:44:c6:e6:45: 11:c3:5c:be:df:90:8e:15:28:cc:92:b7:7a:50:06: ef:34:4c:53:90:0d:1e:18:f2:60:57:99:dd:67:d1: d3:29:76:ab:92:61:bd:e2:ca:da:2a:b2:09:e7:f3: ec:40:d8:5d:f5:09:cb:27:45:60:59:af:ec:e4:19: f8:cc:16:5e:11:0e:93:9b:1d:8b:88:46:3b:00:16: b1:82:0e:a3:9f:6e:da:dd:57:d2:86:8c:1d:27:33: c8:f2:f9:b7:9d:43:ba:f4:b6:89:78:3b:ff:9e:1c: c8:05:5c:f9:1c:ca:c3:ce:98:08:68:50:1b:cb:25: b6:6d:6c:d4:b7:bf:9d:fb:c9:f9:67:c7:95:38:1d: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:98:F9:B6:71:90:F5:E7:59:1B:41:D4:1D:45:B7:C5:23:00:E6 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:09:58:85:ef:2f:1e:8b:c8:4e:6e:c8:5b:df:d1:e9:e1: 5b:92:ca:48:b3:2c:6d:0b:08:18:97:d6:84:ec:17:86:77:c9: 12:dd:d6:28:5e:fe:b0:af:b4:9f:bc:fa:5d:59:a1:27:76:e6: 6d:ab:49:5a:f1:db:f5:b7:b4:bc:84:8a:5a:fb:3a:17:30:01: a8:5f:35:98:1b:01:db:d9:2d:a4:fc:7b:4d:36:10:f5:a4:bc: cd:b0:f7:22:a9:69:22:cc:20:36:eb:85:64:3c:a5:fc:b5:2c: a3:37:f1:cb:0b:4e:8a:86:95:13:0d:e7:05:c6:1f:fe:48:93: 38:98:aa:d2:66:6d:6f:b6:73:f2:3d:cd:29:24:a4:e4:6f:9b: 0b:74:33:d3:22:a5:00:16:f2:29:ee:d6:cd:37:3c:db:ff:47: 98:58:53:53:33:60:8e:b2:f7:d5:cc:6c:a5:66:76:95:ee:67: 50:8d:99:9f:5c:3f:61:f7:c2:46:b5:d6:89:4a:ac:ba:f1:81: e4:f1:00:8c:82:0e:af:a8:ca:8a:87:83:b8:0f:69:80:44:7b: f4:f1:a2:7b:dc:bf:c9:ec:f2:8b:33:bf:3b:7d:d1:95:52:af: 48:1d:d5:19:a0:4a:1d:e7:be:4c:45:51:6f:0b:dc:e1:40:f8: 09:92:44:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwODEwMTQ0NTEyWhcNMjUwODE3MTQ0NTEyWjAYMRYwFAYD VQQDEw02ODk4YjA3OC1hMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+xtO3NheNyWmZMNUPdLF3YKHNs7vR6dTuBvssZ8KdyPxNtTqfnOUAOi9puP 255ZnWpG9ck9KbZ+us668aZcPIznQHIqpa6/heLgNhxEQSCiNFa3/m/6uQTln92u nS7o50zCXi/R2RwQpD2x1g+Z/PcLC0TG5kURw1y+35COFSjMkrd6UAbvNExTkA0e GPJgV5ndZ9HTKXarkmG94sraKrIJ5/PsQNhd9QnLJ0VgWa/s5Bn4zBZeEQ6Tmx2L iEY7ABaxgg6jn27a3VfShowdJzPI8vm3nUO69LaJeDv/nhzIBVz5HMrDzpgIaFAb yyW2bWzUt7+d+8n5Z8eVOB0ozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVTmPm2 cZD151kbQdQdRbfFIwDmMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYiwlYhe8vHovITm7IW9/R6eFbkspIsyxtCwgYl9aE7BeGd8kS3dYo Xv6wr7SfvPpdWaEnduZtq0la8dv1t7S8hIpa+zoXMAGoXzWYGwHb2S2k/HtNNhD1 pLzNsPciqWkizCA264VkPKX8tSyjN/HLC06KhpUTDecFxh/+SJM4mKrSZm1vtnPy Pc0pJKTkb5sLdDPTIqUAFvIp7tbNNzzb/0eYWFNTM2COsvfVzGylZnaV7mdQjZmf XD9h98JGtdaJSqy68YHk8QCMgg6vqMqKh4O4D2mARHv08aJ73L/J7PKLM787fdGV Uq9IHdUZoEod575MRVFvC9zhQPgJkkR1 -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:06 2025 by rpki-client