$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: b4afSioMFkUVvtrv7g1/CZ14oylPFxrp2FTMUh8HqAE= Subject key identifier: 5D:47:56:2E:8C:96:DA:BA:A2:DC:CF:89:E3:4B:07:0D:3A:69:F1:7B Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 3496 Signing time: Sat 26 Apr 2025 14:46:01 +0000 Manifest this update: Sat 26 Apr 2025 14:46:00 +0000 Manifest next update: Sat 03 May 2025 14:46:00 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: YMu5rVsm5ycTvqx/B/Iqe1gXjkeRTIFUZfl2nMISxuM=) 2: 90A91764A0C711EF99B35119C4F9AE02.roa (hash: IFfgeNWOmW48wT5wG379TZhXBQiEXiYFADpsIgQ6k3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Apr 26 14:46:00 2025 GMT Not After : May 3 14:46:00 2025 GMT Subject: CN=680cf1a8-9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:55:b2:b3:b0:ec:ac:00:e2:fd:ce:b5:c8: 83:b3:df:6f:a0:7a:83:ea:01:0a:0d:2d:11:19:57: 2d:ac:32:b8:d7:bc:06:ae:2c:b3:40:5d:f1:57:36: 89:3c:4a:3f:25:1f:0b:90:5a:36:12:dd:10:d6:2b: 6c:8f:34:d0:13:78:6c:c6:c5:93:b4:3d:51:f2:2b: 9d:88:4b:5d:de:ae:7b:b8:b9:82:4f:e5:17:83:64: 88:a6:ab:80:c4:5f:37:da:cf:0b:cd:08:30:16:07: 2a:7a:65:fb:91:a6:01:4a:7f:01:55:17:f0:89:a5: 48:bc:6d:30:2f:41:97:a2:e1:da:ed:1c:be:b9:49: 49:10:a6:6c:ce:0e:35:e8:e3:14:f1:7c:6c:f4:ad: 63:47:c8:c4:91:63:c5:1a:06:49:c4:51:b0:ae:c5: d5:36:ed:18:01:e0:21:1a:4a:fb:ae:2d:aa:89:f5: de:9d:06:5c:de:df:5e:61:ac:9f:50:8c:ec:74:c0: 03:1d:35:51:c5:e0:c2:0d:6e:f8:44:15:bf:1a:08: fb:6b:0d:18:3d:da:e0:1f:91:e8:74:0e:7c:13:3f: 97:4d:ba:98:82:26:8b:a5:55:0a:4c:1a:06:b5:e8: 9e:cf:ba:84:a0:c6:e6:c1:b0:74:b5:2e:1b:d8:b5: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:56:2E:8C:96:DA:BA:A2:DC:CF:89:E3:4B:07:0D:3A:69:F1:7B X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:36:7b:7d:ba:65:18:55:f5:9c:6c:de:68:51:31:7b:f7: ba:81:6b:0f:f5:74:39:78:44:b6:90:09:4d:35:98:22:45:4b: a9:97:29:dc:1c:4c:c3:82:f9:93:db:fe:f1:e7:f9:b1:a4:7e: 9e:55:e8:7a:8b:33:39:b8:47:a7:3b:a5:c5:c1:fd:71:c7:bc: 56:16:d5:c6:6a:04:14:79:8e:f4:bb:d5:86:db:75:bd:59:cb: c7:1a:68:e4:84:22:49:85:ad:a5:aa:86:b7:4f:b3:25:7e:a6: 17:2c:c2:f6:69:37:07:8b:f2:bb:bd:ea:89:5d:6e:dd:fe:5a: 24:34:2f:86:5f:c0:34:e9:e8:08:90:c0:aa:1d:d6:ee:1e:9e: e5:51:e3:6b:2d:44:7c:f2:4d:cb:65:fc:f2:41:c5:8e:0d:e2: 93:b7:7d:58:87:f9:15:bb:32:06:0b:7e:1c:ef:7a:3d:bb:33: b2:df:6a:5b:58:2b:53:84:dc:da:a2:cf:ee:96:3a:5b:0c:06: d9:f1:58:0f:d3:cc:de:21:0e:1a:0a:f3:8a:75:c3:8e:2c:21: e3:33:c1:fd:ed:62:52:70:ed:57:62:f2:76:3a:64:f1:84:68: 79:0d:89:14:be:70:54:d3:26:f7:cb:b4:43:ec:cf:20:18:f7: a0:a3:05:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwNDI2MTQ0NjAwWhcNMjUwNTAzMTQ0NjAwWjAYMRYwFAYD VQQDEw02ODBjZjFhOC05YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FRVsrOw7KwA4v3OtciDs99voHqD6gEKDS0RGVctrDK417wGriyzQF3xVzaJ PEo/JR8LkFo2Et0Q1itsjzTQE3hsxsWTtD1R8iudiEtd3q57uLmCT+UXg2SIpquA xF832s8LzQgwFgcqemX7kaYBSn8BVRfwiaVIvG0wL0GXouHa7Ry+uUlJEKZszg41 6OMU8Xxs9K1jR8jEkWPFGgZJxFGwrsXVNu0YAeAhGkr7ri2qifXenQZc3t9eYayf UIzsdMADHTVRxeDCDW74RBW/Ggj7aw0YPdrgH5HodA58Ez+XTbqYgiaLpVUKTBoG teiez7qEoMbmwbB0tS4b2LUJ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1HVi6M ltq6otzPieNLBw06afF7MB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOrjZ7fbplGFX1nGzeaFExe/e6gWsP9XQ5eES2kAlNNZgiRUuplync HEzDgvmT2/7x5/mxpH6eVeh6izM5uEenO6XFwf1xx7xWFtXGagQUeY70u9WG23W9 WcvHGmjkhCJJha2lqoa3T7MlfqYXLML2aTcHi/K7veqJXW7d/lokNC+GX8A06egI kMCqHdbuHp7lUeNrLUR88k3LZfzyQcWODeKTt31Yh/kVuzIGC34c73o9uzOy32pb WCtThNzaos/uljpbDAbZ8VgP08zeIQ4aCvOKdcOOLCHjM8H97WJScO1XYvJ2OmTx hGh5DYkUvnBU0yb3y7RD7M8gGPegowU0 -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:34 2025 by rpki-client