$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: Eu4fVNas+EyOefpb3+x4UMOJf7T4WshwRJ1SgPN2EeE= Subject key identifier: F5:8E:EE:16:3F:9E:9B:66:CF:CE:B8:2B:3E:29:F9:8B:B1:24:07:4B Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 34BC Signing time: Sat 14 Jun 2025 14:45:27 +0000 Manifest this update: Sat 14 Jun 2025 14:45:27 +0000 Manifest next update: Sat 21 Jun 2025 14:45:27 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: YV+4AmHj5wghEDeb1zca5PBEjrAm3xylpm/gqHdHQLA=) 2: CBCF6A88358611F08913BB23C4F9AE02.roa (hash: 23SEH6GtkOoGPdeGncTiVPXSvJeVSMOWjmIg/9JChj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Jun 14 14:45:27 2025 GMT Not After : Jun 21 14:45:27 2025 GMT Subject: CN=684d8b07-6437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:93:90:06:1d:df:84:98:96:b0:38:f3:ef: ca:8c:b8:20:b9:6d:42:a1:4c:bb:94:65:b3:fb:21: 06:4d:89:a3:1d:ae:68:1a:16:ab:9b:af:3b:7e:d7: 7c:94:fc:1a:c0:cd:63:50:a0:1a:35:a9:61:02:59: 77:a3:f1:47:23:f4:53:51:be:b2:86:2f:4b:86:a1: dc:6e:bd:ed:b5:4c:0b:82:4c:c1:08:4a:51:80:92: 00:14:d4:aa:0a:d1:af:f8:4c:19:f7:33:97:c1:9d: e5:ae:fd:0d:21:1a:8f:88:71:24:45:8c:8f:65:45: b3:ea:5a:61:cd:df:28:0d:74:f7:72:a5:f9:59:8f: 38:f2:77:b5:91:91:6c:ec:19:74:e2:41:26:50:db: 0c:dd:f4:9b:e3:05:f1:f2:14:80:d6:09:ef:01:64: e6:0a:3e:e9:89:82:47:67:5d:3a:0c:18:50:91:37: bd:92:ae:e0:b2:a4:74:46:5f:e5:6d:54:f6:86:f3: 32:15:e7:33:0b:c3:42:27:c7:ce:a2:39:da:07:ed: c4:96:6f:4d:25:c2:7c:e7:ad:29:15:e2:5d:a8:d6: 13:7c:6c:e2:5e:8e:34:6f:dd:c9:a7:75:3e:a4:a0: 7c:16:f4:ae:b6:2d:52:b8:88:b6:fc:94:1f:9d:f7: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8E:EE:16:3F:9E:9B:66:CF:CE:B8:2B:3E:29:F9:8B:B1:24:07:4B X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:85:26:2b:b0:0c:87:dd:e6:32:da:32:4d:e0:e3:82:00:b2: 41:a7:e9:a1:0f:be:e2:87:b2:01:af:a5:1a:1b:02:f3:2d:01: 8c:e4:f0:1b:41:95:56:4f:41:97:b5:49:9a:75:ec:91:12:b1: 79:72:c8:65:af:6f:26:9a:cc:a0:91:96:b4:eb:d3:c2:bf:f9: a6:dd:26:de:fc:df:8a:18:05:14:47:b3:4a:bb:72:4d:92:b5: 68:14:4c:f6:90:cf:7c:51:1b:64:24:6d:4a:67:d7:93:2e:dc: db:db:3b:3f:e0:ac:11:32:36:cc:51:0a:3d:79:6f:42:8d:72: 7c:47:93:30:e2:9f:e6:9a:2b:f3:9a:01:6e:6f:c5:07:e4:98: 3f:91:be:05:a8:2f:2e:bb:8b:f6:60:42:41:38:eb:8d:52:39: f1:d4:30:20:80:08:85:2a:67:fb:9b:49:7d:cc:95:57:5f:31: 4f:e3:6d:59:07:11:07:fb:94:11:14:b9:fd:d4:1e:47:36:a0: e9:ea:0b:6c:0a:32:86:54:77:2c:c1:4d:a9:3c:97:0d:eb:65: 34:b6:a7:70:6a:92:67:bd:26:5c:d1:eb:6f:7c:5c:51:dc:9e: c1:c6:77:52:52:fd:8e:05:d6:3f:2d:ac:e1:01:4f:99:05:b5: 61:2c:4f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwNjE0MTQ0NTI3WhcNMjUwNjIxMTQ0NTI3WjAYMRYwFAYD VQQDEw02ODRkOGIwNy02NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFqTkAYd34SYlrA48+/KjLgguW1CoUy7lGWz+yEGTYmjHa5oGharm687ftd8 lPwawM1jUKAaNalhAll3o/FHI/RTUb6yhi9LhqHcbr3ttUwLgkzBCEpRgJIAFNSq CtGv+EwZ9zOXwZ3lrv0NIRqPiHEkRYyPZUWz6lphzd8oDXT3cqX5WY848ne1kZFs 7Bl04kEmUNsM3fSb4wXx8hSA1gnvAWTmCj7piYJHZ106DBhQkTe9kq7gsqR0Rl/l bVT2hvMyFeczC8NCJ8fOojnaB+3Elm9NJcJ8560pFeJdqNYTfGziXo40b93Jp3U+ pKB8FvSuti1SuIi2/JQfnfclbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWO7hY/ nptmz864Kz4p+YuxJAdLMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxhSYrsAyH3eYy2jJN4OOCALJBp+mhD77ih7IBr6UaGwLzLQGM5PAb QZVWT0GXtUmadeyRErF5cshlr28mmsygkZa069PCv/mm3Sbe/N+KGAUUR7NKu3JN krVoFEz2kM98URtkJG1KZ9eTLtzb2zs/4KwRMjbMUQo9eW9CjXJ8R5Mw4p/mmivz mgFub8UH5Jg/kb4FqC8uu4v2YEJBOOuNUjnx1DAggAiFKmf7m0l9zJVXXzFP421Z BxEH+5QRFLn91B5HNqDp6gtsCjKGVHcswU2pPJcN62U0tqdwapJnvSZc0etvfFxR 3J7BxndSUv2OBdY/LazhAU+ZBbVhLE8l -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:26 2025 by rpki-client