$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: 6vFV5LyueeQZqZ/ivtMw1XY7blcsh7JjzzL09olnqEs= Subject key identifier: 34:66:6D:0D:77:BB:81:5E:5D:C2:E4:FC:4E:49:61:4D:3B:DB:96:D8 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 051E Signing time: Thu 12 Jun 2025 23:12:02 +0000 Manifest this update: Thu 12 Jun 2025 23:12:01 +0000 Manifest next update: Thu 19 Jun 2025 23:12:01 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: /lj9rSopjDE0TsZa4QzI806OuQ63tQd1ebhFcIOcF8Y=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: 9v3EHVS6OF29hHJXAC8+0BpNbFO1DRfm0tNrOjvIm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Jun 12 23:12:01 2025 GMT Not After : Jun 19 23:12:01 2025 GMT Subject: CN=684b5ec1-8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:ee:c1:74:9e:7e:80:cc:c3:d7:37:1d:fc: 98:9e:ce:c2:59:0e:39:6c:f6:0a:6f:78:2d:5c:be: 21:f7:cc:30:e7:6b:3e:3e:a8:7a:e3:5e:f4:8b:08: 2d:61:7b:fe:8f:65:e9:58:9d:2f:9c:4b:65:b1:6b: bc:12:be:84:0e:db:61:b4:4f:68:4e:ad:ae:87:e0: cd:2f:99:f9:fe:59:40:1b:92:ea:a6:1a:66:57:e3: cd:56:59:e7:46:66:a8:cc:c9:92:13:b9:45:23:04: 9f:9e:ac:03:d8:c9:6a:ad:27:79:ea:a0:fd:8a:10: 48:cb:5c:8f:7d:63:48:94:93:87:14:9f:83:d7:6b: 96:b2:64:56:c9:9b:f5:1e:e5:0b:59:1d:76:af:52: af:01:cf:a1:68:e7:ad:53:ad:65:49:42:40:68:30: f4:5a:82:cb:95:f8:56:68:c7:4b:b5:e1:02:3b:87: b7:3e:be:03:80:40:fb:20:f1:22:a0:41:fe:e8:4b: d3:68:f2:da:11:63:e1:84:03:9a:72:1b:87:de:e7: 1d:4a:99:d6:ac:96:63:b6:4e:7b:e5:a2:fd:5a:8b: f3:39:3d:53:d9:80:90:80:4a:b4:0b:a3:c2:c7:1b: d6:fe:c5:d5:8d:b0:62:d0:ee:78:2e:df:31:2c:e4: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:6D:0D:77:BB:81:5E:5D:C2:E4:FC:4E:49:61:4D:3B:DB:96:D8 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2c:24:02:69:6d:ff:27:3a:03:17:24:06:91:e3:d5:cb:c1: c2:71:64:f1:87:a2:dd:93:5c:60:e0:03:33:59:ea:b2:73:45: 3e:5e:44:92:f3:af:96:fb:34:89:0e:0f:1c:61:b7:ff:24:a3: 0c:11:78:2d:ec:d2:d9:a8:23:fa:1c:60:47:a9:f7:2b:bf:51: f4:02:11:02:e7:b6:10:b5:fb:87:ac:69:47:22:38:ae:71:4b: cb:e5:b6:2e:d1:df:32:bb:dc:f1:c9:5e:59:66:72:6e:f4:d5: ef:c4:85:f9:ba:51:4e:7f:6b:d9:a5:c3:c4:6e:aa:4e:98:f6: 93:ff:9d:39:f0:be:f6:8e:ae:ae:38:f1:8f:ba:d6:6e:4b:13: 66:2c:6b:21:6c:09:1d:20:e7:76:8d:e4:cb:98:0d:59:93:27: 59:1f:70:e1:a0:59:6e:ab:93:90:0e:96:b2:30:d1:db:53:53: ef:84:26:0b:b9:83:ed:d0:17:89:64:ba:b0:8a:72:3d:eb:8a: 8d:fb:00:52:98:96:e2:5b:9d:9d:98:85:75:4f:4a:7a:08:49: c2:18:42:70:0f:f9:99:c0:69:3c:9a:a2:3d:81:1b:ca:8d:9a: 6e:02:d8:51:e3:2f:00:a1:37:55:64:73:3d:ce:f5:e4:24:56: eb:94:31:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUwNjEyMjMxMjAxWhcNMjUwNjE5MjMxMjAxWjAYMRYwFAYD VQQDEw02ODRiNWVjMS04ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zbuwXSefoDMw9c3HfyYns7CWQ45bPYKb3gtXL4h98ww52s+Pqh64170iwgt YXv+j2XpWJ0vnEtlsWu8Er6EDtthtE9oTq2uh+DNL5n5/llAG5LqphpmV+PNVlnn RmaozMmSE7lFIwSfnqwD2MlqrSd56qD9ihBIy1yPfWNIlJOHFJ+D12uWsmRWyZv1 HuULWR12r1KvAc+haOetU61lSUJAaDD0WoLLlfhWaMdLteECO4e3Pr4DgED7IPEi oEH+6EvTaPLaEWPhhAOachuH3ucdSpnWrJZjtk575aL9WovzOT1T2YCQgEq0C6PC xxvW/sXVjbBi0O54Lt8xLOTXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRmbQ13 u4FeXcLk/E5JYU0725bYMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBELCQCaW3/JzoDFyQGkePVy8HCcWTxh6Ldk1xg4AMzWeqyc0U+XkSS 86+W+zSJDg8cYbf/JKMMEXgt7NLZqCP6HGBHqfcrv1H0AhEC57YQtfuHrGlHIjiu cUvL5bYu0d8yu9zxyV5ZZnJu9NXvxIX5ulFOf2vZpcPEbqpOmPaT/5058L72jq6u OPGPutZuSxNmLGshbAkdIOd2jeTLmA1ZkydZH3DhoFluq5OQDpayMNHbU1PvhCYL uYPt0BeJZLqwinI964qN+wBSmJbiW52dmIV1T0p6CEnCGEJwD/mZwGk8mqI9gRvK jZpuAthR4y8AoTdVZHM9zvXkJFbrlDHN -----END CERTIFICATE-----Generated at Sat Jun 14 18:03:13 2025 by rpki-client