$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: fGq9bCfiG5Lk0JXL71xmx69suvE/0wLp9UwPqGvSG7c= Subject key identifier: E3:5A:F8:ED:53:55:CF:8A:D3:24:5E:73:24:DF:DD:B4:6A:52:A0:20 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A0E Signing time: Thu 12 Jun 2025 19:37:09 +0000 Manifest this update: Thu 12 Jun 2025 19:37:09 +0000 Manifest next update: Thu 19 Jun 2025 19:37:09 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: ImU/HqeBXZv9W9GyVDse0WerNDb7DNnkuo1k3AVA99g=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Jun 12 19:37:09 2025 GMT Not After : Jun 19 19:37:09 2025 GMT Subject: CN=684b2c65-5f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:92:c8:c4:95:28:40:d7:b7:b0:a3:9f:92: 52:09:05:15:56:db:78:25:3a:a7:a4:ca:21:8e:66: e1:8d:c6:e3:e5:b0:d1:30:64:4d:b2:eb:2b:69:2c: 3c:98:5c:ff:93:fb:0a:d7:80:b2:15:38:2f:17:bc: 16:41:f4:74:76:72:12:d9:44:fe:0c:ed:a3:b9:c5: b9:70:0e:b0:f2:c9:3e:2f:68:10:f4:64:79:bf:f8: b1:9e:5d:48:55:03:cc:ef:b0:19:d5:ca:5f:2b:50: d0:7e:ea:b2:c5:9d:e9:a3:a0:07:20:2d:0d:bb:9f: ef:fc:7c:f9:f6:c0:96:ad:91:82:bc:1b:92:9f:a8: 5a:46:6d:77:f1:53:a8:41:06:fe:1a:52:61:8e:e2: 41:f3:90:6f:6a:f9:0d:98:e1:c6:1a:a0:19:22:62: 34:ae:ce:d4:a8:5c:44:1c:3d:38:29:d5:38:5f:a6: 35:07:65:35:fe:b5:8e:6b:ee:c7:92:3f:f4:f0:94: 76:de:ba:c0:0f:59:41:27:a6:25:12:85:fc:ea:d9: 79:a9:be:48:f9:ef:81:2a:72:f8:33:88:97:e2:b7: 0f:9b:ca:47:5b:0e:14:3f:eb:35:de:72:ae:14:39: be:60:06:3b:f0:bb:11:95:e0:9c:71:e2:0b:b2:25: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:F8:ED:53:55:CF:8A:D3:24:5E:73:24:DF:DD:B4:6A:52:A0:20 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0f:10:aa:4c:1a:7a:66:12:dd:0a:fd:ce:b3:af:d8:74:09: 17:e1:05:e7:d1:03:bc:47:62:98:6b:4b:2e:fe:60:3b:01:d3: d1:15:94:20:43:a0:5e:cd:94:fb:40:fd:8d:29:9c:8e:d9:f3: 79:21:cc:ce:e0:61:a4:9c:39:6d:1b:c8:55:02:22:4e:88:1f: 7d:02:d1:e2:a8:e9:aa:c1:e8:2a:85:38:b3:1a:90:c0:26:cf: b3:63:de:20:d4:45:73:15:a3:b9:c5:1a:17:d8:0b:72:89:dd: d4:59:a7:5e:ed:90:5f:8a:09:38:ea:b9:31:1b:85:f6:8a:15: d8:6b:ea:f5:f0:c2:0e:7f:7f:24:c0:5f:a3:bf:fc:89:7d:35: 18:d1:e2:4c:76:c0:c2:08:90:d9:a0:8a:9e:fb:99:da:07:24: d7:4d:47:d7:8b:26:78:4a:ff:07:32:20:7c:d4:fd:37:af:d3: 31:cd:f2:f4:d8:62:60:63:48:8f:7b:62:dd:82:16:08:ba:f0: 68:c5:4a:91:2d:66:18:59:a2:30:52:e0:67:9c:5c:a3:40:16: 13:38:41:06:87:cd:36:81:f2:5c:52:08:78:01:bf:22:23:53: da:9f:86:c0:26:9e:6d:f6:47:79:c6:f4:11:ac:45:ee:cc:98: 32:9b:2e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwNjEyMTkzNzA5WhcNMjUwNjE5MTkzNzA5WjAYMRYwFAYD VQQDEw02ODRiMmM2NS01ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGKSyMSVKEDXt7Cjn5JSCQUVVtt4JTqnpMohjmbhjcbj5bDRMGRNsusraSw8 mFz/k/sK14CyFTgvF7wWQfR0dnIS2UT+DO2jucW5cA6w8sk+L2gQ9GR5v/ixnl1I VQPM77AZ1cpfK1DQfuqyxZ3po6AHIC0Nu5/v/Hz59sCWrZGCvBuSn6haRm138VOo QQb+GlJhjuJB85BvavkNmOHGGqAZImI0rs7UqFxEHD04KdU4X6Y1B2U1/rWOa+7H kj/08JR23rrAD1lBJ6YlEoX86tl5qb5I+e+BKnL4M4iX4rcPm8pHWw4UP+s13nKu FDm+YAY78LsRleCcceILsiVHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONa+O1T Vc+K0yRecyTf3bRqUqAgMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPDxCqTBp6ZhLdCv3Os6/YdAkX4QXn0QO8R2KYa0su/mA7AdPRFZQg Q6BezZT7QP2NKZyO2fN5IczO4GGknDltG8hVAiJOiB99AtHiqOmqwegqhTizGpDA Js+zY94g1EVzFaO5xRoX2Atyid3UWade7ZBfigk46rkxG4X2ihXYa+r18MIOf38k wF+jv/yJfTUY0eJMdsDCCJDZoIqe+5naByTXTUfXiyZ4Sv8HMiB81P03r9MxzfL0 2GJgY0iPe2LdghYIuvBoxUqRLWYYWaIwUuBnnFyjQBYTOEEGh802gfJcUgh4Ab8i I1Pan4bAJp5t9kd5xvQRrEXuzJgymy6K -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:22 2025 by rpki-client