$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: 8d443zBLKldqNNY1oupGM/Bnko7fhhlH/KUxtL0PrXI= Subject key identifier: 6B:1D:63:F8:97:CD:35:38:7D:EA:5A:8E:1B:FC:B0:06:35:4B:8D:FA Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 0A2B Signing time: Fri 08 Aug 2025 20:04:53 +0000 Manifest this update: Fri 08 Aug 2025 20:04:52 +0000 Manifest next update: Fri 15 Aug 2025 20:04:52 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: cXYkKdHeRAvQdXe89Q5iBF1VHX4Ka7WVllz6ZTQtUKI=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: v31hx7pnoT1x1labmZhnEXrmOdmMDEQ40w+RQf8muiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063, serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: Aug 8 20:04:52 2025 GMT Not After : Aug 15 20:04:52 2025 GMT Subject: CN=68965864-4699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:0d:05:d7:05:62:6c:d8:75:20:06:2c:7f: b7:e9:ef:cb:10:b8:4d:ae:a2:91:d9:48:64:60:7e: 05:d6:6d:85:58:ac:f4:0a:f6:f5:a4:f7:8e:24:d3: 2e:c1:d3:af:77:56:a3:51:8c:7c:c2:47:0e:31:fb: 8a:f4:f5:be:56:b9:6c:4a:7b:b2:da:f4:99:f9:dc: c1:f6:6a:39:c2:3f:a6:af:d8:f1:6d:26:f1:ae:a6: 4b:d1:1e:b2:97:51:c6:1e:9f:c5:2e:09:42:95:2a: 4f:1e:de:bf:3a:64:2c:04:b4:ba:39:47:8f:dc:71: 96:2f:d2:5a:22:d3:8d:d0:f7:21:ae:80:59:b7:e6: 3e:a4:29:fd:3c:5c:70:12:53:bd:a4:06:f8:45:08: 1e:a9:56:c4:b0:21:33:83:ee:1f:e5:98:14:de:15: 39:56:ff:f8:62:77:8a:86:91:6b:ca:74:5e:da:c5: 8e:58:ce:8d:82:59:fd:ac:bb:48:d1:bf:9c:7a:95: f7:58:aa:77:a4:4e:66:5d:3c:7d:35:12:d3:fa:78: 26:ec:ac:f5:84:b7:87:2b:06:d5:36:87:22:0d:0a: b2:f4:c2:3a:38:30:1d:4d:db:13:55:56:40:ba:be: 67:84:47:2f:ce:5e:18:01:31:55:d0:72:03:a0:a4: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1D:63:F8:97:CD:35:38:7D:EA:5A:8E:1B:FC:B0:06:35:4B:8D:FA X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:41:40:bf:a9:de:a0:25:59:86:47:31:85:b5:c0:7e:4d:71: 2d:e5:43:eb:7f:7d:79:a1:c6:69:b0:df:e3:96:ba:47:c0:d0: e2:53:01:ef:57:5b:5a:ba:02:22:b9:cd:a5:34:cb:fd:50:a1: 3f:74:90:89:22:29:9d:54:0b:50:75:10:ef:0b:82:7f:bd:c1: f3:05:6e:8d:6b:70:34:0b:0f:93:76:c9:16:6d:34:cc:fa:8d: 08:ab:23:3f:41:ae:f2:69:59:10:96:f5:88:6d:b5:ad:d3:21: 47:00:a8:4f:55:ac:ed:c9:c5:8c:24:9a:a8:89:01:72:92:ba: 5d:96:3a:5d:23:d6:75:95:3a:dc:54:61:a4:dc:d5:fd:e7:9c: aa:b3:1f:0a:9c:03:ca:26:6d:8a:fa:d1:70:f1:4c:de:e6:9e: 19:2a:41:e1:f5:b2:ad:a8:b5:ff:97:18:9c:1b:83:6c:6e:f2: c8:4b:e7:ac:6f:82:ad:73:8f:18:b7:af:df:df:ac:00:d2:1c: b3:27:78:ee:fd:b2:e6:c0:ce:5e:22:b1:f5:b5:41:82:f5:e2: c5:4d:81:77:60:c7:01:27:66:39:73:d5:d0:20:d3:b5:10:ff: e9:59:fb:18:15:56:fb:f6:a0:d7:de:d7:a1:87:69:33:7d:b7: ed:2b:cf:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjUwODA4MjAwNDUyWhcNMjUwODE1MjAwNDUyWjAYMRYwFAYD VQQDEw02ODk2NTg2NC00Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3MNBdcFYmzYdSAGLH+36e/LELhNrqKR2UhkYH4F1m2FWKz0Cvb1pPeOJNMu wdOvd1ajUYx8wkcOMfuK9PW+VrlsSnuy2vSZ+dzB9mo5wj+mr9jxbSbxrqZL0R6y l1HGHp/FLglClSpPHt6/OmQsBLS6OUeP3HGWL9JaItON0PchroBZt+Y+pCn9PFxw ElO9pAb4RQgeqVbEsCEzg+4f5ZgU3hU5Vv/4YneKhpFrynRe2sWOWM6Ngln9rLtI 0b+cepX3WKp3pE5mXTx9NRLT+ngm7Kz1hLeHKwbVNociDQqy9MI6ODAdTdsTVVZA ur5nhEcvzl4YATFV0HIDoKTgUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsdY/iX zTU4fepajhv8sAY1S436MB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhQUC/qd6gJVmGRzGFtcB+TXEt5UPrf315ocZpsN/jlrpHwNDiUwHv V1taugIiuc2lNMv9UKE/dJCJIimdVAtQdRDvC4J/vcHzBW6Na3A0Cw+TdskWbTTM +o0IqyM/Qa7yaVkQlvWIbbWt0yFHAKhPVaztycWMJJqoiQFykrpdljpdI9Z1lTrc VGGk3NX955yqsx8KnAPKJm2K+tFw8Uze5p4ZKkHh9bKtqLX/lxicG4NsbvLIS+es b4Ktc48Yt6/f36wA0hyzJ3ju/bLmwM5eIrH1tUGC9eLFTYF3YMcBJ2Y5c9XQINO1 EP/pWfsYFVb79qDX3tehh2kzfbftK89y -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:33 2025 by rpki-client