$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: Uo3t/U9fOk0QN94sHEjLtzyc4kxBeEh/bkZTqEfyACo= Subject key identifier: A8:D5:6C:0E:47:86:15:5D:40:22:C5:3D:17:84:4A:5C:71:6F:56:C9 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C4A Signing time: Thu 24 Apr 2025 18:31:24 +0000 Manifest this update: Thu 24 Apr 2025 18:31:23 +0000 Manifest next update: Thu 01 May 2025 18:31:23 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: sFHBE9fvOxVXsCrXY2Mj3DadIC+KXYbH/v1x8IYCsSQ=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Apr 24 18:31:23 2025 GMT Not After : May 1 18:31:23 2025 GMT Subject: CN=680a837b-e85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:df:af:b3:bc:9a:66:66:b6:39:5c:0d:bc: 7e:97:94:a1:c4:93:2d:41:d2:87:39:23:12:8b:5a: a2:29:c6:8b:ed:4b:e2:05:ef:0e:23:76:6c:a6:9f: 68:75:8c:f3:63:98:13:fc:a5:99:41:f4:68:51:68: 29:37:23:a0:e4:c1:1a:84:02:8b:a1:b9:86:ca:b9: aa:cc:2a:a6:d3:18:f1:b4:fb:82:5d:49:37:f3:62: 5b:f0:79:50:15:78:f6:d6:a7:c6:79:ab:ef:10:0d: bd:f9:cb:2b:d3:69:78:31:20:ba:df:a1:da:69:a9: 98:6e:56:66:1a:92:98:f8:65:4e:40:29:e8:fc:2d: b2:97:3a:88:b7:26:b9:57:10:69:ab:a1:ea:74:7e: 25:ba:18:fd:c0:0e:5d:a2:2a:19:20:90:ac:44:17: 7e:5d:9e:1a:5b:76:c6:a2:14:ac:38:c0:35:eb:eb: d4:d3:bb:31:fb:c2:81:cc:50:de:79:e3:2f:f0:54: b1:3e:9b:21:66:2b:a6:11:ee:f8:66:6e:7e:65:a3: 00:f3:f9:22:6a:d2:1e:e5:e4:5e:9a:64:58:b4:1a: 4b:f2:03:62:1d:aa:9c:79:69:eb:61:ec:51:34:64: 1a:bb:9d:28:73:9a:c5:78:00:01:3c:a1:5e:ae:10: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:6C:0E:47:86:15:5D:40:22:C5:3D:17:84:4A:5C:71:6F:56:C9 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6b:8d:a8:f5:c2:4e:68:92:34:a8:ee:73:92:99:30:4a:79: 49:b9:a1:8e:4a:54:31:63:49:86:80:55:44:7b:e3:6d:17:b5: e5:db:fb:07:90:05:21:7b:2c:91:a4:f9:16:0a:56:fe:df:38: 5d:c0:43:37:95:b4:16:e1:cf:fa:f6:70:ed:36:1b:ec:28:b2: ae:da:f1:a3:ea:80:c9:60:bf:91:b8:f9:58:1f:27:d3:54:74: 48:f4:41:6c:64:c4:56:a2:e6:5e:90:1a:24:00:02:b6:77:80: 5f:5c:28:aa:81:9f:ef:a4:7e:d2:86:e0:4f:71:a3:56:fb:6d: 70:6a:c3:f3:3e:af:0f:b8:f1:85:c7:0c:eb:5d:b1:ea:e0:85: 4f:18:aa:8c:18:c4:28:15:cd:b7:e2:75:c5:57:ce:a8:85:49: f8:dd:95:5b:0f:66:91:db:a4:2c:64:ec:9b:77:67:ea:54:45: 09:77:06:c7:be:c0:54:7f:c3:1c:07:19:b3:ed:0f:d5:25:c9: f7:96:56:db:8d:7b:e4:b1:a8:ec:27:57:95:f2:eb:2f:63:c2: af:58:2f:8c:f7:49:ac:07:ad:8d:00:0f:d9:27:df:c3:36:96: 76:08:fe:91:d4:61:0a:69:ea:7a:26:53:1e:60:7d:ed:b3:cc: fe:e7:a3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwNDI0MTgzMTIzWhcNMjUwNTAxMTgzMTIzWjAYMRYwFAYD VQQDEw02ODBhODM3Yi1lODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxDfr7O8mmZmtjlcDbx+l5ShxJMtQdKHOSMSi1qiKcaL7UviBe8OI3Zspp9o dYzzY5gT/KWZQfRoUWgpNyOg5MEahAKLobmGyrmqzCqm0xjxtPuCXUk382Jb8HlQ FXj21qfGeavvEA29+csr02l4MSC636HaaamYblZmGpKY+GVOQCno/C2ylzqItya5 VxBpq6HqdH4luhj9wA5doioZIJCsRBd+XZ4aW3bGohSsOMA16+vU07sx+8KBzFDe eeMv8FSxPpshZiumEe74Zm5+ZaMA8/kiatIe5eRemmRYtBpL8gNiHaqceWnrYexR NGQau50oc5rFeAABPKFerhBbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjVbA5H hhVdQCLFPReESlxxb1bJMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCla42o9cJOaJI0qO5zkpkwSnlJuaGOSlQxY0mGgFVEe+NtF7Xl2/sH kAUheyyRpPkWClb+3zhdwEM3lbQW4c/69nDtNhvsKLKu2vGj6oDJYL+RuPlYHyfT VHRI9EFsZMRWouZekBokAAK2d4BfXCiqgZ/vpH7ShuBPcaNW+21wasPzPq8PuPGF xwzrXbHq4IVPGKqMGMQoFc234nXFV86ohUn43ZVbD2aR26QsZOybd2fqVEUJdwbH vsBUf8McBxmz7Q/VJcn3llbbjXvksajsJ1eV8usvY8KvWC+M90msB62NAA/ZJ9/D NpZ2CP6R1GEKaep6JlMeYH3ts8z+56Mk -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:52 2025 by rpki-client