$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: 4wwJEKkevt5h1yuNZV9p9uma+B8b2vEdWb5Abyoit0I= Subject key identifier: 0E:6D:DA:84:44:99:33:0F:9F:9A:AB:F4:1F:64:DC:53:E5:2E:0F:03 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0C63 Signing time: Sat 14 Jun 2025 18:25:39 +0000 Manifest this update: Sat 14 Jun 2025 18:25:39 +0000 Manifest next update: Sat 21 Jun 2025 18:25:39 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: 9LnyDS5HnJDsI9gj6rGtJQW4zuMsB1Jqoi4jywKXWvk=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: /Guh9JZ2GlA6fGHvz6IyFArNWYosj9/jyWCo/gIcAcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Jun 14 18:25:39 2025 GMT Not After : Jun 21 18:25:39 2025 GMT Subject: CN=684dbea3-1ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:92:ff:f9:b9:16:1a:5e:72:a5:e5:a7:fc: ce:10:90:fb:63:6c:51:80:95:d1:69:65:21:4d:07: 9b:99:1f:bc:81:9f:32:da:9f:e9:ce:1f:a2:ba:a4: 88:7d:fe:65:b2:cc:94:13:06:d1:96:95:5c:c3:4a: 9d:23:ab:fc:3a:65:ac:ea:64:73:de:2d:3e:f2:a9: 69:9e:70:fd:ed:9f:1d:e4:d7:4d:98:a4:26:88:d5: 6b:d4:46:3a:93:81:26:0a:7b:a0:de:96:e8:13:70: f7:4b:52:fd:f8:04:60:b3:d2:2e:ea:6e:0a:fb:b1: ca:2e:ac:62:42:d5:55:ea:d4:1b:79:7c:ce:8f:85: 0f:f5:1a:3c:1f:1c:c8:5f:23:a6:a2:4a:32:2e:33: fb:e4:ed:81:5c:2b:bf:4a:e4:d3:b9:71:76:73:7d: c6:8a:ed:2f:ca:94:da:8a:45:ec:88:75:7c:87:9b: 45:9f:73:bb:e0:40:1b:8a:0a:24:1e:0a:17:c9:91: 90:42:cf:d1:8a:4c:85:c1:21:ca:bb:11:28:25:3b: 45:78:9b:87:23:a2:7c:8a:19:cd:08:0b:ef:bd:1b: c7:7e:62:f3:cb:a8:6a:42:32:65:ce:52:20:ab:51: 6c:b5:d2:04:7e:c8:7c:fe:0b:6d:6d:8e:99:b5:de: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:DA:84:44:99:33:0F:9F:9A:AB:F4:1F:64:DC:53:E5:2E:0F:03 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:4c:78:29:c9:91:44:1d:41:5e:cf:7d:4f:f2:69:87:47: a4:d0:41:40:af:62:c5:ac:94:60:fe:20:d0:fe:79:dd:28:35: e7:ff:0d:f4:2c:fe:3b:aa:c1:d2:c1:f2:62:f9:a1:65:b3:27: 55:6b:69:c3:c3:b2:63:57:50:15:6b:a1:a1:2e:cc:ba:e2:24: 7b:b8:84:81:5b:c0:03:80:9c:1c:43:27:1f:24:23:87:f2:33: 65:0f:90:b1:e2:86:4c:10:94:0f:c6:3b:21:41:a4:4e:9b:c6: 90:bd:6e:97:30:5b:58:c1:af:d9:a6:70:fd:fb:86:42:3c:c3: fc:95:a6:a2:31:66:92:b1:be:b9:5c:3c:3d:c9:d1:27:be:e9: 5c:2f:5e:8d:35:4c:7b:19:9b:a7:73:c9:be:ec:dd:f1:cb:1a: c4:39:d7:22:93:c2:d9:f0:74:81:0d:32:c2:c6:23:3a:41:72: 46:be:fd:4c:d5:cc:40:3c:c9:e0:72:8b:2f:ef:53:63:61:fd: 90:65:8d:94:b0:94:57:27:0f:19:4f:38:72:9a:6c:22:6e:47: cd:8f:00:59:76:39:75:73:b8:e0:8e:42:7d:80:af:a4:1e:98: 75:b1:07:a4:ab:b6:b5:35:8f:83:fa:74:f9:e0:cf:04:db:9f: 21:4e:07:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjUwNjE0MTgyNTM5WhcNMjUwNjIxMTgyNTM5WjAYMRYwFAYD VQQDEw02ODRkYmVhMy0xZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51yS//m5FhpecqXlp/zOEJD7Y2xRgJXRaWUhTQebmR+8gZ8y2p/pzh+iuqSI ff5lssyUEwbRlpVcw0qdI6v8OmWs6mRz3i0+8qlpnnD97Z8d5NdNmKQmiNVr1EY6 k4EmCnug3pboE3D3S1L9+ARgs9Iu6m4K+7HKLqxiQtVV6tQbeXzOj4UP9Ro8HxzI XyOmokoyLjP75O2BXCu/SuTTuXF2c33Giu0vypTaikXsiHV8h5tFn3O74EAbigok HgoXyZGQQs/RikyFwSHKuxEoJTtFeJuHI6J8ihnNCAvvvRvHfmLzy6hqQjJlzlIg q1FstdIEfsh8/gttbY6Ztd7uQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5t2oRE mTMPn5qr9B9k3FPlLg8DMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcQkx4KcmRRB1BXs99T/Jph0ek0EFAr2LFrJRg/iDQ/nndKDXn/w30 LP47qsHSwfJi+aFlsydVa2nDw7JjV1AVa6GhLsy64iR7uISBW8ADgJwcQycfJCOH 8jNlD5Cx4oZMEJQPxjshQaROm8aQvW6XMFtYwa/ZpnD9+4ZCPMP8laaiMWaSsb65 XDw9ydEnvulcL16NNUx7GZunc8m+7N3xyxrEOdcik8LZ8HSBDTLCxiM6QXJGvv1M 1cxAPMngcosv71NjYf2QZY2UsJRXJw8ZTzhymmwibkfNjwBZdjl1c7jgjkJ9gK+k Hph1sQekq7a1NY+D+nT54M8E258hTgc8 -----END CERTIFICATE-----Generated at Sun Jun 15 07:24:12 2025 by rpki-client