$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: 4gjFve88Jbl0wyBEi7nTy5pYhv4aYA1N1Xalk+Ti6eM= Subject key identifier: 1A:2A:E9:5E:41:75:77:30:EC:97:BC:2F:59:F4:65:7B:73:CA:AD:EE Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02B4 Signing time: Sun 15 Jun 2025 01:15:00 +0000 Manifest this update: Sun 15 Jun 2025 01:15:00 +0000 Manifest next update: Sun 22 Jun 2025 01:15:00 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 1WGKBDCdkx3ULXPcQCMbknaWDdgXxO/S3u3M9hdQ5p4=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jun 15 01:15:00 2025 GMT Not After : Jun 22 01:15:00 2025 GMT Subject: CN=684e1e94-9828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:3e:50:a2:88:4a:ac:2b:9c:68:73:83:93: eb:a5:8e:c4:47:a6:40:a6:ff:09:20:bb:b8:5e:ae: 84:45:95:55:72:24:65:47:ff:c3:ac:c5:ce:ac:c8: 87:e7:36:c7:4d:ec:ad:fe:d7:ff:3a:a8:06:58:56: ec:52:42:ed:6e:d5:82:7b:ab:22:0e:28:69:1e:5f: d7:5d:c5:6d:27:c1:85:0c:f2:ac:09:9b:6d:23:b9: ab:74:bb:f7:40:a3:c6:86:90:58:42:b7:a8:13:52: 93:63:47:c5:e6:8d:2c:64:1d:76:10:ff:b0:97:82: 18:11:7e:5f:08:60:e0:8c:5d:ab:09:5e:76:b2:e4: cb:bc:a0:a9:6f:59:ab:74:57:9a:82:32:09:a7:19: 71:e1:21:f6:be:22:38:d8:72:b1:92:d0:2f:94:b1: ca:64:de:02:83:26:56:08:fc:66:49:d1:94:f2:6c: fc:47:9b:c6:d9:36:c1:87:e3:23:45:1d:29:fd:2c: 9d:a4:8d:6b:d9:92:dd:c1:50:00:fe:99:31:dc:46: a7:fb:3f:11:3b:6a:07:5f:e8:9a:e2:f0:c9:5c:59: 63:1d:52:4a:aa:42:4c:39:12:4f:93:7b:65:5a:ce: e5:ab:32:3a:22:f9:44:41:b7:51:d8:f3:f7:61:98: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:E9:5E:41:75:77:30:EC:97:BC:2F:59:F4:65:7B:73:CA:AD:EE X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:14:ed:55:ce:53:47:05:36:71:80:3f:fb:82:34:bf:43:cb: 0d:e3:60:4d:3a:26:2e:ad:be:db:96:dc:b0:f1:45:f7:41:9f: 2f:37:b3:1e:a4:3c:ba:e8:ce:5c:98:44:08:c9:ad:a7:78:46: 1c:c9:76:01:b7:d0:d7:09:d4:9a:0d:f8:3f:76:96:20:ed:b4: 06:ec:95:7e:28:e7:31:ea:35:86:bc:ad:7a:a7:84:96:88:2c: 95:55:e5:ac:54:40:08:5b:c2:d4:3b:e5:14:cb:8f:10:88:03: 37:85:78:b8:fb:db:80:cd:ee:d1:9d:9e:5c:ba:ec:52:49:e6: 20:f5:f5:34:53:11:11:f1:e4:6f:77:07:ab:85:fb:1e:34:68: 04:02:a7:ff:81:86:5d:a7:8f:aa:d7:b6:b0:f2:cc:d0:ec:6b: 31:2c:af:65:55:b0:1c:4b:e6:5b:09:08:c4:db:40:2b:a2:ed: 83:36:1a:e8:85:fd:33:1b:90:e5:75:34:a4:eb:1f:41:53:4c: e0:fd:15:e1:e2:19:35:6e:30:f6:08:f4:5a:98:78:82:c3:51: 1d:0e:fc:be:75:4a:3f:07:a3:9e:cd:f8:b7:c2:5f:2c:75:15: 16:f4:e1:e5:26:19:79:7e:66:65:5d:a0:bf:48:5e:47:34:99: 3c:5b:1c:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNjE1MDExNTAwWhcNMjUwNjIyMDExNTAwWjAYMRYwFAYD VQQDEw02ODRlMWU5NC05ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMo+UKKISqwrnGhzg5PrpY7ER6ZApv8JILu4Xq6ERZVVciRlR//DrMXOrMiH 5zbHTeyt/tf/OqgGWFbsUkLtbtWCe6siDihpHl/XXcVtJ8GFDPKsCZttI7mrdLv3 QKPGhpBYQreoE1KTY0fF5o0sZB12EP+wl4IYEX5fCGDgjF2rCV52suTLvKCpb1mr dFeagjIJpxlx4SH2viI42HKxktAvlLHKZN4CgyZWCPxmSdGU8mz8R5vG2TbBh+Mj RR0p/SydpI1r2ZLdwVAA/pkx3Ean+z8RO2oHX+ia4vDJXFljHVJKqkJMORJPk3tl Ws7lqzI6IvlEQbdR2PP3YZhmKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoq6V5B dXcw7Je8L1n0ZXtzyq3uMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArFO1VzlNHBTZxgD/7gjS/Q8sN42BNOiYurb7bltyw8UX3QZ8vN7Me pDy66M5cmEQIya2neEYcyXYBt9DXCdSaDfg/dpYg7bQG7JV+KOcx6jWGvK16p4SW iCyVVeWsVEAIW8LUO+UUy48QiAM3hXi4+9uAze7RnZ5cuuxSSeYg9fU0UxER8eRv dwerhfseNGgEAqf/gYZdp4+q17aw8szQ7GsxLK9lVbAcS+ZbCQjE20Arou2DNhro hf0zG5DldTSk6x9BU0zg/RXh4hk1bjD2CPRamHiCw1EdDvy+dUo/B6Oezfi3wl8s dRUW9OHlJhl5fmZlXaC/SF5HNJk8WxzD -----END CERTIFICATE-----Generated at Sun Jun 15 09:43:53 2025 by rpki-client