$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: ETloni9STnLA5w/fYUlZJujRBu75ySMtBgO3jHRw85g= Subject key identifier: 6F:25:63:13:0E:69:40:82:8A:25:55:74:95:8B:9F:C7:F1:E7:82:79 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 02D0 Signing time: Sat 09 Aug 2025 02:00:11 +0000 Manifest this update: Sat 09 Aug 2025 02:00:10 +0000 Manifest next update: Sat 16 Aug 2025 02:00:10 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: y5E13SedmQH5Q6OQFPG6bJapZLmRxPq9CfgMFmMqpn4=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Aug 9 02:00:10 2025 GMT Not After : Aug 16 02:00:10 2025 GMT Subject: CN=6896abab-4535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:83:8d:38:a0:79:66:0b:4c:4f:8e:12:d9: d2:38:ba:b0:15:c1:fb:af:0f:d6:da:3c:93:0b:a1: 29:83:08:7b:96:33:27:63:36:34:83:74:fc:1e:b0: 6c:b4:94:2c:5b:30:e9:da:cf:91:99:0d:96:bf:35: 88:d2:6f:44:49:d8:d4:96:a0:3a:fb:01:38:90:34: bf:64:02:8b:8e:09:1c:fa:b1:b2:ec:ae:12:53:52: cd:f9:ae:af:4b:13:6a:71:16:cb:6c:1f:a6:4b:b5: 3a:1b:b7:a7:a8:da:31:a5:18:c6:d4:be:0a:0c:71: 4c:87:ee:00:5e:b3:07:f1:7b:29:30:61:3b:7b:0a: a9:48:d3:d4:8b:d3:41:21:42:e8:a6:3d:87:e1:56: 9c:11:99:cd:ee:86:38:88:70:63:a0:a5:61:a4:f9: c2:0f:4e:6c:31:d6:30:1c:c7:5e:83:ab:55:c6:82: 50:bb:1e:a2:b4:e7:46:ad:9a:7a:d6:50:01:fd:6a: 57:5b:e2:79:35:10:cc:c0:e6:af:55:03:29:88:88: d7:77:1c:77:5e:64:61:56:72:08:19:75:34:8d:6e: 34:95:2a:ac:a8:62:42:c5:5e:2c:5c:68:73:88:0f: f8:d4:b7:84:2d:9e:8b:bf:cc:c1:b6:e4:29:d8:60: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:25:63:13:0E:69:40:82:8A:25:55:74:95:8B:9F:C7:F1:E7:82:79 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e2:d6:09:3f:c9:d3:23:d2:0e:0a:b6:5a:17:d3:66:e5:ea: 0f:4b:29:9a:db:1d:0d:26:eb:63:d1:d2:d4:05:14:a8:04:d0: 54:c3:e7:ae:04:1b:86:a1:1b:82:2b:54:2f:9b:00:ce:29:65: d8:db:30:92:80:f3:30:1b:79:88:31:6c:54:f6:41:c3:bc:19: 8a:42:09:12:a4:12:0e:a0:08:78:a8:89:6d:d9:bd:f5:7e:f3: 99:d3:7d:87:57:96:1b:16:d3:db:72:f3:df:28:ff:de:3c:16: 14:95:22:0c:ab:0f:30:ba:e1:b6:02:8b:69:fb:d5:95:a9:97: f2:d9:61:38:27:5b:35:39:b3:07:7c:58:8b:2b:b0:39:da:0b: b7:3f:5e:db:90:f1:20:cd:51:d3:da:cf:00:92:04:41:12:09: 36:ce:03:4e:dd:ca:8a:e8:b7:67:6d:7a:68:28:4b:c8:77:db: 6e:aa:23:b5:56:af:da:5c:9c:c5:ef:f1:33:28:f4:9e:96:1d: c6:cf:09:2d:95:c2:48:73:bd:24:24:d3:c7:b0:46:9f:0d:7e: 73:e3:76:b6:19:69:c5:5c:31:4c:56:ef:a4:aa:5b:1e:ce:55: e4:8f:52:8f:6c:6e:7b:e2:1a:de:ab:39:03:b1:54:dd:26:ab: 05:e9:75:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwODA5MDIwMDEwWhcNMjUwODE2MDIwMDEwWjAYMRYwFAYD VQQDEw02ODk2YWJhYi00NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T2DjTigeWYLTE+OEtnSOLqwFcH7rw/W2jyTC6Epgwh7ljMnYzY0g3T8HrBs tJQsWzDp2s+RmQ2WvzWI0m9ESdjUlqA6+wE4kDS/ZAKLjgkc+rGy7K4SU1LN+a6v SxNqcRbLbB+mS7U6G7enqNoxpRjG1L4KDHFMh+4AXrMH8XspMGE7ewqpSNPUi9NB IULopj2H4VacEZnN7oY4iHBjoKVhpPnCD05sMdYwHMdeg6tVxoJQux6itOdGrZp6 1lAB/WpXW+J5NRDMwOavVQMpiIjXdxx3XmRhVnIIGXU0jW40lSqsqGJCxV4sXGhz iA/41LeELZ6Lv8zBtuQp2GCP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8lYxMO aUCCiiVVdJWLn8fx54J5MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP4tYJP8nTI9IOCrZaF9Nm5eoPSyma2x0NJutj0dLUBRSoBNBUw+eu BBuGoRuCK1QvmwDOKWXY2zCSgPMwG3mIMWxU9kHDvBmKQgkSpBIOoAh4qIlt2b31 fvOZ032HV5YbFtPbcvPfKP/ePBYUlSIMqw8wuuG2Aotp+9WVqZfy2WE4J1s1ObMH fFiLK7A52gu3P17bkPEgzVHT2s8AkgRBEgk2zgNO3cqK6LdnbXpoKEvId9tuqiO1 Vq/aXJzF7/EzKPSelh3GzwktlcJIc70kJNPHsEafDX5z43a2GWnFXDFMVu+kqlse zlXkj1KPbG574hreqzkDsVTdJqsF6XX1 -----END CERTIFICATE-----Generated at Sun Aug 10 04:28:09 2025 by rpki-client