$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: suFAjTMvE++SXHwr2zgnhPLIzx4xacp8zqETBjvPRnk= Subject key identifier: 81:1D:A6:9F:44:4F:48:10:21:62:AD:85:E9:DE:29:C0:04:CB:23:71 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 029B Signing time: Fri 25 Apr 2025 01:22:51 +0000 Manifest this update: Fri 25 Apr 2025 01:22:50 +0000 Manifest next update: Fri 02 May 2025 01:22:50 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: eSrrDUk/CDAE3myM6AMckRonpGBwU0HFQwqQZovLStA=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 25 01:22:50 2025 GMT Not After : May 2 01:22:50 2025 GMT Subject: CN=680ae3ea-0ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:4e:86:9c:4d:39:dd:ff:b9:cb:df:88:a1: 24:96:82:1d:30:95:5e:83:c4:98:43:54:ae:13:0c: fb:c1:77:85:a7:98:f3:f0:c6:64:1a:11:28:ca:a1: 84:12:27:a0:b3:5c:57:02:b6:3a:c9:cb:06:75:8c: 15:1e:52:43:c7:fd:ca:b2:6a:ae:2a:e2:4b:47:17: 5f:57:7e:31:48:62:47:c3:0c:32:cc:13:de:c2:15: 41:d6:4a:b7:16:ae:c3:46:fb:a2:0a:b1:6b:44:c4: c6:ad:f6:2e:c6:c0:8b:ae:d5:d2:7d:88:ee:63:84: fb:18:aa:82:48:6e:46:55:f6:c2:15:61:00:ad:f9: ef:22:b5:be:3a:ea:37:8e:ef:4a:d5:ad:e0:17:4d: 37:de:00:01:20:2b:7d:22:5c:46:6c:32:66:43:ee: e8:fb:c2:83:89:ec:8a:bc:87:b5:07:b1:0b:3d:81: fa:9a:f2:ec:96:50:c1:b2:4b:1d:ae:b8:67:5d:ad: 51:76:a6:5e:e2:70:30:ba:4f:fd:e3:75:47:a6:63: e8:a0:d5:85:5b:b2:10:19:eb:5a:11:27:fe:0f:93: 96:ae:e5:98:57:38:52:4c:01:e4:da:32:b6:01:4f: 53:51:b3:92:bd:51:4d:73:1c:42:4d:96:ab:98:49: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1D:A6:9F:44:4F:48:10:21:62:AD:85:E9:DE:29:C0:04:CB:23:71 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d9:7e:55:16:e6:ae:22:5c:18:55:fa:d5:7f:fe:bd:d2:d2: 52:45:a7:01:51:95:50:e5:93:7c:26:ef:fa:bb:64:44:5c:d1: 8e:e9:81:ac:d8:af:f0:16:66:a2:db:f8:89:f3:2e:46:39:48: 1b:4f:5b:50:cd:b9:2f:2f:72:3d:15:fa:50:25:fc:e9:1c:74: 80:27:cb:42:fe:1e:01:38:9a:37:07:b7:f5:50:8f:d6:92:dd: 4c:c6:e5:37:f7:90:58:da:a3:15:c7:54:3f:5c:67:79:ca:94: e1:97:56:74:c5:d5:52:cc:9a:4b:00:85:7c:a8:33:e2:a4:bd: 83:fc:df:d3:4c:6c:60:45:14:0d:1e:6c:9a:89:eb:64:32:ff: 28:e8:eb:80:da:0b:53:1b:7a:0d:9a:ff:2c:79:75:45:8f:3d: 6e:a5:4f:c6:53:ab:63:27:97:ac:b4:30:18:e5:93:00:c9:d4: 75:cb:69:3e:72:59:13:75:ce:4f:63:c2:f2:6a:02:57:f0:99: de:e0:cd:d3:64:77:c2:08:29:42:24:46:aa:03:ae:53:31:3a: f0:42:91:ff:3c:13:6f:b3:be:e8:80:ad:1d:03:b1:04:2c:92: c9:38:0b:b8:4e:87:0f:19:02:23:8b:e0:0c:41:d3:da:90:1e: 9f:b8:f1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDI1MDEyMjUwWhcNMjUwNTAyMDEyMjUwWjAYMRYwFAYD VQQDEw02ODBhZTNlYS0wYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6FOhpxNOd3/ucvfiKEkloIdMJVeg8SYQ1SuEwz7wXeFp5jz8MZkGhEoyqGE Eiegs1xXArY6ycsGdYwVHlJDx/3KsmquKuJLRxdfV34xSGJHwwwyzBPewhVB1kq3 Fq7DRvuiCrFrRMTGrfYuxsCLrtXSfYjuY4T7GKqCSG5GVfbCFWEArfnvIrW+Ouo3 ju9K1a3gF0033gABICt9IlxGbDJmQ+7o+8KDieyKvIe1B7ELPYH6mvLsllDBsksd rrhnXa1RdqZe4nAwuk/943VHpmPooNWFW7IQGetaESf+D5OWruWYVzhSTAHk2jK2 AU9TUbOSvVFNcxxCTZarmEl0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEdpp9E T0gQIWKtheneKcAEyyNxMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC82X5VFuauIlwYVfrVf/690tJSRacBUZVQ5ZN8Ju/6u2REXNGO6YGs 2K/wFmai2/iJ8y5GOUgbT1tQzbkvL3I9FfpQJfzpHHSAJ8tC/h4BOJo3B7f1UI/W kt1MxuU395BY2qMVx1Q/XGd5ypThl1Z0xdVSzJpLAIV8qDPipL2D/N/TTGxgRRQN HmyaietkMv8o6OuA2gtTG3oNmv8seXVFjz1upU/GU6tjJ5estDAY5ZMAydR1y2k+ clkTdc5PY8LyagJX8Jne4M3TZHfCCClCJEaqA65TMTrwQpH/PBNvs77ogK0dA7EE LJLJOAu4TocPGQIji+AMQdPakB6fuPG3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:50 2025 by rpki-client