$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: eCE/q5+pYCI6TZPW22wqsCFSGms5N7hksVfGvgZMry0= Subject key identifier: 97:60:81:E6:E4:CA:48:3E:AA:76:21:A7:53:C5:A8:79:C2:D1:8D:2E Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C11 Signing time: Thu 12 Jun 2025 18:30:40 +0000 Manifest this update: Thu 12 Jun 2025 18:30:39 +0000 Manifest next update: Thu 19 Jun 2025 18:30:39 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: t1CypZKyGv+3bB3bMtx2vNXC5BXpRyTAjsb3KsDMpWo=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Jun 12 18:30:39 2025 GMT Not After : Jun 19 18:30:39 2025 GMT Subject: CN=684b1ccf-d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:65:9f:71:a3:b7:6f:7a:88:20:e3:c4:47: 33:86:a3:93:60:38:21:c9:46:ee:bc:ba:22:7c:30: 7c:25:96:46:3f:15:cd:72:d4:f8:63:de:dd:3b:9b: 04:15:51:4b:27:0e:b7:70:7a:4c:02:c7:30:4d:2f: ec:47:d1:58:a6:11:7b:89:39:43:dd:51:70:b7:d3: 05:51:8e:ed:3f:bb:82:a3:6b:24:f8:6e:e3:fd:f0: c0:a7:46:9b:5c:89:72:9a:cf:45:4f:ca:48:70:62: fb:7b:f9:de:2b:25:ca:46:76:62:29:11:d4:32:fb: 16:26:aa:15:27:82:0e:ba:1a:70:62:3e:df:99:71: 45:44:d8:6d:5f:a1:6c:83:e1:b5:8b:7d:80:0d:78: 25:2a:4a:34:e6:35:08:74:4e:5a:4e:4d:b3:0f:0c: 7f:1a:20:32:25:5a:e6:56:74:27:1a:88:bf:82:ff: 70:38:64:b9:12:2a:39:85:90:4d:14:6a:fc:e1:fe: be:5a:07:db:24:0e:db:21:24:aa:ff:de:cb:30:e1: 51:4f:ab:4b:28:58:7c:b5:64:5b:9d:ac:5a:27:16: ce:9b:a4:5a:b0:79:68:21:ee:da:89:17:6a:76:c2: 1b:93:59:6d:4f:a2:c1:58:b2:cb:25:28:77:b5:1b: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:81:E6:E4:CA:48:3E:AA:76:21:A7:53:C5:A8:79:C2:D1:8D:2E X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:7f:57:dd:97:a5:f1:94:fd:6b:ff:82:41:5f:20:05:b6: 5f:b2:95:32:64:2a:87:73:c8:e1:69:3b:7d:e9:3f:37:af:63: 90:82:30:3a:81:d1:9e:c8:96:cd:37:78:bc:9b:40:85:1e:e0: 3c:e2:77:68:23:8f:5f:6e:b2:bb:1f:af:66:b4:b7:e2:44:7c: c0:46:1d:54:c3:0f:28:3a:93:13:b7:5b:5f:d8:51:ac:21:ba: f4:91:bf:ca:f3:3c:46:1f:07:15:36:aa:75:7c:c8:1a:74:38: fc:72:77:95:e1:36:40:30:ce:e3:2f:57:77:6e:00:fc:bb:4b: c4:19:df:aa:1d:da:11:22:64:3a:14:83:54:bd:db:3e:63:6c: 2d:14:16:73:9b:b8:4d:27:d4:a7:0d:04:b4:4f:ff:ff:a5:f2: 53:42:9a:ef:62:a4:69:58:cb:01:75:02:3c:c7:ba:18:29:cc: 15:d7:bc:2f:f6:d0:d6:9b:0e:35:c5:19:1b:a6:c2:9b:3b:c8: 68:fb:54:a0:93:2a:eb:a3:62:c1:76:16:14:f1:07:1d:20:f1: 5f:47:60:43:d7:59:74:29:c0:cd:44:46:5d:17:c2:01:33:81: b7:e4:f8:55:cb:b6:75:c4:cb:d2:f5:79:76:bc:14:ba:2f:3c: 92:eb:a7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwNjEyMTgzMDM5WhcNMjUwNjE5MTgzMDM5WjAYMRYwFAYD VQQDEw02ODRiMWNjZi1kNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs5ln3Gjt296iCDjxEczhqOTYDghyUbuvLoifDB8JZZGPxXNctT4Y97dO5sE FVFLJw63cHpMAscwTS/sR9FYphF7iTlD3VFwt9MFUY7tP7uCo2sk+G7j/fDAp0ab XIlyms9FT8pIcGL7e/neKyXKRnZiKRHUMvsWJqoVJ4IOuhpwYj7fmXFFRNhtX6Fs g+G1i32ADXglKko05jUIdE5aTk2zDwx/GiAyJVrmVnQnGoi/gv9wOGS5Eio5hZBN FGr84f6+WgfbJA7bISSq/97LMOFRT6tLKFh8tWRbnaxaJxbOm6RasHloIe7aiRdq dsIbk1ltT6LBWLLLJSh3tRsfAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdggebk ykg+qnYhp1PFqHnC0Y0uMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJBH9X3Zel8ZT9a/+CQV8gBbZfspUyZCqHc8jhaTt96T83r2OQgjA6 gdGeyJbNN3i8m0CFHuA84ndoI49fbrK7H69mtLfiRHzARh1Uww8oOpMTt1tf2FGs Ibr0kb/K8zxGHwcVNqp1fMgadDj8cneV4TZAMM7jL1d3bgD8u0vEGd+qHdoRImQ6 FINUvds+Y2wtFBZzm7hNJ9SnDQS0T///pfJTQprvYqRpWMsBdQI8x7oYKcwV17wv 9tDWmw41xRkbpsKbO8ho+1Sgkyrro2LBdhYU8QcdIPFfR2BD11l0KcDNREZdF8IB M4G35PhVy7Z1xMvS9Xl2vBS6LzyS66ds -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client