$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: IMhx+W0zEiTur3zFAPIE8mrzG6x2a0ZUkKvRwEwZmhI= Subject key identifier: DF:6A:D8:F5:65:40:90:15:72:0D:F6:CE:52:BF:6D:0F:BF:2A:A6:29 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0C30 Signing time: Tue 12 Aug 2025 18:49:16 +0000 Manifest this update: Tue 12 Aug 2025 18:49:16 +0000 Manifest next update: Tue 19 Aug 2025 18:49:16 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: nQyB9cozrfGo/3zPhgjEme4KBS4o32+JLBVNoeE6HwQ=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Aug 12 18:49:16 2025 GMT Not After : Aug 19 18:49:16 2025 GMT Subject: CN=689b8cac-f910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:52:7c:36:98:a4:14:fe:13:d9:86:ee:e7: 87:f0:ab:c0:df:24:52:92:35:1f:57:dc:e5:29:18: aa:76:4d:88:91:0f:6b:0e:84:ea:f4:21:ef:10:fa: 1f:39:94:b8:46:6a:4e:b7:ae:71:85:2f:81:7a:63: cb:02:4b:ea:2e:95:12:fe:36:af:a6:67:93:86:45: 63:8c:b0:78:f7:75:e8:3f:1d:c3:a6:82:91:77:0c: 5e:5b:42:7a:e9:76:9d:2a:68:14:b3:f1:85:7e:27: 06:43:50:bc:a2:54:89:4c:c7:bd:cb:d8:96:59:fc: 64:11:25:19:51:09:6f:56:b3:9e:96:c3:fc:93:23: a5:9c:e9:27:0d:8f:b6:a3:50:19:7f:9e:51:2c:7c: 9e:31:78:ac:ad:b2:b3:1d:39:9a:15:88:62:b5:27: f7:90:6c:e0:ca:a3:72:f1:a2:e8:20:35:51:7a:9d: 73:64:58:69:f3:4d:87:54:9b:c4:fe:d6:b3:11:4a: f9:83:8c:91:ee:6b:6b:a6:8c:a9:f4:b9:4b:20:55: 33:f7:0e:d2:4b:3d:7a:b8:b8:ad:16:95:1a:cb:a9: 8d:5f:46:27:13:b2:f3:88:11:64:cb:17:f1:6b:69: 53:e4:73:ec:da:b8:5f:9f:52:6c:84:0d:54:78:b4: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:D8:F5:65:40:90:15:72:0D:F6:CE:52:BF:6D:0F:BF:2A:A6:29 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:ea:cc:b1:2c:09:ab:f9:09:07:ef:c4:62:2e:67:86:2f: 3b:f3:c4:97:d7:18:1d:cd:90:f7:28:90:2c:97:d7:47:f3:f7: 64:ab:72:56:bd:d4:c0:3a:d6:ac:7e:3c:53:dd:3a:9d:68:97: 47:ce:4e:69:7e:1a:f3:28:ea:ee:11:48:0d:51:4f:aa:2e:00: 72:f6:26:c9:ce:b3:8f:97:63:fe:c7:4a:ee:bd:aa:7f:37:99: 08:66:68:30:fd:fb:d4:b8:ee:4d:f4:dc:b8:4e:6c:06:73:f7: 38:23:b6:69:19:79:64:83:8b:86:6e:a9:91:49:70:75:fc:61: 9f:53:b2:2e:21:39:65:3c:96:e0:46:ad:a9:21:7b:c4:a2:d3: 45:aa:18:92:75:dd:97:e1:75:d2:b3:43:e3:29:5b:5b:c9:89: fc:02:d4:00:e0:3b:ae:2e:6e:54:04:96:62:60:45:49:23:70: b5:0e:b1:ed:4c:f7:43:c8:a5:ae:bd:02:15:98:c7:45:7b:7c: 7a:0e:68:73:99:d8:ba:8e:0b:88:88:33:a9:ac:df:32:30:a5: 47:ad:c9:44:16:37:38:19:92:c1:48:54:77:0e:21:6f:c0:d9: 82:38:10:18:e6:09:c7:85:d1:e3:38:af:a0:01:09:99:ce:12: cf:61:fd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwODEyMTg0OTE2WhcNMjUwODE5MTg0OTE2WjAYMRYwFAYD VQQDEw02ODliOGNhYy1mOTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC5SfDaYpBT+E9mG7ueH8KvA3yRSkjUfV9zlKRiqdk2IkQ9rDoTq9CHvEPof OZS4RmpOt65xhS+BemPLAkvqLpUS/javpmeThkVjjLB493XoPx3DpoKRdwxeW0J6 6XadKmgUs/GFficGQ1C8olSJTMe9y9iWWfxkESUZUQlvVrOelsP8kyOlnOknDY+2 o1AZf55RLHyeMXisrbKzHTmaFYhitSf3kGzgyqNy8aLoIDVRep1zZFhp802HVJvE /tazEUr5g4yR7mtrpoyp9LlLIFUz9w7SSz16uLitFpUay6mNX0YnE7LziBFkyxfx a2lT5HPs2rhfn1JshA1UeLRw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9q2PVl QJAVcg32zlK/bQ+/KqYpMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzferMsSwJq/kJB+/EYi5nhi8788SX1xgdzZD3KJAsl9dH8/dkq3JW vdTAOtasfjxT3TqdaJdHzk5pfhrzKOruEUgNUU+qLgBy9ibJzrOPl2P+x0ruvap/ N5kIZmgw/fvUuO5N9Ny4TmwGc/c4I7ZpGXlkg4uGbqmRSXB1/GGfU7IuITllPJbg Rq2pIXvEotNFqhiSdd2X4XXSs0PjKVtbyYn8AtQA4DuuLm5UBJZiYEVJI3C1DrHt TPdDyKWuvQIVmMdFe3x6Dmhzmdi6jguIiDOprN8yMKVHrclEFjc4GZLBSFR3DiFv wNmCOBAY5gnHhdHjOK+gAQmZzhLPYf3h -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:49 2025 by rpki-client