$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: XNrNxUyAJ5UqH99PjDAPmsuydSGIldYd16ithXXDv1Q= Subject key identifier: EB:25:15:C7:53:B9:6C:58:C1:72:A0:40:A8:D3:23:B6:1B:A6:56:17 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0C00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0BF9 Signing time: Thu 24 Apr 2025 18:38:31 +0000 Manifest this update: Thu 24 Apr 2025 18:38:30 +0000 Manifest next update: Thu 01 May 2025 18:38:30 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: pkUAp+nSocl3Zmd39cvW7rgWNgnuUQL6553JBw+sSJA=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: t6T57kHu7uMYeuN0mVxzrvC/6xdds2/aDC5V7Z6/hHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Apr 24 18:38:30 2025 GMT Not After : May 1 18:38:30 2025 GMT Subject: CN=680a8526-4f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:1b:26:f4:89:37:07:5a:0c:27:2c:d9:27: e0:15:b2:57:d6:3f:a0:7c:59:5b:60:d2:da:0e:fa: 3a:4c:e4:15:7f:b0:58:a4:c7:45:de:45:f2:55:a0: af:98:e2:c2:ac:61:61:13:ba:22:d4:f3:40:0a:5b: 5d:ff:64:54:5d:ae:20:26:38:a3:5f:8d:3b:ee:c7: db:71:8e:7b:f7:75:ae:52:70:31:69:a5:53:e0:90: 24:38:d5:aa:de:da:f4:2c:ab:6e:0c:2f:45:ce:0a: aa:60:aa:10:75:86:3c:39:67:e3:4f:80:de:78:76: a3:89:1a:cb:88:f2:11:4a:4c:f6:51:c6:b1:4b:3a: 42:8d:b4:67:68:ea:75:99:8f:e1:33:6c:5e:37:42: b0:6c:fe:b9:12:77:9c:5e:ef:fa:f3:0e:60:08:a4: d2:21:2d:1e:a6:d6:ef:6e:9e:ea:35:b8:a7:ec:15: 70:e4:09:90:78:44:54:6f:0b:50:03:c3:b8:49:68: 8f:61:18:14:c5:2f:9d:00:ef:1b:22:37:0c:6c:31: 31:25:13:4a:70:5d:18:25:b4:45:e9:91:58:84:56: a9:63:65:10:f8:f5:c8:83:4b:4f:c5:df:46:e8:a7: c0:ee:ee:29:3b:4d:4f:7f:82:bb:cb:fc:ec:21:21: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:15:C7:53:B9:6C:58:C1:72:A0:40:A8:D3:23:B6:1B:A6:56:17 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c6:1e:df:5a:f9:e3:40:cf:20:5d:9b:bd:fd:40:c0:82:b7: 40:71:4d:c8:b5:cb:13:66:7d:3b:ec:74:72:8e:5a:34:6b:65: 07:21:c1:ad:ae:23:83:46:35:c9:6f:30:24:b9:2e:56:6e:0f: a9:e5:df:83:59:80:64:6d:4d:be:4d:91:ff:6e:2f:57:f0:fc: d6:9e:38:1b:f1:b0:c2:45:d8:f1:73:4c:80:bf:51:6d:97:72: be:46:bd:53:7d:cc:3e:1c:8a:3a:90:f6:63:a9:8e:2a:2e:97: 39:aa:4f:81:9a:ec:f5:da:71:16:4b:18:16:71:68:6e:b2:07: 65:3e:36:f1:c9:4e:5c:87:b7:3d:1a:03:5b:ef:b0:9a:77:48: cc:8d:fa:37:b3:f6:64:44:bc:84:78:93:ba:94:e5:56:cc:33: 11:a6:d7:90:6c:06:e7:30:1a:ab:93:a3:0e:22:ca:c0:64:c0: de:de:ae:13:19:4d:8e:60:9e:3f:7e:eb:fe:9d:6b:3a:e2:b0: d1:d2:06:f8:e4:07:fd:71:ae:d6:22:a9:4e:db:0a:58:e5:07: c5:fb:67:16:8f:59:91:e2:32:60:bd:48:ba:fc:ab:83:d7:63: c5:08:70:c8:1d:5c:eb:37:85:c8:3b:22:91:15:fc:d8:63:77: 53:be:02:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjUwNDI0MTgzODMwWhcNMjUwNTAxMTgzODMwWjAYMRYwFAYD VQQDEw02ODBhODUyNi00ZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ncbJvSJNwdaDCcs2SfgFbJX1j+gfFlbYNLaDvo6TOQVf7BYpMdF3kXyVaCv mOLCrGFhE7oi1PNACltd/2RUXa4gJjijX4077sfbcY5793WuUnAxaaVT4JAkONWq 3tr0LKtuDC9FzgqqYKoQdYY8OWfjT4DeeHajiRrLiPIRSkz2UcaxSzpCjbRnaOp1 mY/hM2xeN0KwbP65EnecXu/68w5gCKTSIS0eptbvbp7qNbin7BVw5AmQeERUbwtQ A8O4SWiPYRgUxS+dAO8bIjcMbDExJRNKcF0YJbRF6ZFYhFapY2UQ+PXIg0tPxd9G 6KfA7u4pO01Pf4K7y/zsISGWKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOslFcdT uWxYwXKgQKjTI7YbplYXMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBxh7fWvnjQM8gXZu9/UDAgrdAcU3ItcsTZn077HRyjlo0a2UHIcGt riODRjXJbzAkuS5Wbg+p5d+DWYBkbU2+TZH/bi9X8PzWnjgb8bDCRdjxc0yAv1Ft l3K+Rr1Tfcw+HIo6kPZjqY4qLpc5qk+Bmuz12nEWSxgWcWhusgdlPjbxyU5ch7c9 GgNb77Cad0jMjfo3s/ZkRLyEeJO6lOVWzDMRpteQbAbnMBqrk6MOIsrAZMDe3q4T GU2OYJ4/fuv+nWs64rDR0gb45Af9ca7WIqlO2wpY5QfF+2cWj1mR4jJgvUi6/KuD 12PFCHDIHVzrN4XIOyKRFfzYY3dTvgLB -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:47 2025 by rpki-client