$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: 1tujZZ4WsjDwzXuKnSMQvi89YLz3280pfgNN56hXr2g= Subject key identifier: 17:A4:36:92:9E:76:EB:DF:86:38:FE:77:A6:90:E7:33:87:70:B1:40 Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 0114 Signing time: Fri 13 Jun 2025 03:50:36 +0000 Manifest this update: Fri 13 Jun 2025 03:50:35 +0000 Manifest next update: Fri 20 Jun 2025 03:50:35 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: 7FPqdATNv6t2tD4Af9IXZYiNLf342QFAHVN1e9LpSsw=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: +frr+wTOoHrcgFMpLKILndUUUD44Ln0TV7/77IoTLr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: Jun 13 03:50:35 2025 GMT Not After : Jun 20 03:50:35 2025 GMT Subject: CN=684ba00c-9e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:b3:c3:cb:7b:0e:c2:22:a7:f2:2a:df:7a: 3b:9f:c3:ef:70:fc:91:f2:c2:bc:da:bc:66:26:e3: 27:c9:74:d1:f6:e0:d6:df:7a:07:05:1f:3e:d5:72: 50:e9:a0:c9:58:d0:e2:91:ff:95:51:25:78:4e:48: ea:17:b9:8a:98:43:08:c3:5d:3c:2e:8e:06:24:bb: e7:16:6c:91:f8:d5:07:4d:f2:bd:62:24:97:3d:82: ed:df:b8:9d:9e:26:6b:e0:23:dd:c3:50:5f:8c:80: 3e:e1:cc:c5:10:b5:89:b8:86:15:4f:1a:5e:d1:f6: 82:d1:d9:4b:d4:37:fa:b8:c8:70:96:2b:ca:88:85: 29:9a:23:0a:a2:86:8c:c1:ae:e9:1d:db:66:35:b5: d6:6a:15:28:b2:75:5e:1a:d9:6e:e5:a6:74:1f:f9: 92:f7:34:ef:60:b9:b2:85:4e:18:18:8b:88:93:72: fa:4e:92:18:27:67:f3:fc:7f:bf:3f:23:fd:32:01: 0c:61:c3:03:e9:c9:e3:00:99:84:fd:25:c6:da:4f: bf:a8:e2:3c:c2:12:c3:d2:f3:75:ad:76:a2:d8:35: 48:a1:a9:7c:5a:d8:dd:23:8a:df:aa:65:18:12:63: f9:87:97:97:8c:15:0f:87:55:32:cf:ae:18:20:7f: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:36:92:9E:76:EB:DF:86:38:FE:77:A6:90:E7:33:87:70:B1:40 X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f7:20:6e:1b:1b:37:7a:86:3b:5c:06:03:07:fd:0d:c8:2c: cd:ba:5f:7c:8b:25:7d:b4:f5:df:c0:7f:60:b2:0d:00:14:d8: 1d:0b:d2:2a:1b:e4:85:7c:bb:45:52:70:a1:7a:78:47:02:13: c1:7e:4c:f3:0d:18:1d:a1:dc:57:25:84:33:f9:ad:80:a8:2a: cb:74:21:34:c1:2a:3f:13:2a:29:7d:27:f3:31:8c:f0:7c:8c: 01:c2:e8:02:53:78:06:10:85:45:d5:ef:2d:4b:14:b4:83:96: a9:03:5e:fc:03:75:e5:4d:7c:e4:30:97:2b:fb:14:ab:1b:79: 99:9c:43:44:ac:c4:06:f2:c4:71:f1:4c:f8:2c:49:24:d7:33: 8b:b1:69:e8:fe:ce:3c:a5:b6:61:8a:c2:4b:ca:2d:18:96:84: a3:71:c4:67:78:80:91:1a:c9:04:91:5c:72:f6:08:f1:16:68: bc:08:3b:e1:8f:c5:bb:bb:3f:c9:61:1a:18:74:f7:b6:3a:b5: a3:54:7d:af:7b:99:cd:1c:d3:ec:b0:06:50:ba:42:93:3a:50: 32:f4:8c:a6:87:02:e2:7f:c0:d8:2c:9c:c2:48:e6:d4:ac:bb: 9e:56:98:71:dc:e5:c6:ac:85:5c:7b:e2:e2:a9:8a:90:73:0e: 04:02:63:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwNjEzMDM1MDM1WhcNMjUwNjIwMDM1MDM1WjAYMRYwFAYD VQQDEw02ODRiYTAwYy05ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyV6zw8t7DsIip/Iq33o7n8PvcPyR8sK82rxmJuMnyXTR9uDW33oHBR8+1XJQ 6aDJWNDikf+VUSV4TkjqF7mKmEMIw108Lo4GJLvnFmyR+NUHTfK9YiSXPYLt37id niZr4CPdw1BfjIA+4czFELWJuIYVTxpe0faC0dlL1Df6uMhwlivKiIUpmiMKooaM wa7pHdtmNbXWahUosnVeGtlu5aZ0H/mS9zTvYLmyhU4YGIuIk3L6TpIYJ2fz/H+/ PyP9MgEMYcMD6cnjAJmE/SXG2k+/qOI8whLD0vN1rXai2DVIoal8WtjdI4rfqmUY EmP5h5eXjBUPh1Uyz64YIH+HvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBekNpKe duvfhjj+d6aQ5zOHcLFAMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs9yBuGxs3eoY7XAYDB/0NyCzNul98iyV9tPXfwH9gsg0AFNgdC9Iq G+SFfLtFUnChenhHAhPBfkzzDRgdodxXJYQz+a2AqCrLdCE0wSo/EyopfSfzMYzw fIwBwugCU3gGEIVF1e8tSxS0g5apA178A3XlTXzkMJcr+xSrG3mZnENErMQG8sRx 8Uz4LEkk1zOLsWno/s48pbZhisJLyi0YloSjccRneICRGskEkVxy9gjxFmi8CDvh j8W7uz/JYRoYdPe2OrWjVH2ve5nNHNPssAZQukKTOlAy9IymhwLif8DYLJzCSObU rLueVphx3OXGrIVce+LiqYqQcw4EAmMx -----END CERTIFICATE-----Generated at Sat Jun 14 19:03:53 2025 by rpki-client