$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: GVXKVV/KZfApnNaJPaiVbQHV6w6zregINyxP4D+dH8Q= Subject key identifier: 3D:7A:83:A5:48:9F:BD:08:F7:D6:CA:83:DC:74:4A:81:E8:F5:A5:9F Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 01D0 Signing time: Sat 09 Aug 2025 03:14:28 +0000 Manifest this update: Sat 09 Aug 2025 03:14:28 +0000 Manifest next update: Sat 16 Aug 2025 03:14:28 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: LOfGyGHxEsr0RMJDz+T+5MGieorfQpS+D1CrElngzRo=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Aug 9 03:14:28 2025 GMT Not After : Aug 16 03:14:28 2025 GMT Subject: CN=6896bd14-426e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:4c:a8:f6:a3:8a:24:9e:8b:ad:e9:e1:5d: ca:0a:74:d2:8f:81:2c:89:07:d2:de:1b:ce:87:d9: 5b:c5:63:6c:c4:04:24:fa:7e:f3:d0:de:6d:0d:2d: 67:09:65:40:4b:93:88:a4:12:64:ad:f9:80:7e:0c: 21:9a:67:96:e9:a3:cb:04:28:2f:2a:59:63:06:6e: 27:ca:70:f9:ed:3d:6f:f3:94:00:87:b2:af:f3:70: fb:23:6e:d4:de:06:a4:aa:33:d9:fa:dc:25:e6:fa: a4:0c:7f:84:ca:6a:92:e3:07:59:ef:b1:7c:c3:0b: ff:a2:53:ee:08:fa:16:18:87:49:4d:b3:15:11:6b: e2:9b:13:c4:5d:64:84:d4:48:d2:7a:8c:3f:7c:0c: 63:c5:69:19:3e:1f:5e:bd:85:02:cb:e5:ab:22:90: 32:1f:3b:76:c7:73:b5:7c:79:9c:24:f0:45:15:4b: 4a:8f:1e:d1:5b:77:9e:00:a8:0c:84:fc:3b:d7:fa: e0:e0:a1:95:57:a5:17:de:ff:fa:31:f3:7c:60:bc: c2:d0:67:5f:e8:4d:79:3d:ef:75:a4:05:aa:04:1a: 64:a8:7a:a3:18:07:2e:23:e3:ef:85:28:ac:ad:f7: 98:e3:aa:f1:9b:14:53:ec:94:5f:48:4d:e6:9a:f6: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7A:83:A5:48:9F:BD:08:F7:D6:CA:83:DC:74:4A:81:E8:F5:A5:9F X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6e:f0:6a:fb:62:aa:ea:76:c7:ef:3f:88:87:d5:13:f0:b9: ba:b1:e7:71:0d:16:c4:a0:06:c8:cb:12:33:a6:28:15:6e:3b: 53:44:73:7e:39:c7:04:f1:24:47:00:00:c0:0e:7e:8f:f2:28: 2e:cb:aa:f7:4b:b3:57:75:7e:55:ed:b2:7a:6f:4a:2a:e8:d7: 64:d5:bb:55:9d:0d:9b:47:d6:fd:fc:84:d9:5d:93:b1:bc:bc: c9:02:94:f1:68:4e:a2:14:07:09:15:32:ce:d5:ff:65:d7:cd: 40:99:5b:d9:4b:c2:e2:2b:8d:35:5e:eb:4c:4f:8b:ac:36:1f: 78:37:95:dc:fb:d6:c6:6a:5a:59:7c:0e:1a:2a:9d:76:0f:1a: 5e:46:df:ed:0d:84:dd:db:db:8a:3c:2f:3b:24:60:b0:30:7f: 99:eb:02:4e:bc:a7:26:4a:60:8b:88:0d:ca:cb:66:e6:fb:da: 79:cf:55:ab:55:b6:8b:28:e9:6c:ae:40:3c:14:4d:36:fc:30: ee:37:bc:3e:21:88:79:12:ab:54:7b:e3:c3:8b:dc:82:df:be: d1:d9:f2:34:ac:de:cb:8d:d2:16:c3:8f:15:f8:0c:74:19:45: f7:1a:00:28:c9:4a:15:bc:dc:db:1b:f4:70:cd:b3:01:a2:64: 7b:65:0a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwODA5MDMxNDI4WhcNMjUwODE2MDMxNDI4WjAYMRYwFAYD VQQDEw02ODk2YmQxNC00MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygFMqPajiiSei63p4V3KCnTSj4EsiQfS3hvOh9lbxWNsxAQk+n7z0N5tDS1n CWVAS5OIpBJkrfmAfgwhmmeW6aPLBCgvKlljBm4nynD57T1v85QAh7Kv83D7I27U 3gakqjPZ+twl5vqkDH+EymqS4wdZ77F8wwv/olPuCPoWGIdJTbMVEWvimxPEXWSE 1EjSeow/fAxjxWkZPh9evYUCy+WrIpAyHzt2x3O1fHmcJPBFFUtKjx7RW3eeAKgM hPw71/rg4KGVV6UX3v/6MfN8YLzC0Gdf6E15Pe91pAWqBBpkqHqjGAcuI+PvhSis rfeY46rxmxRT7JRfSE3mmvagpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD16g6VI n70I99bKg9x0SoHo9aWfMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSbvBq+2Kq6nbH7z+Ih9UT8Lm6sedxDRbEoAbIyxIzpigVbjtTRHN+ OccE8SRHAADADn6P8iguy6r3S7NXdX5V7bJ6b0oq6Ndk1btVnQ2bR9b9/ITZXZOx vLzJApTxaE6iFAcJFTLO1f9l181AmVvZS8LiK401XutMT4usNh94N5Xc+9bGalpZ fA4aKp12DxpeRt/tDYTd29uKPC87JGCwMH+Z6wJOvKcmSmCLiA3Ky2bm+9p5z1Wr VbaLKOlsrkA8FE02/DDuN7w+IYh5EqtUe+PDi9yC377R2fI0rN7LjdIWw48V+Ax0 GUX3GgAoyUoVvNzbG/RwzbMBomR7ZQrw -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:55 2025 by rpki-client