$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: pMswPIp3MuqPTPeViuJWjjs0QDfy3nd5EC6KHO7Zi3g= Subject key identifier: B7:7C:0A:79:BC:36:CD:BB:E7:B9:EC:FA:91:10:DB:1D:F4:30:EA:1A Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 01B5 Signing time: Tue 17 Jun 2025 02:18:18 +0000 Manifest this update: Tue 17 Jun 2025 02:18:18 +0000 Manifest next update: Tue 24 Jun 2025 02:18:18 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 6o/pUgNhmFMw2jeWO1Dht+uvgUyPgPBlA4PVXbKHcvk=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Jun 17 02:18:18 2025 GMT Not After : Jun 24 02:18:18 2025 GMT Subject: CN=6850d06a-27b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:1a:07:4f:88:4e:fb:9a:b7:5a:c3:e8:7e: ac:bb:63:da:53:70:14:41:a8:2f:9f:ce:a8:79:fa: 73:95:a5:df:54:9c:30:21:12:22:cd:80:f1:7a:c9: 76:91:df:96:fa:13:23:f3:69:22:28:e3:df:93:75: f1:4f:ed:71:64:68:3c:61:a4:d4:7a:67:08:2e:b9: ec:b6:ac:9e:d8:ad:4e:3e:66:b0:18:68:e9:fd:ca: 39:d6:7e:e7:9a:fd:92:9e:67:72:2d:ab:db:72:d5: 92:64:8b:fd:1a:c0:17:4b:00:e3:a9:5a:d6:57:c1: dc:d8:d1:0f:ec:94:63:e7:24:13:e7:a3:74:1c:51: cc:ea:1d:5a:5f:9c:37:46:2c:4f:b3:1d:99:1a:69: bf:44:99:73:17:c4:15:1e:51:2c:a0:09:fb:8f:ce: 09:60:5c:b1:91:e1:92:59:53:de:9a:8e:8a:d9:b1: 1d:fc:8f:55:65:ba:3b:82:f3:3f:3f:35:68:b9:94: 8a:db:b0:04:c4:e7:a3:04:f9:78:db:00:ea:a5:0b: e9:05:4a:57:73:80:33:4a:38:c2:0f:9d:c4:df:18: db:57:a1:a5:2c:67:04:0c:4b:90:b4:6b:75:1c:9e: 60:84:57:1b:1d:2e:c8:ae:22:8e:b2:c6:f4:ba:e7: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:0A:79:BC:36:CD:BB:E7:B9:EC:FA:91:10:DB:1D:F4:30:EA:1A X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:6c:a2:96:31:c1:c9:fb:5e:f6:f1:ed:a6:c9:bf:e6:f0: 5a:ed:8f:e0:27:7a:53:ea:61:e4:a6:af:69:3b:cb:70:0f:08: 0f:22:1e:fb:f6:63:6f:ca:b1:63:13:f9:ec:cc:1c:3e:a0:df: b1:55:b0:6e:c2:e2:f9:af:77:4e:6e:b3:ce:ff:a0:c6:c6:dd: fd:81:65:af:b1:d8:44:b8:1d:e3:34:ef:6a:9e:46:bc:b3:14: 48:f9:c2:25:68:e9:e2:9d:68:91:e1:23:39:e0:80:9a:1d:59: 25:e2:d3:ab:f5:ab:6a:ab:b1:ad:e2:a3:44:98:ea:b7:f5:99: f9:e5:9c:ae:8f:3e:a3:f7:ce:76:fc:3d:fa:fd:8f:17:ae:af: 6b:26:87:bc:90:2e:3f:d5:9d:71:e8:3f:09:8e:2e:7b:41:89: d4:be:72:b4:1b:5b:69:3b:a4:46:38:0f:04:2d:a1:ff:f9:c3: 99:28:08:96:48:76:30:f7:74:64:13:d6:61:e3:75:02:00:04: 23:2f:15:44:22:ad:a5:3d:2e:bf:5e:e5:17:3f:a0:b7:7c:4c: 4c:d1:41:de:41:c4:81:04:7c:4c:80:4f:87:b1:9b:1d:80:cf: b1:a6:77:4b:e0:78:46:46:fc:ce:6b:0a:b9:71:05:03:e4:47: 33:a1:ac:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwNjE3MDIxODE4WhcNMjUwNjI0MDIxODE4WjAYMRYwFAYD VQQDEw02ODUwZDA2YS0yN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SAaB0+ITvuat1rD6H6su2PaU3AUQagvn86oefpzlaXfVJwwIRIizYDxesl2 kd+W+hMj82kiKOPfk3XxT+1xZGg8YaTUemcILrnstqye2K1OPmawGGjp/co51n7n mv2SnmdyLavbctWSZIv9GsAXSwDjqVrWV8Hc2NEP7JRj5yQT56N0HFHM6h1aX5w3 RixPsx2ZGmm/RJlzF8QVHlEsoAn7j84JYFyxkeGSWVPemo6K2bEd/I9VZbo7gvM/ PzVouZSK27AExOejBPl42wDqpQvpBUpXc4AzSjjCD53E3xjbV6GlLGcEDEuQtGt1 HJ5ghFcbHS7IriKOssb0uueMwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd8Cnm8 Ns2757ns+pEQ2x30MOoaMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF/GyiljHByfte9vHtpsm/5vBa7Y/gJ3pT6mHkpq9pO8twDwgPIh77 9mNvyrFjE/nszBw+oN+xVbBuwuL5r3dObrPO/6DGxt39gWWvsdhEuB3jNO9qnka8 sxRI+cIlaOninWiR4SM54ICaHVkl4tOr9atqq7Gt4qNEmOq39Zn55Zyujz6j9852 /D36/Y8Xrq9rJoe8kC4/1Z1x6D8Jji57QYnUvnK0G1tpO6RGOA8ELaH/+cOZKAiW SHYw93RkE9Zh43UCAAQjLxVEIq2lPS6/XuUXP6C3fExM0UHeQcSBBHxMgE+HsZsd gM+xpndL4HhGRvzOawq5cQUD5Eczoay4 -----END CERTIFICATE-----Generated at Thu Jun 19 01:24:50 2025 by rpki-client