$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: dM9/i4aD1V9PCVnmrkH/WI3iCOrivDB4ktrZ3CAOi6M= Subject key identifier: 14:44:65:9F:24:96:4A:69:0B:D8:C2:F7:D5:B7:1C:FA:08:05:51:24 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C47 Signing time: Thu 12 Jun 2025 18:16:24 +0000 Manifest this update: Thu 12 Jun 2025 18:16:24 +0000 Manifest next update: Thu 19 Jun 2025 18:16:24 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: avggJzc9H0NTPvn2rZrJfMC7bG7BgtKbVuAl0Nb1C8o=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Jun 12 18:16:24 2025 GMT Not After : Jun 19 18:16:24 2025 GMT Subject: CN=684b1978-20c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:90:e3:2f:20:4b:43:1a:d8:12:3f:0c:e5: c6:a7:4e:d4:46:2f:3d:56:e1:a6:a6:af:58:6f:29: 5a:4a:c1:4f:42:45:b2:3c:7f:ba:7e:b0:dc:60:b6: f4:56:b1:19:33:80:3f:ad:9f:c4:80:91:5c:94:74: 40:64:3c:d5:e2:a8:1f:33:c2:37:18:e7:9f:df:8a: ee:1d:16:15:79:da:9e:88:45:2c:9a:14:87:11:a8: 82:12:61:7c:db:10:b9:b8:ef:46:6e:a6:b7:6a:fc: d0:e1:20:af:eb:76:1b:74:28:ea:f8:fc:9f:49:66: cd:82:9e:ec:eb:d5:0f:f0:ad:9f:9c:3f:49:44:a1: b5:a4:1b:77:97:13:7c:b7:9b:f9:b5:28:42:e5:77: 9c:db:69:fb:31:53:54:dc:91:c5:5b:7c:18:0b:ea: 52:bb:fe:bb:e5:3a:45:f5:42:e3:66:fb:60:18:8f: 43:aa:8a:8d:75:0e:a6:ee:fa:e1:47:73:a0:f2:b5: 93:7e:55:f4:dc:9d:c8:24:93:4f:ac:03:40:57:56: dd:40:df:20:21:9e:c6:ec:c4:52:a9:92:4b:88:e8: f9:c3:88:c6:f6:4d:12:56:77:33:ce:3e:99:87:aa: 48:60:0a:c3:db:3d:85:eb:5a:85:6b:8b:4a:b9:08: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:44:65:9F:24:96:4A:69:0B:D8:C2:F7:D5:B7:1C:FA:08:05:51:24 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:da:69:bd:00:74:37:a4:9d:29:a7:b9:06:59:a7:81:a7:24: a2:1a:88:2d:15:6c:74:2c:92:b3:97:20:79:fb:62:e4:7b:22: f7:98:8e:1d:6a:44:8d:3e:e1:6b:e9:49:a2:c3:ea:ee:e3:c2: a1:39:ec:2a:0c:2e:b7:99:51:2d:e2:d1:c1:4f:ce:79:02:ab: 30:bd:f7:b5:c7:5a:cf:f5:33:22:1c:b7:4f:c0:fb:96:32:89: 12:c5:b2:a2:37:41:e2:d9:44:85:f8:cf:25:2d:fe:48:e1:1e: 59:d9:6c:9c:49:d9:52:7a:26:d1:f8:f1:06:d7:d3:9d:49:a7: b4:ba:38:34:90:de:2e:50:7d:b6:d0:fe:de:42:9c:1e:d9:d2: 17:42:3c:88:53:5b:fa:b6:3c:c0:56:3c:f2:9b:c0:12:9c:57: 55:e4:e3:a7:1b:8f:19:e4:bd:e3:5a:fa:e5:50:0a:cd:5e:f7: f0:ad:29:e0:ed:cd:fa:d8:ef:53:66:95:a9:83:45:4c:84:76: 79:66:10:7e:fe:09:2e:de:3e:46:73:64:23:e4:14:33:bf:99: ec:88:a3:1d:03:a1:f1:8c:1b:48:92:9d:09:14:37:79:12:1a: 8c:de:2f:d6:c5:5a:6b:2e:ab:67:6a:0a:ea:9f:2a:f9:6a:19: 6e:1f:8b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwNjEyMTgxNjI0WhcNMjUwNjE5MTgxNjI0WjAYMRYwFAYD VQQDEw02ODRiMTk3OC0yMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVCQ4y8gS0Ma2BI/DOXGp07URi89VuGmpq9YbylaSsFPQkWyPH+6frDcYLb0 VrEZM4A/rZ/EgJFclHRAZDzV4qgfM8I3GOef34ruHRYVedqeiEUsmhSHEaiCEmF8 2xC5uO9Gbqa3avzQ4SCv63YbdCjq+PyfSWbNgp7s69UP8K2fnD9JRKG1pBt3lxN8 t5v5tShC5Xec22n7MVNU3JHFW3wYC+pSu/675TpF9ULjZvtgGI9DqoqNdQ6m7vrh R3Og8rWTflX03J3IJJNPrANAV1bdQN8gIZ7G7MRSqZJLiOj5w4jG9k0SVnczzj6Z h6pIYArD2z2F61qFa4tKuQj8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBREZZ8k lkppC9jC99W3HPoIBVEkMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs2mm9AHQ3pJ0pp7kGWaeBpySiGogtFWx0LJKzlyB5+2LkeyL3mI4d akSNPuFr6Umiw+ru48KhOewqDC63mVEt4tHBT855Aqswvfe1x1rP9TMiHLdPwPuW MokSxbKiN0Hi2USF+M8lLf5I4R5Z2WycSdlSeibR+PEG19OdSae0ujg0kN4uUH22 0P7eQpwe2dIXQjyIU1v6tjzAVjzym8ASnFdV5OOnG48Z5L3jWvrlUArNXvfwrSng 7c362O9TZpWpg0VMhHZ5ZhB+/gku3j5Gc2Qj5BQzv5nsiKMdA6HxjBtIkp0JFDd5 EhqM3i/WxVprLqtnagrqnyr5ahluH4tg -----END CERTIFICATE-----Generated at Sat Jun 14 17:52:14 2025 by rpki-client