$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: AY8f3bJoWnQWMlX7il09hlXd0p4A7Evs7CUFSZ7Sn+4= Subject key identifier: 8C:13:E2:39:D8:21:95:A1:FD:25:16:95:C7:F5:83:9C:A2:BF:A2:16 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 012B Signing time: Sun 29 Jun 2025 03:42:58 +0000 Manifest this update: Sun 29 Jun 2025 03:42:57 +0000 Manifest next update: Sun 06 Jul 2025 03:42:57 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: 5pj6/vSGYjvyhDaDVUfHGYEnHcDCSpzAEB3b8QPMVU8=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Jun 29 03:42:57 2025 GMT Not After : Jul 6 03:42:57 2025 GMT Subject: CN=6860b641-df97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b6:b1:3b:3e:db:cf:21:18:2a:9a:b0:dc:cf: 1c:5c:b9:63:e8:a6:77:83:01:66:8c:52:8e:c5:9f: 8a:f3:a9:f4:bc:84:c8:bd:70:a3:04:57:4d:88:d8: fe:7b:f1:b3:8f:44:4e:4a:c2:19:87:b7:f1:0c:6d: e1:d9:8c:c2:a0:d2:72:b1:5b:6e:d6:da:c3:f5:7f: 82:62:e1:28:6b:8d:87:25:78:ae:39:38:a7:f2:95: 43:cc:de:02:07:7a:fc:a6:ac:57:8e:28:f0:6d:af: c3:47:6f:05:b0:93:1a:f9:60:cc:5c:ba:69:cb:fe: bd:04:b8:bd:ce:f6:76:0b:14:65:a3:1d:32:70:82: ad:90:77:b7:21:75:fa:b4:84:e4:71:5c:92:f4:99: c1:e5:45:ee:13:03:ff:3f:46:c5:f5:58:7a:86:c7: d2:c8:70:8b:2c:17:90:34:41:d5:a1:a1:ee:e0:7b: 00:71:65:cc:fa:a6:3a:b3:bf:c9:54:b6:f7:6f:48: 3d:11:9a:ab:6c:74:0d:9b:82:0d:8e:3f:62:06:07: 06:22:e3:c0:a6:54:43:9f:02:44:64:38:5d:60:7f: 3d:49:a3:6d:7f:d2:f8:8a:13:31:dc:6c:a2:a8:1f: d6:6e:61:41:47:f2:16:91:21:2f:1a:af:ca:ab:b4: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:13:E2:39:D8:21:95:A1:FD:25:16:95:C7:F5:83:9C:A2:BF:A2:16 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:80:3f:1c:4d:96:45:99:0d:25:ef:02:38:9c:e0:1e:94:b9: d9:e1:34:ab:cd:7d:e2:7e:f2:95:e9:83:98:6c:cb:0a:6b:4f: 5d:77:32:f8:96:e1:d6:53:3e:e4:87:88:7b:5c:ce:1c:a4:b4: 3e:67:b4:60:70:05:49:d3:94:3a:e4:02:cc:90:e7:80:90:70: a9:b0:f0:b9:05:e7:ee:ff:33:49:f0:93:7a:77:61:ad:87:8d: b4:ea:dd:30:a7:1e:a5:22:45:90:5f:ea:74:75:4e:b8:2a:cd: 7c:63:80:77:3e:59:7a:7a:6b:ce:1d:9d:a4:98:58:0f:69:6c: 41:3d:97:d7:1b:10:fa:6e:3c:69:ea:58:ec:7d:57:0e:40:48: 5a:63:e0:06:e0:65:73:40:a8:05:47:1f:59:bb:80:70:6f:60: cf:de:d7:f4:7e:38:77:d7:4b:05:2f:af:65:77:51:b7:62:75: fb:e6:79:f3:93:04:5f:aa:12:8c:93:db:5e:90:eb:11:7f:03: 6c:9b:07:db:bb:64:ae:f8:09:31:d6:ac:0a:f5:bd:b8:27:15: 16:4c:eb:b6:20:91:d6:ab:db:eb:d8:6d:54:f7:b8:c7:57:4e: 08:39:74:cc:a4:17:a2:8d:4a:49:1b:34:10:be:5b:2b:17:11: 5f:fa:66:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwNjI5MDM0MjU3WhcNMjUwNzA2MDM0MjU3WjAYMRYwFAYD VQQDEw02ODYwYjY0MS1kZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbaxOz7bzyEYKpqw3M8cXLlj6KZ3gwFmjFKOxZ+K86n0vITIvXCjBFdNiNj+ e/Gzj0ROSsIZh7fxDG3h2YzCoNJysVtu1trD9X+CYuEoa42HJXiuOTin8pVDzN4C B3r8pqxXjijwba/DR28FsJMa+WDMXLppy/69BLi9zvZ2CxRlox0ycIKtkHe3IXX6 tITkcVyS9JnB5UXuEwP/P0bF9Vh6hsfSyHCLLBeQNEHVoaHu4HsAcWXM+qY6s7/J VLb3b0g9EZqrbHQNm4INjj9iBgcGIuPAplRDnwJEZDhdYH89SaNtf9L4ihMx3Gyi qB/WbmFBR/IWkSEvGq/Kq7SlLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwT4jnY IZWh/SUWlcf1g5yiv6IWMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgD8cTZZFmQ0l7wI4nOAelLnZ4TSrzX3ifvKV6YOYbMsKa09ddzL4 luHWUz7kh4h7XM4cpLQ+Z7RgcAVJ05Q65ALMkOeAkHCpsPC5Befu/zNJ8JN6d2Gt h4206t0wpx6lIkWQX+p0dU64Ks18Y4B3Pll6emvOHZ2kmFgPaWxBPZfXGxD6bjxp 6ljsfVcOQEhaY+AG4GVzQKgFRx9Zu4Bwb2DP3tf0fjh310sFL69ld1G3YnX75nnz kwRfqhKMk9tekOsRfwNsmwfbu2Su+Akx1qwK9b24JxUWTOu2IJHWq9vr2G1U97jH V04IOXTMpBeijUpJGzQQvlsrFxFf+mYk -----END CERTIFICATE-----Generated at Mon Jun 30 18:30:19 2025 by rpki-client