$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: Cpjvgj0YYdgZNnHkLrTHtjNKga+I+0ob2tBCygEls/s= Subject key identifier: 4F:41:3F:D6:81:6D:52:BA:CD:6E:6D:78:ED:30:9F:89:0D:7F:2B:1D Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01A0 Signing time: Sun 29 Jun 2025 02:29:53 +0000 Manifest this update: Sun 29 Jun 2025 02:29:53 +0000 Manifest next update: Sun 06 Jul 2025 02:29:53 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: ysX09sUp0AERVNq9gh7iPzrSso+faumK8zjAJg65ihQ=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Jun 29 02:29:53 2025 GMT Not After : Jul 6 02:29:53 2025 GMT Subject: CN=6860a521-c23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:b2:10:7b:c8:b3:0e:47:06:29:04:01:1d: 83:8a:bb:0d:49:a7:20:4d:02:10:e0:b4:46:60:fa: 3e:64:2b:3e:c2:18:ca:41:2c:f7:a9:47:73:90:ba: a6:35:a0:0f:85:76:b0:0f:49:3c:da:5c:b6:7d:ed: c3:03:d8:48:33:7e:60:de:28:0a:0c:b1:20:e8:e6: 63:71:37:71:ce:8c:c9:ba:22:4c:c5:29:04:a9:91: e9:8d:5a:ab:1c:c0:d9:8f:b7:80:2a:c1:67:81:44: f6:17:28:36:a3:dc:ae:9d:10:b3:93:70:ff:1e:12: 97:ee:43:23:40:e6:2d:7c:38:80:65:ea:6b:dc:37: 3c:e9:8e:07:a4:e1:82:d0:88:03:c0:67:48:17:04: ab:6f:cc:dd:aa:5b:90:72:7e:12:7d:d3:9a:d5:09: b5:03:67:b9:a4:09:06:c3:01:22:20:b3:83:f4:ff: b7:85:1f:3f:b9:f3:78:25:32:b0:99:51:4b:33:90: 12:79:98:5a:61:74:1a:73:5f:33:37:a6:b4:80:b5: f3:be:d0:ae:92:11:aa:ff:c7:37:75:58:09:aa:0e: 3f:b3:4d:4f:23:99:0d:fc:59:2e:61:08:7b:26:68: a2:e5:d0:e8:b9:0c:d0:98:8c:8d:82:d8:8d:f1:36: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:41:3F:D6:81:6D:52:BA:CD:6E:6D:78:ED:30:9F:89:0D:7F:2B:1D X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:06:16:32:34:63:66:e6:54:2e:04:50:66:4b:73:ab:d3:e2: 9d:03:42:37:a1:9b:ad:e9:48:77:13:00:4e:44:71:9d:ae:ee: 80:e7:aa:9a:15:93:a5:ba:fa:db:91:cc:4b:65:2c:dc:40:bb: 90:2f:f2:d6:68:f4:33:9f:51:85:7f:44:d2:72:9a:e9:2c:e0: a0:70:d6:fe:a3:61:9f:d2:8c:36:9b:33:d9:6e:19:9e:ae:9a: 61:98:a7:58:6a:69:c2:a0:66:69:07:8b:7d:e9:d1:64:92:48: b2:80:bc:fd:a3:7e:cd:59:1d:25:35:bc:af:3b:3e:dd:ee:e7: 0d:f4:88:cf:75:16:a0:b0:86:89:6a:48:81:54:69:02:ba:30: 23:72:ff:2d:24:92:d0:70:01:d5:d1:af:d2:bc:e9:be:79:60: da:e4:ba:ac:3f:d5:57:e1:32:dd:07:71:ff:c7:9b:de:10:75: 82:f1:b7:ea:30:25:2d:4e:00:0b:65:85:4a:85:00:3b:be:3d: c1:14:cc:ae:4a:91:25:1f:6c:6c:7f:ee:8f:71:c1:29:da:a6: cb:e4:61:d2:d6:03:8b:44:a7:c3:a9:c3:5c:44:8f:a6:62:43: 12:19:09:55:20:a9:0e:be:c3:43:94:38:a5:ad:a7:9f:42:53: 1f:79:72:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwNjI5MDIyOTUzWhcNMjUwNzA2MDIyOTUzWjAYMRYwFAYD VQQDEw02ODYwYTUyMS1jMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf6yEHvIsw5HBikEAR2DirsNSacgTQIQ4LRGYPo+ZCs+whjKQSz3qUdzkLqm NaAPhXawD0k82ly2fe3DA9hIM35g3igKDLEg6OZjcTdxzozJuiJMxSkEqZHpjVqr HMDZj7eAKsFngUT2Fyg2o9yunRCzk3D/HhKX7kMjQOYtfDiAZepr3Dc86Y4HpOGC 0IgDwGdIFwSrb8zdqluQcn4SfdOa1Qm1A2e5pAkGwwEiILOD9P+3hR8/ufN4JTKw mVFLM5ASeZhaYXQac18zN6a0gLXzvtCukhGq/8c3dVgJqg4/s01PI5kN/FkuYQh7 Jmii5dDouQzQmIyNgtiN8TaWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9BP9aB bVK6zW5teO0wn4kNfysdMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUBhYyNGNm5lQuBFBmS3Or0+KdA0I3oZut6Uh3EwBORHGdru6A56qa FZOluvrbkcxLZSzcQLuQL/LWaPQzn1GFf0TScprpLOCgcNb+o2Gf0ow2mzPZbhme rpphmKdYamnCoGZpB4t96dFkkkiygLz9o37NWR0lNbyvOz7d7ucN9IjPdRagsIaJ akiBVGkCujAjcv8tJJLQcAHV0a/SvOm+eWDa5LqsP9VX4TLdB3H/x5veEHWC8bfq MCUtTgALZYVKhQA7vj3BFMyuSpElH2xsf+6PccEp2qbL5GHS1gOLRKfDqcNcRI+m YkMSGQlVIKkOvsNDlDilraefQlMfeXKE -----END CERTIFICATE-----Generated at Mon Jun 30 23:45:23 2025 by rpki-client