$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: F1YxGAf/IYNvWo8yzFHh2pQjubZEcKrauTHIk2gU3SE= Subject key identifier: 0B:B1:B2:A4:08:BC:C7:F9:37:ED:83:7C:9C:F8:D5:D6:E5:C1:C7:AF Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 3494 Signing time: Wed 02 Jul 2025 14:52:24 +0000 Manifest this update: Wed 02 Jul 2025 14:52:23 +0000 Manifest next update: Wed 09 Jul 2025 14:52:23 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: rRcPipWLR57ULTwxHab8rofL6cuHn3WBhz1O5p1Sgh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Jul 2 14:52:23 2025 GMT Not After : Jul 9 14:52:23 2025 GMT Subject: CN=686547a7-564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:59:dc:08:9a:59:ff:26:e0:21:9f:86:37: 5f:8b:5a:9a:40:4e:79:05:cc:c9:79:65:e5:7f:14: 0d:55:d8:5e:45:3b:e7:37:a9:a0:b1:f6:41:09:4d: 72:21:d4:63:6e:79:e8:6c:4d:5d:78:7a:af:e7:91: bc:0f:c0:7d:cd:5b:2f:24:7e:5c:b5:73:73:f1:3b: ea:da:4d:17:3a:5e:b3:06:3b:15:fc:88:b8:de:8c: 06:a8:aa:a8:b3:c0:12:2a:2b:a2:43:d8:7b:96:3b: 5b:43:d9:f8:f3:18:90:b7:e1:51:2c:27:8a:fc:81: 13:93:10:fc:a4:1c:83:4f:95:16:20:f6:3a:58:2d: 5e:b4:c9:b9:1e:dc:97:93:25:fc:6b:29:4d:a2:89: 45:e0:3a:6a:ca:d6:6b:06:12:84:2c:61:fc:49:88: bf:c8:7f:56:f6:d3:50:f4:d6:0e:12:33:75:3b:aa: ec:b3:89:bf:13:6c:d9:36:b0:41:85:4f:31:ff:f3: 31:44:3a:9f:8a:7f:8c:64:04:71:c5:a0:05:6d:5a: cf:df:e6:b2:d2:f1:3c:3f:31:60:d3:86:25:e8:78: cf:dd:f5:57:0d:2e:8e:9f:a1:1b:0a:1b:a6:31:71: ef:e8:59:05:fb:11:0f:1f:68:db:d3:f2:dd:7f:dd: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B1:B2:A4:08:BC:C7:F9:37:ED:83:7C:9C:F8:D5:D6:E5:C1:C7:AF X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:51:89:e8:55:bf:66:44:d4:8f:7e:94:c1:1d:3b:e7:a3: 36:88:66:96:5a:6b:e3:6d:84:ca:fd:6d:31:50:ca:f2:82:3c: 14:c5:a6:fa:ef:12:97:b0:54:b9:71:c3:80:39:a2:2c:db:19: e9:e6:25:44:ba:72:4e:ee:44:4d:64:17:bb:bd:03:a4:da:43: 42:4c:b2:05:5c:42:8e:e4:9a:4b:60:8f:e1:25:32:62:9c:a0: e5:2b:2c:ce:67:21:ea:6f:8e:d4:a7:f4:85:0f:8e:c4:12:fe: 92:3e:da:a3:90:4a:3d:5f:f1:a0:57:6c:61:f8:ab:6f:ca:9a: 3d:c3:e6:47:88:1a:49:b5:d0:0b:12:d3:aa:8e:a0:89:7b:89: d4:ce:7e:db:c2:72:25:88:98:b1:01:a7:74:be:68:d5:fd:fc: a1:fe:88:e6:bb:70:75:cf:e5:98:2e:61:65:de:37:ba:89:55: 29:90:e0:5d:d5:9e:22:2b:41:68:6f:97:a1:1e:3d:f1:28:d3: 6f:5e:e3:e8:3b:fc:38:ca:cd:08:2a:e5:7c:f5:99:29:8e:4f: 5a:3b:2f:ea:cc:59:98:10:ee:e0:d9:ab:4a:de:8f:43:60:cc: 43:73:e6:5e:47:cf:f3:3b:16:49:ac:6f:1d:4f:8f:63:38:b0: e4:52:7d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjUwNzAyMTQ1MjIzWhcNMjUwNzA5MTQ1MjIzWjAYMRYwFAYD VQQDEw02ODY1NDdhNy01NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi9Z3AiaWf8m4CGfhjdfi1qaQE55BczJeWXlfxQNVdheRTvnN6mgsfZBCU1y IdRjbnnobE1deHqv55G8D8B9zVsvJH5ctXNz8Tvq2k0XOl6zBjsV/Ii43owGqKqo s8ASKiuiQ9h7ljtbQ9n48xiQt+FRLCeK/IETkxD8pByDT5UWIPY6WC1etMm5HtyX kyX8aylNoolF4DpqytZrBhKELGH8SYi/yH9W9tNQ9NYOEjN1O6rss4m/E2zZNrBB hU8x//MxRDqfin+MZARxxaAFbVrP3+ay0vE8PzFg04Yl6HjP3fVXDS6On6EbChum MXHv6FkF+xEPH2jb0/Ldf92RqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuxsqQI vMf5N+2DfJz41dblwcevMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMolGJ6FW/ZkTUj36UwR0756M2iGaWWmvjbYTK/W0xUMrygjwUxab6 7xKXsFS5ccOAOaIs2xnp5iVEunJO7kRNZBe7vQOk2kNCTLIFXEKO5JpLYI/hJTJi nKDlKyzOZyHqb47Up/SFD47EEv6SPtqjkEo9X/GgV2xh+Ktvypo9w+ZHiBpJtdAL EtOqjqCJe4nUzn7bwnIliJixAad0vmjV/fyh/ojmu3B1z+WYLmFl3je6iVUpkOBd 1Z4iK0Fob5ehHj3xKNNvXuPoO/w4ys0IKuV89Zkpjk9aOy/qzFmYEO7g2atK3o9D YMxDc+ZeR8/zOxZJrG8dT49jOLDkUn1E -----END CERTIFICATE-----Generated at Wed Jul 2 23:49:42 2025 by rpki-client